Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: i3gJJbgAFkuk14JXidddbA5/mIyaCGoIw7x1MKT7JCI=
Subject key identifier: F5:02:39:BE:02:5C:9A:2A:CC:84:59:DC:1C:BC:05:87:95:58:C8:B3
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 019DA265573915F94D50BA21EA6DCD9D2D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 182F
Signing time: Sat 18 Apr 2026 21:00:43 +0000
Manifest this update: Sat 18 Apr 2026 21:00:43 +0000
Manifest next update: Sun 19 Apr 2026 21:00:43 +0000
Files and hashes: 1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: XSiDLGr5fQLxfRpWTYG/tu0GyKf2stZ7aYYEq5XFBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:65:57:39:15:f9:4d:50:ba:21:ea:6d:cd:9d:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Apr 18 21:00:43 2026 GMT
Not After : Apr 19 21:00:43 2026 GMT
Subject: CN=f50239be025c9a2acc8459dc1cbc05879558c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:1c:fb:92:29:4a:14:fa:f2:d9:49:6a:07:
61:cf:66:d3:66:7f:07:7e:80:da:90:51:e4:6c:cf:
cd:0d:08:88:19:a2:19:a5:ba:6f:00:70:20:c8:2c:
84:74:5a:d3:03:b7:77:9f:39:5f:fa:d7:8f:5e:5b:
89:e0:59:a7:2c:79:19:0e:c4:f0:8c:68:e2:8a:9e:
a6:fc:79:48:df:8a:c8:29:ee:c2:3c:65:9f:5e:06:
8e:27:5d:7b:8a:b3:8f:74:50:3c:66:ec:dc:8c:b4:
ce:5c:1d:dc:f4:d4:37:72:f9:14:1d:49:e1:0b:5f:
e9:2c:7c:d5:8d:61:9d:15:83:2e:c0:b8:26:ae:21:
96:df:b3:d7:f5:c1:34:11:4a:c1:14:88:22:e0:a1:
d2:ee:07:94:aa:ce:a8:0e:c0:d2:ee:24:5c:fb:af:
f5:27:04:61:d1:5b:40:f6:22:8b:37:25:f4:c2:55:
ec:49:7c:53:33:3b:de:3c:c1:60:20:c3:eb:70:a9:
9c:fc:95:5e:79:b0:32:f7:f8:be:46:24:08:a8:51:
e6:79:a1:8c:45:02:1b:a5:bd:8e:67:3f:f9:e1:6a:
de:c0:2f:4f:75:95:bc:e5:47:5d:9a:d7:80:b7:96:
28:54:99:8b:a5:45:9f:3c:d7:45:f8:9c:a5:bf:fa:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:39:BE:02:5C:9A:2A:CC:84:59:DC:1C:BC:05:87:95:58:C8:B3
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7e:e7:85:28:73:e3:c3:d5:6a:dd:6b:e9:ec:0e:27:98:eb:
67:e1:52:08:a0:f6:30:9a:f1:0e:5e:e5:33:1c:2c:db:02:79:
36:b3:49:6f:8e:7f:ff:7a:df:b6:8e:c8:76:32:4d:ed:2b:ea:
67:25:66:cc:33:db:54:e2:6a:0d:da:a6:9c:bd:7d:b8:72:47:
3b:e7:ad:00:aa:06:21:fc:36:75:09:61:96:5a:19:55:e1:ee:
4b:05:6d:18:9c:54:37:95:2a:05:84:9c:c3:23:21:c8:5e:60:
6d:24:da:12:f0:0c:86:b6:eb:38:02:51:6a:3f:89:e3:08:69:
dd:f6:f4:28:f5:6a:4c:d2:cb:88:d7:fe:85:83:24:1c:4f:dc:
ec:46:7b:1d:ca:c1:9a:99:10:e5:4e:95:bf:64:51:6f:b2:e3:
6a:8c:d6:38:ac:50:10:07:de:98:ee:1e:d5:4d:df:a9:2b:8f:
9c:cf:e8:0a:a9:ad:46:82:b7:36:e8:e5:bf:f7:b3:82:d0:58:
a4:97:3a:01:81:5b:56:13:a2:9e:c3:db:2e:60:01:6d:7f:1f:
8c:54:f7:73:e0:6d:86:e9:a1:38:03:88:9a:69:14:4d:df:46:
40:4a:82:7b:ba:d3:7a:b9:9a:09:b2:20:5f:79:97:b1:0d:30:
74:a5:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:13:09 2026 by rpki-client