Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: aylEgFvc4JeiL3Q35K1Y9a/Pu4wzGsVvclSjI+V22dk=
Subject key identifier: 4C:4F:83:E9:64:FF:6D:68:65:42:03:12:A2:AC:15:10:19:DF:EF:5C
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 01A0DC16FF23248C4284093081C37521B870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 05:01:29 +0000
Manifest this update: Sat 26 Sep 2026 05:01:29 +0000
Manifest next update: Sun 27 Sep 2026 05:01:29 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: lm77ODC+ERcFX6d6O4iKtzNwX2c8XOLR3LL/vAWLhn4=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:ff:23:24:8c:42:84:09:30:81:c3:75:21:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Sep 26 05:01:29 2026 GMT
Not After : Sep 27 05:01:29 2026 GMT
Subject: CN=4c4f83e964ff6d6865420312a2ac151019dfef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:9b:7f:69:ba:89:9d:d1:cb:c6:98:a2:a1:
dc:f8:8a:50:a2:a4:27:60:5f:14:8a:51:6e:91:1c:
4a:a2:13:7a:52:95:f7:5f:7d:63:be:cd:f4:b5:fa:
c2:bc:84:cd:3e:c4:45:84:9d:b1:e2:b6:12:22:71:
2a:52:55:c7:a3:ba:5b:d1:4a:c6:29:30:c9:67:1d:
25:12:6b:b7:46:c2:1f:ce:59:89:c2:13:ef:48:94:
b7:35:0c:91:b5:29:ab:84:48:ce:bf:45:c3:cd:f7:
8f:27:a2:3b:82:ea:3e:73:1b:5f:69:00:47:cf:8e:
36:64:88:a8:62:fb:fc:79:ff:4b:f6:fe:88:0e:79:
36:f4:34:b2:24:b1:9e:cd:66:7b:b0:a5:f7:4e:23:
09:28:1c:86:4c:93:bd:0b:7b:9f:89:65:64:50:6a:
d1:61:3c:ab:1b:aa:64:75:5e:00:fb:e8:ed:a6:54:
7a:c5:6d:39:0a:53:b7:06:43:d8:0f:9f:e7:2e:6e:
17:d4:11:84:14:63:c0:e4:4e:dd:0f:a3:26:f4:19:
94:27:83:65:df:d1:07:5d:64:db:7c:61:7b:6c:ae:
b3:b6:fe:4c:2a:20:bc:88:9d:f2:e4:6d:14:45:62:
2c:21:92:8e:bd:55:4a:38:fe:e4:80:df:e2:da:43:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4F:83:E9:64:FF:6D:68:65:42:03:12:A2:AC:15:10:19:DF:EF:5C
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:92:35:b9:d8:31:f1:a6:e8:e3:5d:3f:5c:e8:12:fd:2f:38:
e6:7f:44:64:25:0c:d8:0c:3a:24:5e:b6:45:1d:6e:73:77:33:
5e:60:c8:29:96:04:39:f0:a8:60:e2:07:06:a6:04:af:91:30:
e0:c4:1f:64:45:e7:53:e3:33:6f:84:6e:50:92:c4:b2:d7:88:
4c:a1:27:5a:d6:db:a9:69:65:f7:7e:86:91:95:d0:0c:03:e6:
e8:fe:bb:15:ee:42:7d:87:63:b1:09:4c:2a:8a:77:1a:3a:2e:
14:0f:08:0b:ee:2d:0d:ab:08:64:38:f7:48:a7:50:28:f2:1f:
42:c5:ca:22:55:f2:03:6f:b8:94:d4:d0:2d:ba:23:e6:c9:3f:
d8:61:e3:c8:46:72:e9:0d:80:96:fa:b2:71:db:a2:bb:93:21:
23:1b:9d:29:99:05:78:78:07:03:55:20:1e:8f:68:b4:d9:b0:
d4:17:5a:1c:4a:87:e7:82:99:75:84:49:71:d4:21:60:a4:25:
4b:5f:20:c7:d1:dc:22:67:3c:bc:58:51:6c:1a:a2:23:21:fe:
50:6c:45:83:f6:df:9c:e1:2d:1b:47:45:48:ad:15:b6:cf:bd:
2f:b5:1b:46:93:72:c2:be:4f:5e:83:69:54:8b:73:48:b2:13:
70:1e:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:41 2026 by rpki-client