Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: KrAfP6uX+CFz2TV+JOj2ANJbO76lbV/1QwIyehtBjJU=
Subject key identifier: B8:37:27:13:57:5F:1C:4A:28:93:1F:35:88:DF:84:20:A0:DF:E6:2A
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 019D29297977282AB273D882A7FE7D4A0796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 0C30
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: 80aZm-LOIfOj4b0pErlGBGKAQkw.roa (hash: eeqWFn0rrMt+3uQyEjN0WfmfLfKkgvr7/Sm+KMOotdU=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: IlsPS1n3c2aG9q8OXHQMhhaE/xc6ScA/bbaA0b6FjO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:79:77:28:2a:b2:73:d8:82:a7:fe:7d:4a:07:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=b8372713575f1c4a28931f3588df8420a0dfe62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:9b:51:66:90:fb:9d:62:d0:cc:a8:28:6a:
79:34:b0:9c:08:3f:9b:ab:28:75:e6:42:13:44:cd:
a8:72:92:85:19:c2:b8:f2:1b:a1:c4:38:1a:8b:53:
7f:5c:d2:7f:51:27:55:ee:d2:72:17:3b:ed:cb:f6:
a3:5f:66:85:95:d3:d7:46:5d:45:61:92:a8:bd:a9:
8a:2b:70:d6:cc:91:4b:d6:8e:70:cf:03:48:6c:ea:
a7:8d:db:b2:25:b2:6d:7a:a2:46:2d:22:09:e9:89:
cb:4b:b8:08:d8:1d:8e:1e:27:4e:c3:ad:a3:d5:92:
e0:d7:db:25:5e:47:fd:ad:6f:53:26:72:94:27:da:
09:f4:c5:bf:87:a5:85:b1:de:a4:27:2c:81:ff:e1:
56:b5:00:e5:71:30:b9:de:64:fb:04:28:49:ae:90:
8f:a3:91:73:e5:27:53:c7:89:5d:a1:dd:fd:f1:95:
52:ef:3b:fd:8d:00:e1:96:39:72:98:91:68:3b:d1:
d1:73:c5:8b:60:d5:a3:71:54:37:10:9a:8c:92:5e:
96:75:7f:06:a2:7b:88:f8:70:3d:29:a8:59:91:ce:
1a:22:14:47:0f:2e:55:4d:a1:2e:8f:a7:13:79:46:
cc:d0:72:1a:17:0f:96:23:58:ea:7a:c6:36:59:3d:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:27:13:57:5F:1C:4A:28:93:1F:35:88:DF:84:20:A0:DF:E6:2A
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2d:7c:85:a6:67:2e:6d:65:f0:47:9a:a5:ca:1d:4a:4a:70:
a5:d1:91:21:33:b2:41:4c:c1:d3:7a:d3:ab:0f:64:ae:34:37:
50:d9:6c:4b:1f:b1:54:19:ac:68:24:85:f5:90:07:af:15:a7:
0b:07:81:d8:ba:66:9f:dd:96:0a:05:c6:40:68:55:7f:ed:25:
9b:b8:06:8f:75:6a:42:e6:95:d7:6c:10:19:a2:8c:b8:58:aa:
63:b6:49:bf:13:90:8a:ee:eb:ae:82:56:17:26:1f:1e:91:e8:
f2:2a:31:e1:c2:06:44:4b:58:b1:d6:56:69:05:44:5f:86:d7:
7b:9c:56:80:0f:ea:a1:8c:22:ec:6f:d5:85:29:52:43:7b:1a:
6b:c2:7f:82:8c:00:31:61:c1:34:58:86:59:f7:8d:b1:a6:e8:
26:75:5c:38:18:e8:09:9b:e9:c7:a6:6f:52:08:90:e9:64:68:
35:70:98:9c:7a:d8:89:27:63:84:9c:3d:98:b6:35:07:5c:f2:
27:b6:07:0d:c4:6c:a6:7f:f0:cd:16:bc:c6:a6:0e:78:72:54:
e8:2b:8c:9f:63:c5:7e:b0:29:e0:3a:79:97:45:0a:b4:34:54:
88:e4:ae:47:22:a3:e5:cf:89:16:62:4b:2a:7b:8d:69:22:93:
f0:c7:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:45 2026 by rpki-client