Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: Oz2yakoVNkfvzTywCpZLLN8ieoC7FnGRsRARzxg4TBk=
Subject key identifier: 68:01:B1:9B:5D:DA:9C:3A:F4:57:F5:A5:F7:C9:9D:16:34:2F:6A:04
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019E1FB5DDA853CF15131BFC3FC0975E2A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1726
Signing time: Wed 13 May 2026 05:01:12 +0000
Manifest this update: Wed 13 May 2026 05:01:12 +0000
Manifest next update: Thu 14 May 2026 05:01:12 +0000
Files and hashes: 1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: XDT1npgoenhJCQz5YQF5Wyodt4S4p7x/YZBLL0QCytU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:dd:a8:53:cf:15:13:1b:fc:3f:c0:97:5e:2a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: May 13 05:01:12 2026 GMT
Not After : May 14 05:01:12 2026 GMT
Subject: CN=6801b19b5dda9c3af457f5a5f7c99d16342f6a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:86:00:da:0a:68:82:e3:47:4c:26:87:bc:
73:62:de:e0:b9:ec:e7:69:50:03:dc:d9:6c:7e:3e:
fa:53:2b:46:b7:ee:ac:a5:f8:18:69:1a:b1:98:4a:
27:a8:df:25:9e:56:54:35:c4:77:5a:a6:72:19:dc:
95:6b:93:c8:7f:2f:ed:f1:2a:96:29:40:57:c7:c5:
77:df:45:83:8a:4f:a6:20:c9:50:34:02:18:39:73:
b6:1f:08:f5:16:ab:88:6a:23:7c:46:62:b6:6b:49:
c8:df:a3:f2:1b:47:dd:f8:16:7e:76:b9:1f:b4:72:
be:e4:18:ae:c0:31:8f:a4:b7:9a:02:a3:27:88:a3:
81:59:68:30:01:99:ba:51:0c:be:cc:69:88:8f:6b:
c8:76:86:4f:d0:c6:7b:25:3d:c5:5e:00:65:a7:f5:
e7:37:3d:a1:e1:d2:0b:55:ab:47:54:ff:eb:55:91:
20:82:41:03:fe:b3:42:8a:2e:c2:b0:d7:e3:18:0c:
ee:fd:1e:ab:a8:0f:c1:0e:ec:39:ee:66:cd:be:24:
b9:e1:02:cc:b2:fc:1d:9d:22:6e:67:17:e9:16:cc:
06:09:43:29:67:23:58:f8:05:9e:64:8e:a2:43:ee:
a8:7c:34:53:3e:bd:20:6a:0e:0d:ef:4e:94:76:23:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:B1:9B:5D:DA:9C:3A:F4:57:F5:A5:F7:C9:9D:16:34:2F:6A:04
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:05:79:dc:47:25:84:19:99:be:4d:4c:49:3a:08:84:9a:5e:
17:87:b6:de:c5:da:81:90:a9:b7:9b:c5:0a:fc:c0:f0:0f:a3:
59:6c:a1:e0:8d:da:89:4f:80:65:10:cb:41:1f:51:4f:bf:1b:
1e:bf:f9:d0:bb:c4:b6:25:b1:56:5b:9d:7d:a4:d4:f5:41:f4:
51:ad:2d:38:ad:4c:5f:a8:0c:9c:82:0d:0a:88:a2:3f:fe:be:
fa:9a:b9:b0:9f:eb:19:48:56:0d:2e:94:e0:63:f4:77:35:36:
43:9c:51:88:cd:ac:ac:13:84:b7:1f:f5:23:1b:a6:47:7a:53:
f6:45:35:6e:e4:29:90:45:a4:65:9f:af:6e:56:d2:ed:cc:a5:
d5:9f:9b:e7:a0:53:57:ce:6c:88:76:13:94:05:13:62:50:d8:
d4:83:01:74:81:4c:49:00:12:9a:20:11:a2:2a:1c:ef:21:d3:
c1:a5:fc:cb:6f:48:97:99:44:e4:55:28:cc:97:a6:17:f5:34:
e1:aa:24:66:bb:54:2b:78:3e:60:dc:03:d9:70:8c:49:12:ce:
03:4f:9c:f5:3f:00:e2:ba:61:a8:04:b2:da:2a:20:d7:35:5b:
74:02:a4:fa:2b:e5:a6:89:40:3b:1b:75:3e:19:21:5c:af:56:
88:50:bc:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftd2oU88VExv8P8CXXiqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1
YzdkYWMwHhcNMjYwNTEzMDUwMTEyWhcNMjYwNTE0MDUwMTEyWjAzMTEwLwYDVQQD
Eyg2ODAxYjE5YjVkZGE5YzNhZjQ1N2Y1YTVmN2M5OWQxNjM0MmY2YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSqGANoKaILjR0wmh7xzYt7guezn
aVAD3Nlsfj76UytGt+6spfgYaRqxmEonqN8lnlZUNcR3WqZyGdyVa5PIfy/t8SqW
KUBXx8V330WDik+mIMlQNAIYOXO2Hwj1FquIaiN8RmK2a0nI36PyG0fd+BZ+drkf
tHK+5BiuwDGPpLeaAqMniKOBWWgwAZm6UQy+zGmIj2vIdoZP0MZ7JT3FXgBlp/Xn
Nz2h4dILVatHVP/rVZEggkED/rNCii7CsNfjGAzu/R6rqA/BDuw57mbNviS54QLM
svwdnSJuZxfpFswGCUMpZyNY+AWeZI6iQ+6ofDRTPr0gag4N706UdiPNGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgBsZtd2pw69Ff1pffJnRY0L2oEMB8GA1UdIwQY
MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt
NmU2MzYxYmVhOTg5LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5
LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAV53Ecl
hBmZvk1MSToIhJpeF4e23sXagZCpt5vFCvzA8A+jWWyh4I3aiU+AZRDLQR9RT78b
Hr/50LvEtiWxVludfaTU9UH0Ua0tOK1MX6gMnIINCoiiP/6++pq5sJ/rGUhWDS6U
4GP0dzU2Q5xRiM2srBOEtx/1IxumR3pT9kU1buQpkEWkZZ+vblbS7cyl1Z+b56BT
V85siHYTlAUTYlDY1IMBdIFMSQASmiARoioc7yHTwaX8y29Il5lE5FUozJemF/U0
4aokZrtUK3g+YNwD2XCMSRLOA0+c9T8A4rphqASy2iog1zVbdAKk+ivlpolAOxt1
PhkhXK9WiFC8zw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:03:13 2026 by rpki-client