Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: sMdogwppK/bvH8A3C65Y8exrOg8hjx6OwmLq0xF2YwI=
Subject key identifier: D9:BC:B8:7C:2C:01:AA:C4:2B:F3:9D:28:63:4C:8C:7A:A2:BF:39:47
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01A13E9530622A051AD6822FF2CFCCA07E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0B88
Signing time: Thu 15 Oct 2026 08:02:06 +0000
Manifest this update: Thu 15 Oct 2026 08:02:06 +0000
Manifest next update: Fri 16 Oct 2026 08:02:06 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: fnvEaAT28borLlTTWpW2AtTD6ZE.roa (hash: NaMO1Gs4SP/y+KjGpBAZ+hgdfrK/8YBpbJ/SmLQlPcM=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: g6b8+JJA+1E5eaDbFETYMRZprhuABhAsZnn4vd4bqyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:30:62:2a:05:1a:d6:82:2f:f2:cf:cc:a0:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Oct 15 08:02:06 2026 GMT
Not After : Oct 16 08:02:06 2026 GMT
Subject: CN=d9bcb87c2c01aac42bf39d28634c8c7aa2bf3947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:6c:4e:d2:88:d7:f6:59:e3:10:5c:09:60:
d6:e5:a6:ab:6d:d2:76:56:28:1e:a8:54:80:2e:38:
cf:d4:80:1d:13:3c:3e:55:86:4c:f5:65:a4:1f:c3:
79:2b:f2:bf:40:92:f7:09:74:b8:cd:41:fa:10:fb:
93:02:0d:de:86:73:bd:43:ce:9c:de:92:6c:24:50:
01:ad:95:0b:fd:a6:62:c9:bc:7c:15:61:79:77:b8:
0d:39:10:d1:74:d7:b6:db:06:51:03:3f:04:8a:37:
8c:d1:cd:a4:15:33:b6:6f:0c:20:58:de:4e:a4:f0:
08:d0:e1:5e:d2:19:f4:4c:06:b7:0c:e6:7b:e8:5a:
52:88:50:a4:d2:89:a1:65:f7:af:26:6d:51:d3:a9:
e0:22:e8:57:50:3c:57:32:13:1b:59:d5:ac:53:f3:
4b:b2:e8:2f:0d:3d:00:16:08:af:7f:0b:eb:7c:ef:
47:89:62:84:05:42:fe:b1:e5:46:87:55:13:64:aa:
cb:49:8f:1e:9d:94:e8:84:fb:2e:c2:b5:bb:67:c7:
1c:9f:07:10:e1:2e:7b:65:42:8b:1e:9d:1d:76:73:
27:40:e7:da:22:3c:2b:37:c7:dd:a0:e6:d2:0c:ad:
ff:3c:ad:98:6c:28:1b:d2:8d:20:e0:4f:0f:fe:db:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:B8:7C:2C:01:AA:C4:2B:F3:9D:28:63:4C:8C:7A:A2:BF:39:47
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:2d:d7:ce:b5:65:f9:59:e8:50:3c:07:d4:4c:d9:15:36:
dd:3f:8d:b3:99:38:70:dc:fc:99:46:05:c3:b1:04:fb:e9:0e:
44:0a:8f:59:80:57:f1:c6:b4:d4:53:bd:bc:bc:04:ee:82:8a:
d6:c0:23:79:c1:c0:9f:d9:26:d6:55:cc:84:ed:42:ca:74:79:
ba:b9:ec:6b:b7:8e:82:4a:bc:28:bf:b1:61:2e:64:a1:a0:cb:
a0:d8:ef:a9:51:32:b2:dd:87:e4:7d:07:9c:3f:d4:9b:8d:f9:
eb:3b:90:6b:f7:7a:9a:86:9c:6d:57:12:04:e9:db:36:a1:ad:
a3:db:01:4a:7b:93:39:06:9c:d7:e2:67:8d:e6:77:8d:e4:4e:
5c:1f:fd:6c:26:1f:fa:ea:63:a5:bb:d1:2a:be:5a:b9:e9:41:
35:2e:38:ba:2f:8b:85:26:56:6a:9d:c3:e8:ad:8d:50:5f:95:
8b:01:58:26:bf:7d:46:28:83:36:c8:0e:28:e6:6d:65:8f:fa:
b1:5c:72:0a:71:44:e4:5e:f6:8d:e0:cd:b2:f1:2b:f1:f2:5c:
96:80:a5:23:80:ed:a5:72:ed:04:4e:5e:d1:46:b1:51:8c:dd:
98:b9:2c:15:d8:ce:24:37:43:10:e4:36:19:35:d8:33:12:ce:
fa:64:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:16 2026 by rpki-client