Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: 3zhe8c13a7nQSijeKM2YfEpPXfXj4cR9ZJdnw/9MlxE=
Subject key identifier: 05:E3:BF:70:48:31:7F:8D:1A:64:80:EC:B5:0D:DB:D8:2D:38:A1:C4
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019D30AC67527B62983B25661F3FADDDAB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 096D
Signing time: Fri 27 Mar 2026 19:01:38 +0000
Manifest this update: Fri 27 Mar 2026 19:01:38 +0000
Manifest next update: Sat 28 Mar 2026 19:01:38 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: qzh2vh62kqjCq_kquaQFKN2dkjk.roa (hash: z2SqtvBA5B+Uxlu9McSqz/3+lS4dmqsulgYELWekW6s=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: A1og/I3aIELjR/39mSwDvLl3bAT78SgNvKLTKXs8ja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:ac:67:52:7b:62:98:3b:25:66:1f:3f:ad:dd:ab:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Mar 27 19:01:38 2026 GMT
Not After : Mar 28 19:01:38 2026 GMT
Subject: CN=05e3bf7048317f8d1a6480ecb50ddbd82d38a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:1a:86:73:54:e3:16:0b:78:2d:97:5c:65:
c9:9f:97:12:d0:db:41:ca:ac:39:a3:85:81:85:69:
b9:b4:b0:38:68:0d:9e:79:ee:3e:30:73:76:83:fd:
eb:36:f1:11:f3:a6:ec:29:4b:d0:12:47:c5:5b:a1:
9c:44:f3:b7:a4:96:f0:39:c8:1d:4e:92:15:d7:51:
49:2d:15:2c:48:a3:8d:b8:80:85:10:7a:6b:b1:b8:
5e:7d:9e:08:f3:9d:56:64:f3:59:10:51:89:26:1e:
1e:f9:59:63:c1:02:1e:53:6f:d4:8a:7c:19:5f:03:
30:cb:17:fa:ac:91:2b:9c:5d:94:7b:54:8d:63:0d:
43:f9:0c:6d:50:22:25:60:5c:1d:8a:7d:ac:2d:79:
4a:9d:6a:3e:9c:5b:7f:c0:27:ad:d7:68:1d:c5:12:
b9:ea:35:c8:9c:87:b9:5a:ee:6e:1d:e3:da:38:e5:
d8:21:94:06:60:1c:11:f6:26:99:02:3e:44:fa:5c:
78:03:5d:f6:2d:66:bf:a4:72:03:da:1f:6b:a2:d2:
f0:3b:b2:74:95:d6:b9:df:17:b6:b5:60:a9:ce:fc:
92:83:d5:c9:2f:44:31:5d:4f:21:60:23:87:a7:28:
4b:78:d1:97:78:28:2f:c0:3f:bf:38:5e:0b:ab:ff:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:BF:70:48:31:7F:8D:1A:64:80:EC:B5:0D:DB:D8:2D:38:A1:C4
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:18:31:7f:29:9f:17:4f:9e:94:8b:ac:8a:f6:83:aa:c1:fa:
e7:d6:6e:94:c4:4c:0d:48:31:d0:4e:0d:02:18:17:be:8c:da:
c0:16:94:7b:e7:cf:00:c7:9f:9a:13:6a:ac:39:08:fe:13:45:
ad:47:d8:13:cb:a3:7a:5b:c0:ca:fa:90:c2:59:e5:d9:5c:fc:
3a:e9:18:bc:87:2c:07:07:ea:ab:64:d6:5f:8d:4c:d0:b0:10:
96:bd:4a:e4:f9:0f:d4:1e:40:14:40:ed:22:5e:60:87:b1:aa:
a8:07:36:37:4f:2f:d6:af:d1:5d:20:cc:e1:67:7c:be:ec:9e:
fe:fe:77:e0:89:88:15:14:38:16:e9:ae:b9:d3:ca:2e:10:f3:
4c:de:58:e4:ac:4b:44:df:a5:63:7e:cf:d2:c7:f8:be:66:13:
66:c5:e2:5d:46:85:0c:6a:84:1f:4e:ed:72:d5:03:37:57:10:
72:2c:82:6e:97:37:ac:d6:3d:72:e7:62:f4:9b:04:e8:23:1c:
21:dc:37:58:04:61:ef:13:53:4c:34:b3:61:9f:5c:e9:74:27:
54:74:00:47:e1:01:cd:f4:f9:3f:ae:17:61:9a:36:2e:84:c5:
56:ae:1a:20:9b:30:97:f4:5e:66:f2:fe:07:17:c5:ec:8b:2d:
93:e3:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:26:05 2026 by rpki-client