Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: 6kIp4b7tFTF8/f2SskGUji5GHjV3V2vkZ4WlosAjg4k=
Subject key identifier: 0B:AD:61:C9:3F:46:7B:8B:1A:3C:D2:08:CF:72:DE:E8:D4:45:6F:C2
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 01A0DACCF665377C7CA619164D92C2A95848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1891
Signing time: Fri 25 Sep 2026 23:01:00 +0000
Manifest this update: Fri 25 Sep 2026 23:01:00 +0000
Manifest next update: Sat 26 Sep 2026 23:01:00 +0000
Files and hashes: 1: AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa (hash: H7RFq89YoSrzmmDi/9xMxCLOW54NyDvA/cZq9dYzaD8=)
2: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: +Wqk19E6/znZ0H3Z0lI9++HmjRp17+6XZFk2imgnrMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cc:f6:65:37:7c:7c:a6:19:16:4d:92:c2:a9:58:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Sep 25 23:01:00 2026 GMT
Not After : Sep 26 23:01:00 2026 GMT
Subject: CN=0bad61c93f467b8b1a3cd208cf72dee8d4456fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:1a:af:3d:a1:47:26:73:a6:84:84:1e:9e:
0f:03:1d:6b:30:1b:f6:3f:8f:89:15:9e:5e:c3:30:
99:85:72:a0:4a:1d:83:71:06:0a:f7:3e:3f:f1:d1:
f9:72:05:60:5d:cc:30:a6:00:3d:fc:67:8e:76:1a:
99:b5:31:b2:89:a1:11:3e:ab:80:d2:db:0b:69:81:
0a:39:cd:35:bf:6e:0f:ed:78:29:32:44:a9:f0:eb:
d2:e9:30:08:01:39:9b:c1:e9:34:0e:c9:f7:a8:50:
2b:1a:3f:87:51:f1:17:db:f6:fc:71:38:2c:43:22:
39:0f:44:75:3f:ff:c2:2a:b2:a6:38:5b:5e:09:73:
d2:16:30:92:c4:b6:8c:dd:75:a4:c4:27:ea:88:eb:
4f:59:0b:ed:97:c8:56:c4:19:60:83:f5:93:7a:1f:
e0:bb:ab:6f:4b:21:5c:6d:e4:39:9d:ae:0e:57:1a:
b4:73:d1:9b:a1:13:e6:53:d6:8f:6f:23:5b:fd:b3:
9b:a6:78:6f:97:fc:9c:0a:3d:1d:62:62:39:20:21:
0b:a4:a4:83:11:c1:60:01:c7:a2:57:58:dc:a2:b7:
0d:69:97:56:a2:25:19:0a:ce:f2:da:5e:00:6b:93:
dc:38:d6:cd:2e:de:bc:ab:8e:92:9e:7c:24:4f:39:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:61:C9:3F:46:7B:8B:1A:3C:D2:08:CF:72:DE:E8:D4:45:6F:C2
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:bd:8e:fb:b2:3a:09:88:78:cb:2c:03:71:7c:cb:10:a0:
75:9e:03:07:f9:0a:c1:74:f5:4b:86:1d:39:52:f6:cf:13:74:
aa:7e:98:d1:9d:19:89:3e:17:e7:6c:29:8e:17:07:b1:3d:93:
ca:e2:3e:a6:8c:7e:5f:d2:3f:7d:5d:9e:45:e3:f5:fc:7f:fe:
ce:4c:82:f2:8d:b6:39:93:36:86:6e:ff:f2:ea:cf:d2:21:e9:
19:c0:ae:55:4d:8c:0f:23:50:a4:2d:69:2d:b1:6c:fc:5b:0c:
8a:f3:44:cb:8f:1f:2d:81:cf:dd:0b:32:71:0b:62:6b:d7:70:
ae:b4:4a:c0:aa:c3:d9:01:b4:1f:63:f4:ed:60:fa:75:0c:34:
e3:9a:81:ee:22:5f:61:d5:a2:bc:1e:4d:82:ee:89:21:36:22:
6a:44:d7:5b:48:b5:ce:96:59:32:12:35:c0:c1:27:50:a6:cc:
f3:22:4f:37:92:93:cf:22:cf:67:af:cf:de:c8:c4:48:00:5b:
54:13:6b:8b:fe:ef:f4:8b:76:3c:e9:d9:3b:c3:45:ce:2d:2b:
68:9e:de:9e:8e:e9:6f:fc:a4:d9:1e:a6:5d:9e:8a:f7:3a:9a:
e0:20:35:f0:5a:e3:91:10:5d:2a:79:68:d3:a6:67:6d:5d:10:
e6:b7:8b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazPZlN3x8phkWTZLCqVhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1
YzdkYWMwHhcNMjYwOTI1MjMwMTAwWhcNMjYwOTI2MjMwMTAwWjAzMTEwLwYDVQQD
EygwYmFkNjFjOTNmNDY3YjhiMWEzY2QyMDhjZjcyZGVlOGQ0NDU2ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG0arz2hRyZzpoSEHp4PAx1rMBv2
P4+JFZ5ewzCZhXKgSh2DcQYK9z4/8dH5cgVgXcwwpgA9/GeOdhqZtTGyiaERPquA
0tsLaYEKOc01v24P7XgpMkSp8OvS6TAIATmbwek0Dsn3qFArGj+HUfEX2/b8cTgs
QyI5D0R1P//CKrKmOFteCXPSFjCSxLaM3XWkxCfqiOtPWQvtl8hWxBlgg/WTeh/g
u6tvSyFcbeQ5na4OVxq0c9GboRPmU9aPbyNb/bObpnhvl/ycCj0dYmI5ICELpKSD
EcFgAceiV1jcorcNaZdWoiUZCs7y2l4Aa5PcONbNLt68q46SnnwkTzmIowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAutYck/RnuLGjzSCM9y3ujURW/CMB8GA1UdIwQY
MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt
NmU2MzYxYmVhOTg5LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5
LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+G9jvuy
OgmIeMssA3F8yxCgdZ4DB/kKwXT1S4YdOVL2zxN0qn6Y0Z0ZiT4X52wpjhcHsT2T
yuI+pox+X9I/fV2eReP1/H/+zkyC8o22OZM2hm7/8urP0iHpGcCuVU2MDyNQpC1p
LbFs/FsMivNEy48fLYHP3QsycQtia9dwrrRKwKrD2QG0H2P07WD6dQw045qB7iJf
YdWivB5Ngu6JITYiakTXW0i1zpZZMhI1wMEnUKbM8yJPN5KTzyLPZ6/P3sjESABb
VBNri/7v9It2POnZO8NFzi0raJ7eno7pb/yk2R6mXZ6K9zqa4CA18FrjkRBdKnlo
06ZnbV0Q5reL+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:25 2026 by rpki-client