Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: XkmUFcrxl9jZsKZN6MwLMirW9bCgNFR5ZcgI7nDn4Jg=
Subject key identifier: A4:32:FD:69:A6:70:AC:91:9F:EB:F8:B5:64:81:B1:41:39:E4:03:89
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019D27DF6EEAA84933C378177C70EE3EB103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 7wu8741lnoQxUGEIjnl7UkZhvD8WVypBrg9pngMd2PE=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6e:ea:a8:49:33:c3:78:17:7c:70:ee:3e:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=a432fd69a670ac919febf8b56481b14139e40389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:16:1d:eb:1a:3f:74:2d:c3:27:c0:b6:5f:
72:72:4a:ba:ee:e1:30:6b:a9:ee:55:0e:b8:6b:68:
0f:80:46:62:e3:7c:57:73:e8:a2:ac:b8:f5:b4:46:
29:22:56:86:a3:a8:50:d4:7d:41:e6:02:e1:5a:33:
fc:e6:4e:a5:b8:f5:c2:75:dc:1a:74:20:ea:13:43:
2e:af:4e:e8:bf:23:29:a5:cf:61:9a:94:bb:f6:49:
c5:ed:fb:01:71:b8:7a:3c:b8:9a:89:ae:63:21:dd:
90:10:d0:ce:9f:d3:97:6e:8b:3c:ea:81:0f:36:5c:
6c:11:f7:11:fe:d5:4f:9d:14:ac:c6:3f:ba:26:32:
95:7e:98:d5:30:2a:cb:7d:d6:7b:53:54:9b:e3:ef:
6f:2e:ee:69:60:74:0f:b6:a0:3e:ac:44:75:12:26:
39:bd:19:0e:4e:a1:1e:0a:49:fd:bb:b9:e8:90:c5:
b5:26:6f:3b:eb:51:a5:8c:09:3d:8a:d0:28:db:99:
ac:09:ba:41:ef:e5:9d:88:9b:a9:7c:e5:d3:5b:83:
da:d6:d7:4b:05:62:6a:34:25:41:76:84:57:a1:cf:
72:0d:8e:1e:6e:d5:40:9d:ba:0e:8e:2b:ff:32:2e:
8d:82:e4:18:3b:48:b7:a6:c8:f4:a1:8a:ef:60:e4:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:FD:69:A6:70:AC:91:9F:EB:F8:B5:64:81:B1:41:39:E4:03:89
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:88:3d:1a:75:ac:60:bf:31:f3:4b:d4:22:c6:d9:11:65:
32:a5:7a:00:7c:a4:5a:fe:94:78:bf:b8:c2:f6:2f:c0:af:0d:
27:70:18:49:46:10:7d:ac:f3:c9:35:70:28:cb:3c:b5:3b:f6:
3b:f3:6a:08:57:7b:93:64:d8:2e:f6:bc:ac:f9:7a:bc:dc:98:
bb:a8:ac:70:ce:80:aa:13:4b:af:e7:b5:c4:18:23:73:be:d1:
ef:45:29:d3:2a:79:60:ad:76:15:69:91:f6:f9:39:5a:14:a3:
eb:58:7b:af:86:5d:23:09:b1:6f:ec:f3:7d:ea:72:0f:d2:de:
27:a2:93:1b:43:ea:8d:26:6b:57:d1:0c:d5:c7:f5:3e:03:de:
b4:33:84:a5:af:93:c3:63:03:01:8c:e3:6a:14:4a:ea:c8:39:
a9:18:58:dd:cc:6c:75:b0:2c:14:fb:46:ea:cd:b5:94:54:a3:
c2:02:4d:3b:c7:86:ad:5a:cb:d9:da:83:54:2b:64:e6:77:ed:
11:6c:57:ed:7b:a6:79:c3:d4:5d:c1:17:a4:da:8a:c3:2d:eb:
5d:f0:28:12:6b:e1:4e:1a:99:8a:c0:be:49:97:31:08:0f:b0:
53:58:60:f0:e6:4b:99:8c:a0:ec:18:1c:6b:be:63:ca:b3:4a:
d3:7f:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:03 2026 by rpki-client