Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: vBWm5JuWQ70OoaWULQCnHDj915EWp/o6BhR/pjM0j/o=
Subject key identifier: 7E:39:DE:30:2C:69:52:34:40:83:42:EE:88:1B:80:4C:D2:6B:D0:EB
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01A0E1E24F957A78B84AC0ADBA7C7C7CEDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0B58
Signing time: Sun 27 Sep 2026 08:01:40 +0000
Manifest this update: Sun 27 Sep 2026 08:01:40 +0000
Manifest next update: Mon 28 Sep 2026 08:01:40 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: fnvEaAT28borLlTTWpW2AtTD6ZE.roa (hash: NaMO1Gs4SP/y+KjGpBAZ+hgdfrK/8YBpbJ/SmLQlPcM=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: Qh2M0KpJj0RhpiQwwx/rpOh3LuMohXJReTR2ibhNMWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:4f:95:7a:78:b8:4a:c0:ad:ba:7c:7c:7c:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Sep 27 08:01:40 2026 GMT
Not After : Sep 28 08:01:40 2026 GMT
Subject: CN=7e39de302c695234408342ee881b804cd26bd0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:4c:a6:65:72:85:f6:0a:e5:a8:86:d0:e7:
53:b4:04:e7:cf:5d:48:70:8e:20:7e:b3:07:9a:da:
80:f3:1f:73:95:2b:94:27:e7:a1:7f:79:93:de:09:
ff:a1:2e:a9:af:89:fe:d0:44:eb:e6:77:a8:d1:2c:
76:77:bd:e6:a7:96:15:2a:29:ea:33:fe:95:80:42:
da:d9:7d:b2:99:52:ab:bb:61:a5:5b:86:9a:a7:e3:
78:7c:d0:6b:ad:54:ac:79:33:7f:b1:b8:c7:b1:b7:
52:b6:bb:89:dc:30:4b:6e:15:c7:e8:68:17:03:75:
2e:a3:e7:ef:9e:5d:2e:3f:73:fa:f1:7e:6f:b2:64:
5a:d7:cf:45:dc:fa:c7:2c:3f:ab:da:ea:31:f3:d1:
17:e2:16:7c:b7:4d:78:ce:b2:b3:28:ce:f6:3a:77:
c5:49:1c:3a:6b:27:fa:01:be:e0:a3:1d:b0:c9:a8:
0d:06:44:06:11:ed:61:0b:f6:a5:9d:e4:98:70:ba:
6e:fe:b9:6a:68:bc:36:b8:92:5c:c9:97:c7:6b:94:
41:78:f4:72:32:49:f4:27:07:71:d4:26:5d:e2:d4:
6e:ac:cf:7b:42:2b:e6:af:36:99:2d:1a:91:f8:67:
52:d5:16:1d:fe:ec:4f:6d:cf:3f:1e:71:c2:57:5d:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:DE:30:2C:69:52:34:40:83:42:EE:88:1B:80:4C:D2:6B:D0:EB
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6f:8f:2a:8e:23:73:59:71:e4:93:25:6f:55:9d:7b:32:cc:
7e:e3:16:cc:67:75:13:02:ff:40:f1:58:f0:82:e9:6b:a0:ba:
03:d6:b8:28:32:ed:2e:68:68:b3:72:ca:41:4b:5a:c2:d2:6c:
2c:24:ec:0a:68:7a:bb:c4:4f:3a:e4:7c:3d:75:f9:11:63:8e:
f5:cd:d6:ad:f5:e2:9e:36:91:1e:06:f5:b7:0f:bf:30:cd:89:
50:1a:c0:56:69:3f:85:cf:3a:15:af:d2:2d:51:0c:ff:26:32:
4a:be:47:84:6d:8f:8f:4a:5b:e2:b7:78:9c:a9:1c:e3:1c:f5:
b8:d3:6f:82:d2:7d:c8:e6:da:bb:ee:e4:bd:f0:e1:1d:0c:ee:
36:2c:f1:5e:a7:04:31:89:ba:90:86:5f:fc:fa:14:fc:80:ca:
30:30:4b:d4:f0:d0:2c:df:a2:b5:71:76:4f:70:cf:6c:4c:9a:
b8:1c:85:d7:1e:1d:04:ef:db:f7:81:08:9d:90:1a:ca:aa:26:
77:ff:37:bb:fb:49:83:26:b2:50:bd:3a:d1:a0:a6:8d:2c:1a:
a5:7d:5b:b0:f2:58:4c:d8:6e:bb:c1:f9:2b:90:d0:2b:cb:4c:
7c:a8:85:51:a9:7e:ff:f3:a2:a0:a5:04:b1:9f:e7:89:a8:f8:
e9:b0:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:38:53 2026 by rpki-client