Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: sIm+ojYqEXcgitcXMQ4rz3zHnDrnAp27v/om9zIeNDU=
Subject key identifier: 0E:C7:0A:66:66:F8:2C:F9:D1:1C:A0:F1:88:6C:EC:48:B7:42:31:82
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 019D2996C3CEDEE5C56542E8CAE21AAD28CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0C44
Signing time: Thu 26 Mar 2026 10:00:39 +0000
Manifest this update: Thu 26 Mar 2026 10:00:39 +0000
Manifest next update: Fri 27 Mar 2026 10:00:39 +0000
Files and hashes: 1: BLwnlpOPwEzBKmF_4QRTJYpcxNU.roa (hash: v4Ot4HyO70Y+AHmwBRqB50tH8tjobdfYFYP+6RLw5hM=)
2: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: yKoiLfersb2Dinxt+dQIZMkouukR1BfF8vvqdZLtn6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c3:ce:de:e5:c5:65:42:e8:ca:e2:1a:ad:28:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Mar 26 10:00:39 2026 GMT
Not After : Mar 27 10:00:39 2026 GMT
Subject: CN=0ec70a6666f82cf9d11ca0f1886cec48b7423182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:20:c5:42:3b:4e:c0:70:af:77:5b:fd:c4:
d7:f6:81:52:07:20:66:0f:de:9a:6d:79:4c:0c:44:
60:af:28:4d:ae:20:ec:c7:3f:23:f3:89:b9:ab:2a:
28:a7:9e:ed:76:15:d9:62:12:40:f2:43:4a:81:55:
47:80:31:de:df:19:ef:cf:d9:cc:43:c6:dd:ca:eb:
fa:85:47:38:fd:16:6c:be:cc:ac:a6:94:8b:d3:f3:
fa:18:34:f4:f8:f7:fb:01:9e:39:6c:aa:a6:b9:88:
30:96:be:c1:4b:d9:0a:56:e4:b8:94:f0:f3:78:3f:
6e:7f:ec:7b:d5:ee:8e:b9:47:7b:5b:ff:6a:03:c1:
20:6b:4c:11:7d:1f:06:fa:71:99:d8:ea:71:af:f2:
d2:12:7f:75:05:2f:50:6b:93:e5:95:1e:c5:ab:85:
8d:5c:96:72:21:ae:66:38:3d:11:00:6b:15:35:1b:
6b:15:66:7d:aa:65:40:b1:c5:43:de:88:c7:66:d7:
d1:02:07:b8:7b:10:e8:91:2b:a0:42:ac:4c:2d:46:
73:64:73:1d:ba:5b:17:fd:7d:e0:dd:cf:dd:14:2a:
f5:af:99:2f:90:5a:4e:33:ed:71:7d:66:51:d0:e9:
d0:3b:02:53:6f:f3:06:33:e6:0e:ac:0d:aa:0a:a9:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:0A:66:66:F8:2C:F9:D1:1C:A0:F1:88:6C:EC:48:B7:42:31:82
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:90:8a:17:81:62:99:2c:bf:ef:d4:fb:a9:37:b1:02:29:
09:b5:50:7c:45:06:f5:e4:6a:49:d0:da:6a:b5:5c:eb:03:95:
c0:aa:23:64:9a:39:39:ea:ca:ad:db:6e:7d:53:a6:d2:83:dc:
2a:15:6a:27:a7:d1:7b:3b:75:d5:41:c0:b3:11:9c:69:0b:73:
1c:ba:1c:53:ff:8b:c7:3e:0b:25:f2:b8:58:d6:65:c1:2d:c2:
1a:6d:d3:1e:42:19:f4:10:18:01:8c:c3:29:70:9c:1b:af:fc:
5e:d2:51:e5:7a:8d:ca:a9:07:c4:b9:da:89:a3:70:c4:80:16:
fe:52:89:0f:02:ce:17:cf:33:bd:f4:16:ca:d0:44:9d:99:e8:
d8:c8:5b:10:84:a6:3c:20:4e:dc:7c:2c:10:74:a3:f1:be:b7:
0f:41:9d:69:2d:0b:79:f7:16:72:8a:59:1f:cf:2f:3f:14:89:
30:ef:22:36:90:73:9d:fe:11:63:b7:61:fe:a1:12:b5:c8:24:
44:3d:d2:a2:26:e2:67:01:6d:31:8c:8d:76:9b:90:81:4c:f5:
68:b2:51:57:0a:f5:a5:48:1b:23:81:d1:86:b6:08:b3:cb:80:
28:60:8a:93:9f:97:28:14:de:99:cd:83:d4:d2:e0:b2:53:b6:
d2:3a:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:13 2026 by rpki-client