Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: jH2i2vB9RYcE4Rkiis5kTOi078Sj2QEtPtquqcjWD+o=
Subject key identifier: 62:0A:9D:48:42:8F:C5:77:A0:8C:CC:C9:22:6B:80:3C:F3:D0:E1:57
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01A005B9C7CA950B8419BE175210C136063A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0AE6
Signing time: Sat 15 Aug 2026 14:00:56 +0000
Manifest this update: Sat 15 Aug 2026 14:00:56 +0000
Manifest next update: Sun 16 Aug 2026 14:00:56 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: fnvEaAT28borLlTTWpW2AtTD6ZE.roa (hash: NaMO1Gs4SP/y+KjGpBAZ+hgdfrK/8YBpbJ/SmLQlPcM=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: Gv6/FB8R333GRqbO1DoSRHtNuBKbLhTS6Zwa5W9FgeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:b9:c7:ca:95:0b:84:19:be:17:52:10:c1:36:06:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Aug 15 14:00:56 2026 GMT
Not After : Aug 16 14:00:56 2026 GMT
Subject: CN=620a9d48428fc577a08cccc9226b803cf3d0e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:d7:63:40:d5:6c:3f:3e:fb:2f:d8:8c:8b:
20:b8:4a:b9:c6:b7:ec:c6:94:1d:a5:8a:b1:92:f4:
09:4b:db:49:11:a2:51:71:c4:36:28:b1:ba:da:4e:
89:bd:d8:0f:7d:87:02:66:45:c4:1f:0c:fd:b6:1f:
e2:cc:df:11:a1:21:38:fe:d9:75:61:d4:6b:f1:86:
04:98:8b:ab:59:4e:51:31:b8:f6:62:1f:9c:05:7b:
16:cd:d3:5c:08:d8:4d:78:9f:06:06:06:0a:d9:f3:
ae:97:05:aa:5b:64:dd:b3:e8:38:b6:6c:c2:a5:4d:
c7:33:2a:89:d2:19:9e:4c:bc:6a:fc:60:f6:47:64:
c9:4d:35:41:87:ff:13:1a:20:cf:8b:cc:9e:e1:20:
3a:b0:25:85:2f:78:6f:c6:e5:ea:84:9e:96:f1:7d:
6a:f0:f4:74:75:92:c4:e4:29:b3:93:3a:1d:d5:f4:
d4:b7:6c:e5:80:5e:63:b5:42:50:59:44:cd:1b:af:
46:f6:e8:3f:4e:65:c3:96:ac:fb:9a:75:73:b8:21:
77:85:0d:23:f2:a1:a0:fe:64:be:35:81:b6:78:4a:
ba:ae:c6:bb:db:88:f4:f1:2c:c0:ec:7c:dd:6c:bd:
04:f1:2a:88:38:5b:ec:ea:ae:92:50:9a:86:6d:c4:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:9D:48:42:8F:C5:77:A0:8C:CC:C9:22:6B:80:3C:F3:D0:E1:57
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:06:ec:a2:06:c0:5e:12:45:41:f8:2a:84:43:4b:91:bf:f4:
12:3e:26:67:2b:7b:2f:17:a9:68:78:6b:10:7f:ec:e8:42:ee:
40:8d:64:d1:3a:c1:df:72:2d:70:51:f4:09:f7:fc:53:88:75:
cc:6c:98:2a:82:fb:cb:af:1d:22:e1:b5:cf:e7:b2:c3:72:9a:
f5:89:95:b2:dc:fe:a7:74:60:de:40:ea:81:ef:a6:9c:6e:c5:
67:ee:a9:70:94:ad:82:47:c7:fb:b5:09:a3:d4:21:84:40:d0:
37:a6:b9:41:9e:1d:b3:6b:e7:1f:86:41:91:92:3e:55:e6:0e:
4e:f5:bf:38:1c:68:57:37:37:f8:a8:f5:b8:7a:fc:56:40:28:
de:b6:f3:5b:8f:d7:f7:9c:73:e5:2f:19:75:7f:d4:32:72:61:
a6:5d:4f:7b:68:29:f5:86:ad:c1:75:28:2b:7e:1b:f2:ae:f8:
3b:21:4a:94:e2:0a:74:41:8e:83:ff:d2:0c:d0:80:8e:a3:0a:
9a:09:c6:61:eb:30:29:d7:1d:ef:2e:30:0e:7c:e8:54:11:13:
e5:2e:eb:55:61:d2:98:22:49:79:46:34:94:82:d8:86:83:3a:
81:c3:71:07:93:cc:fd:ae:8c:a6:d5:8f:64:24:49:c4:e0:5d:
df:54:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 16:05:30 2026 by rpki-client