Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
File: shna0BUe3wUqLxyX34hKWoeotfU.mft (raw, json)
Hash identifier: 0Y7m4IA5/YeUKlvw/qRor0jYAjdnyApnLj3DBkERxUQ=
Subject key identifier: C5:E9:3D:B0:5F:BE:83:A1:52:C9:5B:84:02:BA:3F:80:EB:AF:05:AD
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 019FA0E0C965A1363ABCFFC6EE6765BF3E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
Manifest number: 0B72
Signing time: Mon 27 Jul 2026 00:01:53 +0000
Manifest this update: Mon 27 Jul 2026 00:01:53 +0000
Manifest next update: Tue 28 Jul 2026 00:01:53 +0000
Files and hashes: 1: R-F3hbGJdOvhvuAeQIMq8EoAnjw.roa (hash: No6c9/YWn9MVmL5hiJnLaMWWeQF2lOi/cgCUTWRZ78g=)
2: shna0BUe3wUqLxyX34hKWoeotfU.crl (hash: sTLpZSvEHFRCM07oCcAyomFds4Ym1FevDUA5xeWA9xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:c9:65:a1:36:3a:bc:ff:c6:ee:67:65:bf:3e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Jul 27 00:01:53 2026 GMT
Not After : Jul 28 00:01:53 2026 GMT
Subject: CN=c5e93db05fbe83a152c95b8402ba3f80ebaf05ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:19:38:23:07:e4:5c:91:cf:2e:63:01:28:
d4:ed:64:ec:42:f7:72:a4:32:ab:ac:dd:62:1d:16:
b1:b8:ec:0b:4b:29:3f:a9:72:5e:72:7c:be:c4:b5:
52:ab:13:a1:bc:23:49:97:49:96:9d:0c:bc:a2:ba:
05:0d:8d:0e:30:bf:6a:5f:91:39:7b:aa:ad:e1:27:
65:b4:38:59:29:f8:86:4a:d1:28:89:2a:33:11:15:
f8:fe:cb:5b:67:66:44:7a:b3:68:89:a2:d9:59:5e:
87:de:67:99:f7:47:77:cf:2f:f5:93:6e:fa:53:a7:
81:fd:0d:90:7e:55:49:89:fa:af:32:6a:47:b0:40:
7a:c9:26:11:a4:17:e9:f2:17:71:31:00:89:b6:01:
22:aa:83:e4:99:b7:ac:5a:ae:3c:b3:3a:53:06:24:
b0:dc:2f:63:ee:e0:c7:1a:b4:17:e9:73:61:fa:f2:
d2:b1:0c:dc:f3:b1:8c:60:fb:cc:0a:a0:1b:65:37:
8f:77:45:94:70:4b:71:c7:b0:2a:dd:60:11:b8:3b:
73:a6:f4:3d:6e:5e:6a:61:2e:50:60:54:d1:97:8d:
39:8d:f7:26:e9:13:a6:66:ee:96:04:5f:19:b3:8b:
bb:26:25:8b:09:34:e0:14:6a:74:96:6f:97:0e:2d:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:3D:B0:5F:BE:83:A1:52:C9:5B:84:02:BA:3F:80:EB:AF:05:AD
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0d:48:b1:ea:2f:de:9d:09:a4:e1:10:48:44:4c:35:03:49:
ba:01:74:bb:24:f6:ed:04:4c:37:d7:ad:14:9d:a2:40:e8:06:
ee:71:f4:5e:96:8b:b9:51:49:c3:d2:dc:f5:71:26:91:64:3c:
be:6c:70:7c:82:0e:c2:b7:a7:ea:71:48:73:19:28:51:c7:cc:
b1:f5:8d:1a:c7:64:79:00:1f:11:28:19:73:d1:97:5d:cf:db:
83:83:fe:3c:9f:fe:ba:40:b7:12:73:22:3f:ed:72:6c:88:63:
59:a4:32:d7:42:2e:f5:5c:1a:ae:ea:37:01:8d:f4:eb:ee:6f:
89:49:88:03:89:89:4f:d6:52:29:b2:4f:2d:d2:03:6d:37:36:
eb:5a:20:a4:12:41:35:1e:89:7d:48:ba:ae:e3:64:d1:a9:59:
e1:37:be:cf:25:bf:74:fa:77:f8:81:4b:22:25:4d:8e:ca:ea:
6b:f6:12:5b:09:44:fd:5b:0a:f3:bf:21:ec:3e:83:81:4f:ff:
fa:ea:e8:6d:94:78:28:da:4f:20:01:dc:6f:2d:8b:0a:76:e9:
22:ee:db:62:45:88:14:b8:64:31:bc:22:9f:67:40:f5:bd:7b:
92:2f:d5:f3:07:20:e0:84:8a:21:0c:c5:84:38:4d:53:48:1c:
16:f2:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:29:00 2026 by rpki-client