Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: nx+2p1ybfmRdCA4cLuaxRHIhy0qwuuc3MRy61ocwq34=
Subject key identifier: 53:95:2A:94:57:A7:6E:B7:F3:C0:21:D3:DD:5B:FC:D6:54:11:76:EC
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019F8EA2B53BB2C9ED2AB36E764079A70569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 17E5
Signing time: Thu 23 Jul 2026 11:00:55 +0000
Manifest this update: Thu 23 Jul 2026 11:00:55 +0000
Manifest next update: Fri 24 Jul 2026 11:00:55 +0000
Files and hashes: 1: AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa (hash: H7RFq89YoSrzmmDi/9xMxCLOW54NyDvA/cZq9dYzaD8=)
2: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: L4UvN95kb4N0ZrmY9cuqTIhD1Y32YA6ghJsymE/ko90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b5:3b:b2:c9:ed:2a:b3:6e:76:40:79:a7:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jul 23 11:00:55 2026 GMT
Not After : Jul 24 11:00:55 2026 GMT
Subject: CN=53952a9457a76eb7f3c021d3dd5bfcd6541176ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:75:b6:77:c8:d7:53:06:37:2e:ba:45:20:
ca:99:30:7d:ed:20:40:79:a4:25:54:d9:24:23:93:
c2:9f:dc:98:48:19:dc:08:b7:8f:a4:78:60:72:91:
7f:54:6d:e5:ba:b8:e9:55:e2:83:d1:c7:3f:57:fb:
2e:02:ff:2f:af:98:81:4d:98:63:ea:f0:9e:40:89:
fa:ba:b1:f4:0f:80:5a:d8:c8:36:13:42:3a:26:9a:
83:82:a8:84:53:71:23:b4:61:6d:ca:06:ca:fa:16:
bf:42:58:2c:3a:c2:3c:c2:ad:16:ee:67:65:45:70:
8f:62:28:52:50:14:5c:c4:66:d9:1f:fd:dd:34:3b:
b5:9f:e5:1c:2f:1e:94:0c:eb:6b:df:e6:3f:65:1b:
00:5d:1a:69:9a:c6:3d:1c:33:f9:93:fd:a9:94:6c:
69:ee:84:90:8c:12:4f:62:32:90:19:d7:70:f2:6e:
54:62:e9:bf:05:c5:23:2a:ff:d6:91:1f:95:b9:a7:
35:9d:ba:52:49:8c:a7:27:79:24:18:46:4d:68:07:
b2:36:6e:4e:1b:71:4d:2c:7e:e3:7c:da:64:cd:63:
ec:fe:6d:13:63:4c:08:fa:b5:2b:48:b1:d7:a9:a8:
59:8d:d0:6c:b5:6d:19:8c:53:96:2f:32:3d:d0:a9:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:95:2A:94:57:A7:6E:B7:F3:C0:21:D3:DD:5B:FC:D6:54:11:76:EC
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:9a:b2:c5:95:28:32:7f:73:58:65:45:c1:18:db:98:ea:
46:b2:27:d4:fd:3f:88:6d:2b:3f:99:65:2c:74:10:9f:49:8c:
c9:1b:1f:96:b5:3e:96:aa:d6:a7:2c:72:0a:29:10:1d:67:91:
fc:cb:91:7f:be:be:f5:63:36:2d:d9:cb:e6:48:03:a2:d0:18:
1e:b0:07:05:7e:41:64:47:ed:d5:27:61:5f:ef:6b:02:d7:b1:
b4:21:ab:93:ef:38:1f:09:38:2c:5c:31:b6:1a:bf:6f:4f:8f:
7b:08:6b:98:ab:5f:ef:cf:f6:5a:fe:1a:32:b1:56:7a:2a:88:
2b:09:6b:67:3c:ed:47:2c:04:bc:e3:44:c7:a9:35:e6:e9:29:
df:b4:11:ee:df:ed:ef:43:31:4b:69:22:5e:c1:32:2c:c8:98:
94:43:b0:64:e9:a4:65:d7:92:33:74:52:e8:cc:2c:11:42:72:
a1:2c:ce:de:12:4a:6c:e8:1e:0f:fc:16:26:6d:e2:e2:6c:e9:
1c:42:74:9e:17:c8:df:bf:14:4f:63:cd:14:3a:47:e8:6c:85:
1b:a8:ad:64:73:56:58:c2:36:0d:49:66:ec:d2:98:91:45:83:
78:6d:c8:0c:3f:a8:ff:9a:16:bc:94:c3:86:92:0a:35:e4:6b:
51:21:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:59 2026 by rpki-client