Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: FKKqYZhf0OKO/ypHOB/4nK7hVJzHAwgLOL75VbxKUZ4=
Subject key identifier: FE:30:26:14:CB:6E:BC:50:FA:E5:8C:BF:44:95:63:53:9C:B2:0B:52
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019F93C8FA67F4BC95B8A264EBA05C4C96D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:00:49 +0000
Manifest this update: Fri 24 Jul 2026 11:00:49 +0000
Manifest next update: Sat 25 Jul 2026 11:00:49 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: etcwzWTuwHLYuFJJ0MgCP8ghJ++qksZkDPLch8nYW9M=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:fa:67:f4:bc:95:b8:a2:64:eb:a0:5c:4c:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jul 24 11:00:49 2026 GMT
Not After : Jul 25 11:00:49 2026 GMT
Subject: CN=fe302614cb6ebc50fae58cbf449563539cb20b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:fc:67:7b:09:ee:0c:41:54:79:29:86:6d:
08:eb:e2:d9:53:d4:6f:50:6b:e9:f3:d5:19:6f:df:
b0:90:1e:6d:85:ed:f9:dc:5a:ff:bd:a6:3d:46:13:
d7:a0:f4:57:64:18:d6:cd:f8:68:c1:71:2a:87:32:
1f:3a:42:f2:30:db:c6:6c:11:8d:d9:51:cd:c4:f8:
7b:f1:18:09:ba:f5:52:73:48:6b:ef:23:b8:28:6f:
94:66:f2:27:4d:a9:b2:bd:fc:e9:82:d4:ed:3b:7c:
c6:2e:55:23:67:30:59:09:36:5c:0b:f2:74:e4:9e:
ff:8c:b6:73:34:71:09:9d:98:20:23:5c:1b:2b:b7:
4b:c1:9d:58:2d:e7:49:be:a9:ba:71:08:c1:b4:4c:
5a:49:22:cb:bc:15:f3:4a:b6:6b:05:e6:5f:3a:d5:
68:fc:78:fd:25:3d:07:73:77:3b:58:46:1f:5b:d5:
f3:2b:d1:73:28:98:18:d0:fd:ec:06:09:5a:20:6e:
84:41:7d:05:fc:40:d2:31:16:7b:35:a5:47:63:63:
bd:cd:bf:6a:25:68:1f:98:6c:a9:01:1a:0b:0f:76:
22:ea:1c:fc:d9:81:5b:0e:2e:93:fb:2c:32:cb:3c:
de:96:4c:5f:f9:e9:e8:b8:62:cd:b3:7e:54:5a:fc:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:30:26:14:CB:6E:BC:50:FA:E5:8C:BF:44:95:63:53:9C:B2:0B:52
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a0:86:6a:48:f1:e7:ad:da:05:b1:45:4b:ee:67:85:64:58:
86:af:03:9a:75:6a:2d:aa:f0:7a:7c:17:a5:71:c8:0a:c5:35:
97:63:86:07:7e:41:70:ac:61:6d:38:87:23:81:e5:93:0b:1f:
9f:de:3a:d4:12:8a:de:26:85:cd:fb:42:04:9e:d9:5b:3f:d9:
91:27:97:ef:6f:cf:77:1e:7a:23:77:39:29:ad:dc:98:5f:95:
ad:28:0d:19:27:eb:6f:e4:1e:20:c2:bf:5a:f1:15:6b:7d:59:
c2:eb:34:09:33:a1:35:d9:24:ed:83:af:b9:e1:21:e8:97:18:
15:28:a0:55:8e:07:9e:0a:16:72:3b:84:b0:f9:1a:8f:5b:fe:
e0:9c:ec:c1:84:d5:98:3e:35:7d:8a:93:97:96:4b:30:99:42:
29:28:b4:d6:c1:9c:a6:db:ee:e6:f6:09:4c:97:57:76:15:3e:
e8:f8:e8:a5:6e:4f:11:93:9b:54:23:b2:09:e4:41:a0:4f:98:
4d:c0:1b:25:d0:4e:f7:82:fd:c1:76:0b:36:e4:9a:19:12:20:
b8:44:9a:a6:41:0a:c5:13:e3:83:f5:06:5e:ae:91:88:8a:63:
ed:d1:06:d0:4a:66:ab:d4:66:76:ed:15:06:8d:d7:51:4a:8d:
c4:68:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:06 2026 by rpki-client