Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: OnmRfWyikAWLLJ44rdRXL+yQlBjasCX3YDB02mySesY=
Subject key identifier: D7:DD:BB:EC:EB:42:C5:F7:6F:A8:8D:FD:F2:4A:09:46:F2:C7:1A:DD
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 01A06CF0163D7A313A63C69006E3718C7C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 19A1
Signing time: Fri 04 Sep 2026 15:01:08 +0000
Manifest this update: Fri 04 Sep 2026 15:01:08 +0000
Manifest next update: Sat 05 Sep 2026 15:01:08 +0000
Files and hashes: 1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: +H2G6innWj6BX+IGKBs/dj5I2gV44A+VjxijCnaq6TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:16:3d:7a:31:3a:63:c6:90:06:e3:71:8c:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Sep 4 15:01:08 2026 GMT
Not After : Sep 5 15:01:08 2026 GMT
Subject: CN=d7ddbbeceb42c5f76fa88dfdf24a0946f2c71add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:41:36:e4:e5:53:c1:17:e3:0d:5d:7e:ab:
2f:5d:e1:70:c4:bb:69:9b:39:ca:c5:bf:1c:f2:76:
0d:04:68:61:40:98:5d:a2:cc:96:e8:84:06:d5:a8:
4a:52:99:57:15:7b:90:d4:68:33:42:97:1f:91:37:
8a:b2:92:f7:62:0f:91:b0:78:15:ad:f2:75:30:c4:
bb:64:f6:a8:ee:0c:b7:b7:39:66:ce:a8:57:5d:3b:
e3:fa:96:ca:4b:b0:54:58:3c:73:1f:41:d3:34:c6:
b7:3e:6f:22:bc:1e:20:ed:2f:18:8d:7c:10:c3:ce:
59:47:da:79:1e:6e:81:fc:7b:97:f1:cb:1a:a6:64:
06:8a:59:ca:94:94:c6:3e:72:31:94:1a:84:16:81:
b3:3c:b0:3f:4c:2f:88:b8:a0:fd:97:8b:67:cb:03:
95:c8:80:6b:7f:91:d2:01:d0:7b:12:c5:39:3c:64:
39:82:37:e9:10:8a:41:a1:be:1e:3f:2f:33:b9:cd:
3c:eb:f7:25:cf:1d:c4:e9:a9:82:3b:7f:d1:da:c6:
6d:c0:75:e9:d4:3a:d3:70:34:63:55:99:74:5a:e0:
fc:7d:c4:d9:2e:b0:ea:e0:79:d5:56:37:d4:9c:38:
cb:9b:a1:07:87:84:04:db:7b:03:81:94:b6:9b:83:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:BB:EC:EB:42:C5:F7:6F:A8:8D:FD:F2:4A:09:46:F2:C7:1A:DD
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:9c:cf:47:73:ea:1d:e0:99:52:89:8e:ab:79:0f:71:5f:
8f:fd:d2:cb:f4:0d:6a:7f:56:3d:b6:e4:75:04:3c:e3:92:c5:
3b:fa:b9:af:d1:81:17:4b:1f:94:98:f7:d1:6d:1b:3f:8f:73:
92:55:47:62:d0:c3:97:30:f5:f3:cb:50:21:a2:ce:a5:31:8e:
37:cf:c6:61:6c:bc:f8:aa:1d:81:2d:86:bb:80:c8:71:6c:0b:
16:c1:2c:c2:4e:d2:ba:83:58:78:ed:91:1b:c3:54:ce:7b:92:
ec:82:a9:bf:91:fb:e5:ae:db:56:47:1f:7b:a0:34:5c:35:e0:
38:f0:c6:14:3b:a2:ec:5f:cd:12:2f:40:2f:e3:8e:f2:c4:ca:
4f:33:9a:45:93:52:90:28:93:4a:9d:68:9b:ea:5f:e1:5b:13:
cb:ab:48:af:49:e9:f0:79:01:5d:0d:4c:a5:41:39:bb:40:15:
54:b6:55:5d:a0:1a:4a:0a:8c:f3:03:0a:21:f0:40:2a:60:1b:
be:d6:9e:4e:7b:ad:ca:f2:be:1a:15:5a:19:02:31:70:45:98:
75:2f:9b:ae:bf:60:c3:87:d1:22:3b:34:e2:65:fd:2a:68:e7:
75:ef:01:04:35:d8:f2:80:05:13:14:5b:13:6e:4d:43:9a:08:
02:5d:24:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8BY9ejE6Y8aQBuNxjHxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMTVjZDhlNmRiMzU0NDE5ODRkOWM3ZGZjOWFmYjY1M2U1
NWRmZjEwHhcNMjYwOTA0MTUwMTA4WhcNMjYwOTA1MTUwMTA4WjAzMTEwLwYDVQQD
EyhkN2RkYmJlY2ViNDJjNWY3NmZhODhkZmRmMjRhMDk0NmYyYzcxYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdRBNuTlU8EX4w1dfqsvXeFwxLtp
mznKxb8c8nYNBGhhQJhdosyW6IQG1ahKUplXFXuQ1GgzQpcfkTeKspL3Yg+RsHgV
rfJ1MMS7ZPao7gy3tzlmzqhXXTvj+pbKS7BUWDxzH0HTNMa3Pm8ivB4g7S8YjXwQ
w85ZR9p5Hm6B/HuX8csapmQGilnKlJTGPnIxlBqEFoGzPLA/TC+IuKD9l4tnywOV
yIBrf5HSAdB7EsU5PGQ5gjfpEIpBob4ePy8zuc086/clzx3E6amCO3/R2sZtwHXp
1DrTcDRjVZl0WuD8fcTZLrDq4HnVVjfUnDjLm6EHh4QE23sDgZS2m4P+QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfdu+zrQsX3b6iN/fJKCUbyxxrdMB8GA1UdIwQY
MBaAFLIVzY5ts1RBmE2cffya+2U+Vd/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMt
ZTk1MGQ4N2Y4ZTI1LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMtZTk1MGQ4N2Y4ZTI1
LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+icz0dz
6h3gmVKJjqt5D3Ffj/3Sy/QNan9WPbbkdQQ845LFO/q5r9GBF0sflJj30W0bP49z
klVHYtDDlzD188tQIaLOpTGON8/GYWy8+KodgS2Gu4DIcWwLFsEswk7SuoNYeO2R
G8NUznuS7IKpv5H75a7bVkcfe6A0XDXgOPDGFDui7F/NEi9AL+OO8sTKTzOaRZNS
kCiTSp1om+pf4VsTy6tIr0np8HkBXQ1MpUE5u0AVVLZVXaAaSgqM8wMKIfBAKmAb
vtaeTnutyvK+GhVaGQIxcEWYdS+brr9gw4fRIjs04mX9Kmjnde8BBDXY8oAFExRb
E25NQ5oIAl0kZw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:24 2026 by rpki-client