Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: 2dwQGJEkW2g/5RlSo5IWUyzJU6q5weaK/OjcPoO6jBQ=
Subject key identifier: 07:85:13:8B:82:86:8E:E2:66:14:7C:69:C0:32:28:7E:B7:92:77:7B
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019E295E543CA8D88F071EBEF19F730251EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 172B
Signing time: Fri 15 May 2026 02:01:48 +0000
Manifest this update: Fri 15 May 2026 02:01:48 +0000
Manifest next update: Sat 16 May 2026 02:01:48 +0000
Files and hashes: 1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: MD0xBBjlBNPBsPiRS+Oz22CpW/p0OGCX41H052XuhVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:54:3c:a8:d8:8f:07:1e:be:f1:9f:73:02:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: May 15 02:01:48 2026 GMT
Not After : May 16 02:01:48 2026 GMT
Subject: CN=0785138b82868ee266147c69c032287eb792777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:43:e8:f5:a9:7b:7f:9c:d4:47:f6:a4:fe:
5e:fe:43:e4:c2:4c:30:79:26:ce:0a:f2:25:ad:0e:
37:c8:61:b4:bb:4b:a4:a1:73:a0:43:28:d1:8f:ab:
e8:34:44:5d:73:9e:cc:25:74:e2:61:25:fe:69:3f:
56:e4:8d:be:c0:53:a4:47:1d:c2:82:51:90:74:66:
01:f5:8d:ec:c1:0e:80:d5:fb:9b:b1:06:c8:e1:1e:
a8:75:e5:30:68:aa:f4:c5:7f:8d:58:70:15:2f:ff:
11:db:57:fd:10:80:f0:6c:29:9f:9b:0e:11:d2:7e:
45:43:16:15:52:de:e3:dd:40:0d:3d:9c:d5:0a:5b:
45:a4:33:ad:5d:6f:57:bd:ac:99:bd:3e:62:69:a6:
41:2f:37:c1:78:eb:95:0a:80:2d:3a:36:cc:fa:52:
c2:47:59:de:e5:f1:78:9b:b3:a3:61:4d:47:7c:1c:
21:19:57:9f:ce:6d:c3:0d:8f:5b:de:e1:4b:2d:87:
d9:87:3a:48:46:74:98:76:29:e9:40:54:46:7a:58:
53:ff:1e:5f:01:56:b6:16:73:b1:a4:e8:7a:84:75:
a5:67:19:f5:6c:8e:98:62:e7:21:65:2d:e2:49:c4:
6d:19:79:4b:5e:94:00:ed:1e:a2:8f:57:dc:59:0e:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:13:8B:82:86:8E:E2:66:14:7C:69:C0:32:28:7E:B7:92:77:7B
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1a:7a:7a:9a:cf:48:76:f2:da:75:18:a9:41:2b:d3:93:94:
23:4a:9e:13:2f:4b:5b:b2:d0:5c:60:6b:ef:0a:ba:7c:74:a9:
aa:e0:ca:b6:6a:7b:d1:e6:60:3a:fe:d7:26:78:d5:9c:67:39:
2d:cc:f0:fe:b0:e2:b3:ca:7d:e9:3b:66:68:fb:52:c7:5b:01:
f7:fa:5c:f9:52:4d:89:9c:08:f1:c3:97:cf:5d:b6:0c:fe:9c:
1a:fb:95:ee:28:18:0b:f0:1b:e6:08:b1:11:85:7f:ae:16:d8:
9d:25:7b:a0:e4:03:2a:3b:4b:6d:d5:cc:73:f4:61:44:dd:bf:
66:ca:e3:a4:3d:d1:23:c1:65:98:dd:2a:37:15:3b:76:a0:fa:
48:97:e4:54:df:79:a1:27:b9:7f:d7:b4:a3:0d:01:ad:3a:ed:
eb:c9:0e:e5:5f:48:88:f5:6f:f4:a7:89:a8:ce:6a:fa:71:94:
08:b3:79:ed:b7:ac:d7:b2:e2:16:52:ca:c9:f2:e7:71:72:bf:
62:2a:dd:f8:1c:2e:f3:3e:d1:3a:c0:cd:94:1b:23:28:bc:88:
83:68:ca:83:4a:e5:74:bc:0f:7b:f4:b4:e4:b9:ab:16:1d:62:
95:30:96:77:d5:4b:94:a9:b8:84:d9:8b:9d:d4:41:7b:b9:20:
67:71:c0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXlQ8qNiPBx6+8Z9zAlHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1
YzdkYWMwHhcNMjYwNTE1MDIwMTQ4WhcNMjYwNTE2MDIwMTQ4WjAzMTEwLwYDVQQD
EygwNzg1MTM4YjgyODY4ZWUyNjYxNDdjNjljMDMyMjg3ZWI3OTI3NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFD6PWpe3+c1Ef2pP5e/kPkwkww
eSbOCvIlrQ43yGG0u0ukoXOgQyjRj6voNERdc57MJXTiYSX+aT9W5I2+wFOkRx3C
glGQdGYB9Y3swQ6A1fubsQbI4R6odeUwaKr0xX+NWHAVL/8R21f9EIDwbCmfmw4R
0n5FQxYVUt7j3UANPZzVCltFpDOtXW9XvayZvT5iaaZBLzfBeOuVCoAtOjbM+lLC
R1ne5fF4m7OjYU1HfBwhGVefzm3DDY9b3uFLLYfZhzpIRnSYdinpQFRGelhT/x5f
AVa2FnOxpOh6hHWlZxn1bI6YYuchZS3iScRtGXlLXpQA7R6ij1fcWQ7yOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeFE4uCho7iZhR8acAyKH63knd7MB8GA1UdIwQY
MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt
NmU2MzYxYmVhOTg5LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5
LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhp6eprP
SHby2nUYqUEr05OUI0qeEy9LW7LQXGBr7wq6fHSpquDKtmp70eZgOv7XJnjVnGc5
Lczw/rDis8p96TtmaPtSx1sB9/pc+VJNiZwI8cOXz122DP6cGvuV7igYC/Ab5gix
EYV/rhbYnSV7oOQDKjtLbdXMc/RhRN2/ZsrjpD3RI8FlmN0qNxU7dqD6SJfkVN95
oSe5f9e0ow0BrTrt68kO5V9IiPVv9KeJqM5q+nGUCLN57bes17LiFlLKyfLncXK/
Yird+Bwu8z7ROsDNlBsjKLyIg2jKg0rldLwPe/S05LmrFh1ilTCWd9VLlKm4hNmL
ndRBe7kgZ3HAag==
-----END CERTIFICATE-----
Generated at Fri May 15 06:22:44 2026 by rpki-client