Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: 8kg1HXJ9hZ91KkttW0rVPIdniMLVjrzmb3KwhjV4HG4=
Subject key identifier: 8C:F7:AA:17:AE:8F:D8:54:B1:98:A6:EB:88:6F:34:C1:37:72:6A:A9
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 01A164212F1D81355EA9402E56A000DAD083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 1A21
Signing time: Thu 22 Oct 2026 15:00:58 +0000
Manifest this update: Thu 22 Oct 2026 15:00:58 +0000
Manifest next update: Fri 23 Oct 2026 15:00:58 +0000
Files and hashes: 1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: PW3t0eiLrI2OPttU1YaiL6yNaOhShyRWggL1wX0A064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:2f:1d:81:35:5e:a9:40:2e:56:a0:00:da:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Oct 22 15:00:58 2026 GMT
Not After : Oct 23 15:00:58 2026 GMT
Subject: CN=8cf7aa17ae8fd854b198a6eb886f34c137726aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:8b:10:66:28:af:82:16:e6:b0:40:ca:a1:
1c:10:17:1b:c6:4f:ee:df:74:31:8a:48:20:dd:c5:
18:60:68:99:3a:9e:72:27:22:72:5d:14:9b:71:aa:
b2:cf:e3:cd:5d:68:eb:33:ba:87:0b:de:cf:4c:7c:
cc:04:43:ad:75:14:c0:57:0d:9f:56:2f:0b:43:4e:
41:97:2d:0a:26:d6:ab:83:36:a7:b2:e9:f9:60:e5:
b1:0d:17:92:7e:7d:76:32:31:62:9f:1e:0d:60:1c:
61:24:6c:30:8e:57:46:b3:3c:f8:ae:f8:cc:bb:e1:
e2:d1:d5:a4:40:7f:39:a9:3c:6b:2d:a2:a2:3c:73:
e6:7e:38:d8:1f:03:cc:65:e3:e8:f9:40:63:2f:d0:
5a:71:da:b6:0a:f5:db:38:00:94:5b:47:81:11:2e:
c1:2a:ae:d0:f8:89:be:a7:f8:65:e2:94:da:73:8d:
ed:77:2c:1f:64:b2:bf:b0:08:85:5c:d8:b3:3e:c9:
fe:97:30:4c:0b:4c:47:1f:03:f3:08:05:a5:4e:99:
f1:f7:fa:9e:4b:c7:b9:a6:75:04:f8:11:5c:1c:96:
3b:42:a6:14:c3:9d:d4:1c:4d:af:ba:6f:4d:05:8b:
54:7a:53:f3:98:b5:19:8f:cb:55:8d:04:20:79:7a:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F7:AA:17:AE:8F:D8:54:B1:98:A6:EB:88:6F:34:C1:37:72:6A:A9
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:2c:ac:5a:14:40:66:e7:21:ad:5d:e9:4e:86:15:16:b9:
8a:86:dc:7c:53:be:6d:60:f4:cb:df:12:34:69:34:c1:1a:6b:
75:f3:b0:fe:23:0b:ca:12:0f:05:0b:a8:76:b2:eb:1a:04:c8:
81:9a:8b:e4:14:fa:97:a2:d5:01:3a:7e:8b:7f:45:cd:b2:46:
8a:d0:05:82:08:8f:12:ed:a3:01:4f:0d:3d:ee:f6:ae:f4:f4:
e0:83:8b:e7:3d:b6:5b:ad:4a:96:be:e7:d6:55:77:cb:f1:ac:
bc:8e:8b:f5:e3:e2:4a:50:19:bf:6d:61:82:7e:12:36:ee:f0:
3b:61:af:77:db:0e:e7:ab:5d:bc:2f:03:fd:76:a5:64:03:37:
26:c3:7c:2b:2f:be:42:7c:ba:2f:d3:bf:c7:6d:7b:19:af:2d:
a3:41:64:6a:51:1d:b0:ac:df:9c:73:e3:e2:e1:f1:53:9f:6e:
9b:69:e2:13:88:fa:22:9d:18:cb:fd:ca:b0:fa:36:66:bb:4e:
ac:13:09:31:cb:00:b3:28:f2:75:b2:40:56:91:7e:11:89:f7:
6a:87:9a:96:c6:6a:ea:9b:00:cd:6a:cb:02:b5:09:48:89:d4:
94:35:06:a3:b1:2d:87:ba:a6:fc:fd:da:3b:3f:21:74:80:b6:
c4:fa:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:22:44 2026 by rpki-client