Manifest
$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft
File: A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft (raw, json)
Hash identifier: 0ImT7EXk5qB9MD0OIzg34pGjXgU56TKw+lXbwW4leBU=
Subject key identifier: D6:DA:9E:D5:0B:1E:61:44:25:77:BF:B6:A8:61:A7:7A:99:93:6A:98
Authority key identifier: A1:DE:F1:36:10:4E:5B:E3:EB:CD:C3:91:E5:A0:A5:F9:D4:54:37:BF
Certificate issuer: /CN=a1def136104e5be3ebcdc391e5a0a5f9d45437bf
Certificate serial: 2580479A6BFD2C30F64F85798A380F3CAA29D865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od7xNhBOW-PrzcOR5aCl-dRUN78.cer
Subject info access: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft
Manifest number: 2B
Signing time: Sun 15 Nov 2026 04:48:22 +0000
Manifest this update: Sun 15 Nov 2026 04:43:22 +0000
Manifest next update: Mon 16 Nov 2026 05:55:22 +0000
Files and hashes: 1: A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.crl (hash: ZfVIZ/99uCbMPiO+dnaGa4lq5sOe7yCu9jDHTAEMrEY=)
2: AS219157.asa (hash: aTSU6alvEorBJzK9t9IjSwwA48+5jyBb6N5AOVuOi1E=)
Validation: OK
Signature path: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.crl
rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/od7xNhBOW-PrzcOR5aCl-dRUN78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:80:47:9a:6b:fd:2c:30:f6:4f:85:79:8a:38:0f:3c:aa:29:d8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1def136104e5be3ebcdc391e5a0a5f9d45437bf
Validity
Not Before: Nov 15 04:43:22 2026 GMT
Not After : Nov 16 05:55:22 2026 GMT
Subject: CN=D6DA9ED50B1E61442577BFB6A861A77A99936A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:df:31:32:3c:a4:b1:e4:f7:17:3f:73:b7:
a9:29:69:a3:1a:7f:7b:74:6f:84:f5:5a:dd:72:12:
f7:c3:0c:c5:83:aa:75:e7:ec:74:81:2a:fc:4e:c4:
35:b7:bc:f9:c4:81:ff:18:ae:43:a8:1b:2f:bf:84:
72:eb:97:98:0f:89:e9:6f:00:dc:6e:94:ee:21:2b:
7d:01:bd:cd:81:4e:05:05:ba:9d:89:d5:28:10:ee:
81:4b:c7:dd:23:8b:48:d3:71:a4:d7:69:e9:2c:ac:
20:a9:e9:9c:01:64:44:c2:4c:07:3e:e1:e8:12:60:
74:b6:1e:cd:ba:46:3e:6a:cf:90:3e:89:78:1e:08:
a0:b7:81:c8:47:66:f3:b9:9d:c8:fb:8f:93:4c:ee:
15:ab:ac:8e:ca:7c:18:bd:67:9c:27:72:c1:fb:67:
1d:18:da:e5:75:5f:38:7c:e2:18:94:bb:d4:1b:70:
b6:35:6c:fa:99:f3:68:8f:0a:66:d7:d4:94:ab:8d:
92:5d:58:b7:8a:2e:64:58:83:f3:2d:54:9c:6a:1f:
e7:33:dc:f1:b5:fc:7e:d8:15:04:3c:b5:1d:f2:48:
03:74:22:7e:3a:16:0d:40:78:3a:a0:74:ec:f8:c9:
a1:a6:3b:08:4d:2c:f1:43:af:b1:07:fa:b9:8d:1c:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:9E:D5:0B:1E:61:44:25:77:BF:B6:A8:61:A7:7A:99:93:6A:98
X509v3 Authority Key Identifier:
keyid:A1:DE:F1:36:10:4E:5B:E3:EB:CD:C3:91:E5:A0:A5:F9:D4:54:37:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od7xNhBOW-PrzcOR5aCl-dRUN78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/1/A1DEF136104E5BE3EBCDC391E5A0A5F9D45437BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:19:bf:32:10:66:20:a1:48:d9:33:92:cc:f6:84:9c:ce:
73:29:af:20:45:27:69:92:a0:2c:8f:09:35:4c:6b:0c:9e:55:
d5:1a:e8:72:27:f3:bf:9a:c8:01:52:75:23:7b:e3:64:8e:b1:
98:25:21:cb:b0:09:1b:13:9d:fc:89:ae:7e:80:64:2e:de:d8:
aa:4d:d0:10:9c:3c:fc:76:33:40:6e:8a:2d:14:a7:1c:af:1c:
43:76:e0:fe:4f:55:96:3a:e6:79:a4:c8:19:04:57:ee:e6:ac:
9c:68:2d:2c:7d:6e:13:e0:68:f1:f9:dd:fe:bb:6b:16:73:81:
0c:e8:e1:87:f0:0e:27:18:88:fd:eb:9d:b0:f5:a2:61:cb:ce:
81:0c:83:42:79:74:0a:46:1b:40:c7:7a:5e:ae:e3:16:47:04:
85:24:1b:75:1a:f5:5b:87:8c:e1:b3:a3:c4:69:f6:6b:f1:8a:
8a:5c:ba:41:14:70:58:90:7d:d8:53:b2:a1:39:06:09:10:e7:
a1:28:9a:32:92:7d:c0:31:b2:9a:43:ae:2f:c0:da:e7:b3:4e:
3b:41:cd:99:64:53:23:08:69:c2:8f:24:4a:48:b3:30:70:66:
0e:ea:96:58:a4:32:ec:2f:18:bb:9e:b1:a5:62:51:94:39:73:
f7:39:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:38:36 2026 by rpki-client