Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: yZgfsce5lY2nZPcTKu74PuLeX0oMB12eDD0/cLZ66Dg=
Subject key identifier: EB:14:2A:7C:D0:E7:01:BE:21:F9:CB:E7:94:D0:74:8A:1D:B1:60:2C
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019E243702388EBCE115F0CF0402D9E26480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 09EC
Signing time: Thu 14 May 2026 02:00:45 +0000
Manifest this update: Thu 14 May 2026 02:00:45 +0000
Manifest next update: Fri 15 May 2026 02:00:45 +0000
Files and hashes: 1: FAa3npHJ-L9iUJPTk_A-3MIPVVU.roa (hash: JYa0nKEHZRi3AuXbXRg8MOneanSxScpD3pl7YEaHW68=)
2: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: 8SDyMQRK2G3d7E7O3S7//CwKgrws/0XIhLZMVSGuEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 22:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:37:02:38:8e:bc:e1:15:f0:cf:04:02:d9:e2:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: May 14 02:00:45 2026 GMT
Not After : May 15 02:00:45 2026 GMT
Subject: CN=eb142a7cd0e701be21f9cbe794d0748a1db1602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:a3:ad:5d:f9:49:68:44:2e:64:db:cd:c7:
89:36:a0:dc:83:46:50:9f:08:e3:68:31:36:11:0b:
fd:0a:c1:62:f6:86:5e:b7:6e:c6:01:34:60:27:44:
d4:2b:a1:86:e7:a7:c0:52:cc:cc:1f:8f:6b:d5:60:
ce:b4:3c:8b:3c:81:fb:1d:e0:6f:8a:df:ae:db:f4:
ff:55:43:26:6b:64:90:37:68:f3:ad:e4:d4:23:d8:
e2:cb:18:d2:80:54:4d:50:40:e2:b7:f7:06:e7:8b:
04:37:1b:97:fb:e9:8a:85:26:15:28:7f:0f:ed:c0:
1d:4d:2b:67:5b:52:00:d2:a6:2d:4b:72:01:09:a4:
a5:d8:af:f6:b5:af:2b:b7:ba:5b:5f:61:3d:d7:59:
ec:d0:b3:a8:6c:25:7e:61:ca:b2:f0:90:64:a5:8a:
68:8b:b4:e9:2d:31:b6:af:82:64:24:25:37:32:de:
ea:49:6f:33:31:3d:0c:f7:77:43:0d:f0:d9:03:b7:
e3:f7:30:c6:22:d6:b8:6a:59:b0:32:e4:60:df:02:
d3:4b:d0:be:6d:81:77:b7:b6:08:a7:d1:df:af:98:
02:4d:be:34:8e:b9:aa:43:0f:a4:32:70:8b:9f:b1:
46:7b:73:79:5e:4a:c0:a5:44:1e:89:90:d6:3e:b2:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:2A:7C:D0:E7:01:BE:21:F9:CB:E7:94:D0:74:8A:1D:B1:60:2C
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:a3:63:ba:a7:3e:8a:9d:25:0f:09:65:12:7c:90:59:80:
7f:a4:ab:9c:3f:c6:e7:00:3f:78:d7:62:48:b1:3e:a2:22:ab:
6d:07:85:4f:bb:b4:30:64:b7:e2:06:45:d8:a3:c4:49:a0:61:
8b:55:03:ac:b1:24:fa:1a:29:0b:51:dc:f0:ba:99:2c:e6:58:
21:c0:f0:d4:d3:4a:65:19:9d:1e:c0:60:d9:bc:c1:29:27:98:
d6:1b:3e:6b:07:f4:21:fc:08:46:e3:40:93:83:86:0b:b4:23:
9f:cf:5a:28:53:45:46:05:db:1c:e4:13:a6:da:d7:81:51:12:
e7:f9:bd:22:31:ba:08:80:8c:24:4e:03:10:b1:c5:75:54:82:
70:c6:49:29:69:ad:cc:3f:6a:af:1a:1d:68:19:26:3d:65:0a:
17:c5:1a:0e:72:f4:b6:ed:7a:29:d2:8e:fd:ae:f5:4c:05:8e:
0e:5d:23:9e:3d:f7:60:e6:e1:2c:53:2b:38:6e:9c:3d:df:33:
29:8a:6e:04:52:83:21:d5:ff:ac:55:46:35:25:12:96:be:d8:
85:4a:01:7a:8e:dd:b3:8e:24:67:a8:a8:7a:a8:2b:7e:bd:29:
5f:7f:b7:f6:69:39:86:41:0c:c8:c9:12:49:54:ee:96:ca:9f:
c8:b8:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 05:50:27 2026 by rpki-client