Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: 8AaLCZZHusOdQVHsytEI2Wmgb29xRLkswtj+CRklyLk=
Subject key identifier: 5B:F9:3C:E8:69:5B:B5:76:DB:09:A1:58:F9:40:B1:BB:2F:56:63:AA
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019F93C8E4046B9878026E1FCE85C5716802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0AAB
Signing time: Fri 24 Jul 2026 11:00:43 +0000
Manifest this update: Fri 24 Jul 2026 11:00:43 +0000
Manifest next update: Sat 25 Jul 2026 11:00:43 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: fnvEaAT28borLlTTWpW2AtTD6ZE.roa (hash: NaMO1Gs4SP/y+KjGpBAZ+hgdfrK/8YBpbJ/SmLQlPcM=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: EiAKcA4iUB15UPN+2zkardw5lZrpGXM/VnzmMkPrI1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e4:04:6b:98:78:02:6e:1f:ce:85:c5:71:68:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jul 24 11:00:43 2026 GMT
Not After : Jul 25 11:00:43 2026 GMT
Subject: CN=5bf93ce8695bb576db09a158f940b1bb2f5663aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:46:24:4b:94:2c:6b:a8:8f:66:40:c3:db:
ac:59:2a:b6:1b:2a:70:91:35:2a:c9:6f:19:0a:fc:
a1:be:c1:60:0d:dc:a3:53:06:e7:03:5b:14:62:e3:
14:f3:44:bb:ab:0a:86:3c:e4:96:3d:d7:f0:3e:55:
50:3a:ed:0c:f9:26:1b:f4:55:67:22:90:07:01:4b:
8e:8d:20:7d:36:3c:d6:10:0f:2d:f9:e8:9f:7f:f8:
5e:ab:94:b7:49:ac:02:58:1e:f7:0d:5e:6d:7c:80:
87:b8:86:80:e3:10:c0:bc:7b:65:16:40:79:b9:39:
b9:d8:8f:d7:e4:ba:4b:5f:fd:be:04:eb:5d:24:38:
27:b1:3f:27:b5:b9:ae:b5:19:b1:31:69:cc:c0:ff:
af:fa:a4:b8:47:55:f4:88:46:40:a5:a7:9a:ac:6e:
6c:e9:2f:ae:64:00:f4:35:2f:df:cd:aa:ce:ef:83:
40:9a:c3:42:09:2f:74:a6:4d:74:16:3b:f7:20:80:
e7:57:72:39:ac:66:5d:9d:03:62:62:95:ec:5a:05:
bb:27:25:2d:31:53:2c:73:eb:12:4a:f5:d2:d1:d1:
d3:90:d2:bc:3e:27:1d:dd:e5:e9:c5:45:93:4f:a9:
ee:7e:ae:c1:78:6c:18:43:45:35:cd:df:a7:ae:69:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:3C:E8:69:5B:B5:76:DB:09:A1:58:F9:40:B1:BB:2F:56:63:AA
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f9:a0:06:91:92:a2:6f:f4:eb:88:a9:62:84:ab:82:9e:1e:
c3:e3:fa:6e:87:4e:13:52:b3:ac:40:f4:44:83:e7:dc:96:c2:
6a:6f:db:8a:41:04:fb:e4:63:66:46:38:cf:1a:fe:48:ad:ea:
cc:1f:a7:07:7e:83:2e:92:cf:0d:af:86:42:ce:ea:22:ae:1d:
42:18:1e:2f:81:3e:04:85:0d:29:b4:ae:26:73:a8:b1:23:a8:
f1:39:d2:0e:0a:b3:53:dc:53:ce:91:c9:c8:e5:01:ae:ce:bb:
d5:74:d3:d6:91:1c:13:30:84:ee:b6:9e:38:b5:06:12:7a:60:
d0:89:9b:92:37:50:ae:b2:1d:70:bf:7b:be:d1:c9:0c:bb:4c:
51:52:ab:5b:07:42:d5:4b:e2:58:16:01:d5:99:c5:2b:19:16:
3e:90:3f:85:09:0b:82:0d:8f:38:0c:3b:4c:96:da:15:1c:34:
2e:4a:ec:3e:d1:0a:70:5a:96:f1:9f:a9:38:b3:bb:f4:b0:c7:
84:d5:72:d4:d5:d1:58:2b:bf:a7:a1:a8:07:63:0b:d3:2f:13:
96:6f:a1:72:00:3a:c7:0d:61:07:70:66:95:19:1e:39:f9:f2:
c8:33:34:17:5c:9a:e7:5a:00:4a:d7:46:f8:d3:f6:12:e7:f9:
5f:95:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:17 2026 by rpki-client