Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: z0HMc9MYtGpOBJQEH4haNUQG1QJR/FCv4kLT3w3VcKI=
Subject key identifier: 4C:77:C7:E9:D3:93:72:95:55:22:F0:A1:C1:A4:6B:1B:B0:4E:39:BD
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019D2695C58DFCB5D49AE43D0891D41136CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 16A5
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: aW5sjsnkvTrqUEVNrPNnrMKo7Xd9MiPeRXZfqk4v7PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c5:8d:fc:b5:d4:9a:e4:3d:08:91:d4:11:36:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=4c77c7e9d39372955522f0a1c1a46b1bb04e39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:03:03:0c:f7:d7:1c:35:b9:b3:a3:3a:ad:
a2:07:a3:4b:60:97:a9:ec:33:21:1d:d9:9f:dd:83:
d0:81:72:45:d3:b9:c3:4a:62:23:c6:74:77:46:1d:
13:90:4c:db:8b:25:d5:58:85:b7:b8:f2:1a:bf:ab:
a2:0a:39:ff:49:d5:57:a8:83:33:22:7d:08:97:a1:
54:f4:ad:d5:bc:0a:1e:0c:8b:95:04:fa:d7:74:37:
39:81:90:92:37:f5:63:83:2f:01:de:ba:cf:24:6b:
dc:0d:84:b0:c3:e4:1f:b7:55:1c:da:ea:5f:7d:f8:
95:8c:82:ae:62:5f:67:48:26:2d:5c:b9:28:47:ae:
ad:a8:59:5b:b5:d2:ad:48:7f:d1:88:ec:dc:f9:96:
2a:a0:7f:79:ae:56:56:52:d6:de:52:c6:7b:96:9a:
87:eb:bc:a1:e2:e8:2a:86:3d:d7:8d:fb:b1:de:27:
81:1f:bf:00:0c:d6:97:3b:00:bc:27:1a:6f:be:29:
66:af:50:cc:6c:c6:58:8f:60:74:58:d2:75:60:e5:
8e:ed:68:2c:b7:eb:41:11:6c:40:a9:1f:15:0a:18:
7b:0b:07:5b:c5:4f:1e:aa:41:99:7a:a8:1b:54:5e:
d8:0d:41:54:ba:b8:cc:96:42:6f:9e:52:24:bf:40:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:C7:E9:D3:93:72:95:55:22:F0:A1:C1:A4:6B:1B:B0:4E:39:BD
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:17:fb:c1:fa:6c:b7:15:92:7d:d5:01:f1:c0:d9:90:d9:69:
8b:6e:ab:a9:c4:39:70:7e:ce:f3:2e:30:7f:1a:a5:d6:20:19:
ef:75:63:94:e4:f3:37:b2:62:d5:f1:b6:2e:33:d5:6f:22:4c:
ac:a4:13:d4:16:7b:c1:65:1f:7e:8c:6a:50:76:5b:08:b4:fe:
1e:f3:3e:86:38:8c:df:31:9b:24:4e:74:3f:3c:d7:64:e7:45:
d6:68:c7:d9:50:96:58:7a:59:77:b8:23:4d:15:d3:fe:e0:81:
e9:e8:f4:fd:7f:2a:ff:c5:ed:e0:aa:81:df:25:90:bd:54:f7:
46:8b:a1:00:b0:90:cb:fb:5a:9f:33:bd:59:9f:ce:7a:33:ae:
d3:39:21:6e:4e:70:97:f1:db:a6:87:21:e3:03:cd:8f:c2:93:
6d:32:87:f3:ec:3d:c5:7d:c0:5b:04:aa:84:ac:c4:f8:7e:93:
d4:6f:79:65:94:10:5b:2f:8d:0b:1a:43:09:65:42:3e:24:f4:
59:35:b7:b7:d5:2d:a4:ab:81:fd:1d:f7:ff:9e:55:42:72:84:
1b:bc:bd:cc:17:3e:62:3a:71:17:f5:19:a5:84:0b:98:7f:56:
3e:ff:b8:67:8a:b9:b5:3a:34:00:a9:d2:13:3d:87:46:db:be:
49:33:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:15 2026 by rpki-client