Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: /E4bFPV9bqr17+ANUtwabga4JDEpde843H8jgBCktto=
Subject key identifier: 8F:FD:79:B7:A9:4F:92:BC:F1:34:28:91:D3:D5:49:E4:89:D3:55:A0
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019F130A55FB1D6D768D90BA48D68380B94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0A68
Signing time: Mon 29 Jun 2026 11:01:12 +0000
Manifest this update: Mon 29 Jun 2026 11:01:12 +0000
Manifest next update: Tue 30 Jun 2026 11:01:12 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: Z-wGqJ-biofcF-Vp1NpHNNfxruM.roa (hash: ytiGi9sMZ7eWVpKKgVpL56C1f1ratIXBHa487lrjtIA=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: FwlHxiyPWC0zLf6sp1jZn2ZT7Pnn3FGiu5FzcA9gUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:55:fb:1d:6d:76:8d:90:ba:48:d6:83:80:b9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jun 29 11:01:12 2026 GMT
Not After : Jun 30 11:01:12 2026 GMT
Subject: CN=8ffd79b7a94f92bcf1342891d3d549e489d355a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:cc:57:05:72:b3:55:c8:ae:7c:ff:9b:0b:
38:81:6a:01:1e:28:9c:93:e7:8a:04:57:42:58:ff:
be:ad:07:0b:1d:d5:bf:f8:a7:3a:b6:6c:77:d2:30:
cf:fb:54:57:8f:16:e6:d6:2c:cd:64:24:d5:c7:49:
89:fd:da:4f:56:8f:25:b2:59:17:c2:97:50:e6:06:
78:5c:80:96:9b:23:39:3b:62:c6:90:31:ab:f5:ff:
80:70:62:fb:c1:cf:b5:c3:88:65:ae:65:34:4a:9f:
52:c6:58:5a:e8:02:dd:0f:b2:5b:59:22:c8:a8:3f:
4e:c8:6e:9d:19:d2:3d:16:33:dd:e6:85:60:fd:52:
8a:9a:02:d1:d6:38:49:de:6a:35:4d:46:f5:44:f8:
ff:4e:36:6b:d9:ae:39:44:7b:a6:0f:35:3d:fe:ba:
d7:e1:ca:e4:71:04:17:d2:c6:7d:d4:0c:94:45:4a:
6d:2c:98:8a:93:ef:e7:9c:67:e7:2f:8e:1e:39:11:
9c:f7:b2:2b:9a:f6:c0:c1:9a:9b:3e:10:80:bc:be:
02:ae:c3:50:60:61:cc:98:ec:fb:84:ba:3f:c5:3b:
e1:92:bd:5a:f8:ee:9a:f8:2c:ce:ce:d0:a8:c7:73:
69:3b:30:62:b2:7b:46:23:ca:ac:26:7d:dc:90:66:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:79:B7:A9:4F:92:BC:F1:34:28:91:D3:D5:49:E4:89:D3:55:A0
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:f5:a8:00:c8:bc:5f:d6:7c:eb:05:fb:6a:f1:01:67:74:
77:70:8e:4f:c9:67:f0:0b:9a:86:5a:65:e0:c4:37:5d:92:46:
c1:33:0a:8d:37:1a:61:11:9a:df:52:ca:9a:90:75:27:63:b9:
75:2d:ba:e7:b6:2e:c0:f8:8b:6c:d3:1d:03:33:0e:3a:bb:26:
6c:ce:dd:03:bc:6b:b8:a1:e8:3f:ff:4b:df:9a:e3:42:70:3d:
fe:04:ab:43:92:be:7e:61:56:6b:ce:be:89:6d:70:80:d6:c4:
f5:9e:cd:02:c5:a2:0e:57:fe:17:df:68:14:80:18:26:dd:8d:
20:0d:18:8e:32:a9:92:07:50:24:6a:82:c9:8a:96:e6:c8:71:
ea:0d:e6:82:bd:9b:d1:b9:32:78:d9:aa:b4:e7:56:d6:6f:e1:
d2:90:98:82:dd:c9:83:05:4c:39:5e:f2:fa:71:ff:ca:e4:f1:
96:b3:d7:08:80:63:ec:21:40:45:cb:5d:a9:f7:d7:0d:1e:bf:
92:e4:4d:dd:53:de:7b:ef:54:5a:05:6b:36:74:d9:28:0e:59:
a9:74:74:98:e9:a1:bb:1e:3b:58:5a:c8:72:c0:9d:f2:e4:f2:
b0:b1:95:0a:cf:b4:85:4c:eb:be:37:e0:92:cd:86:11:b0:91:
f8:5a:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:58:43 2026 by rpki-client