Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: JBMA7BjNSr7KF10uwSMPht5Tnw2bYkD622uG0A1asYE=
Subject key identifier: B6:4D:44:72:20:9C:04:59:07:60:E8:5A:BC:8F:7E:E6:94:E1:69:0D
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019F111C1C24DDF2017DB4699E60BCE61155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 17A3
Signing time: Mon 29 Jun 2026 02:01:22 +0000
Manifest this update: Mon 29 Jun 2026 02:01:22 +0000
Manifest next update: Tue 30 Jun 2026 02:01:22 +0000
Files and hashes: 1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: pDmChuMW5p5D6GF6sRgzYp6XDTvlqN/XATqCbgwunRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:1c:24:dd:f2:01:7d:b4:69:9e:60:bc:e6:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jun 29 02:01:22 2026 GMT
Not After : Jun 30 02:01:22 2026 GMT
Subject: CN=b64d4472209c04590760e85abc8f7ee694e1690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:ac:c1:04:00:b9:9e:fe:7d:a0:27:7c:1d:
8b:2f:fa:6d:cb:d0:e2:10:f2:5a:01:6a:36:bb:0a:
d8:06:83:36:ee:34:e1:26:5c:1f:57:f7:38:ee:4a:
c1:67:3e:87:1b:39:bf:c9:77:75:e8:a3:a7:41:46:
79:0c:73:f3:c7:5c:55:76:39:4f:d4:e1:a7:3a:c3:
05:b3:7d:40:7b:45:c6:14:c2:92:7b:41:8c:e6:82:
03:62:e3:2a:f8:f2:44:51:97:9f:3b:b2:b7:cb:31:
31:cd:fc:41:fc:ba:57:38:04:20:40:8d:32:fa:55:
b0:6e:05:e5:45:e5:16:d5:b5:a4:a1:f4:9b:5e:25:
3a:77:d1:7a:2c:52:be:47:fa:46:5b:d7:85:32:5d:
a6:b4:6f:fc:50:f3:a7:9f:6d:bf:fd:0c:b0:fc:24:
11:e1:e4:c6:9f:34:9c:8d:50:b8:67:70:9a:40:6d:
c4:42:6a:2f:ed:35:7b:ac:39:7e:a9:83:e7:ef:92:
a8:0d:2c:14:57:70:50:17:f0:0c:cc:13:a6:b4:2d:
d6:7e:84:8a:71:cf:70:ea:61:24:0a:7a:8b:71:03:
98:2c:a0:e8:17:77:04:67:65:6c:7b:5e:e8:3b:b4:
d9:3e:4a:df:f9:65:9a:dd:67:db:7e:ff:35:92:ce:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:44:72:20:9C:04:59:07:60:E8:5A:BC:8F:7E:E6:94:E1:69:0D
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:db:7a:70:f2:c8:27:8b:0e:e6:33:27:67:95:1a:05:92:
4c:d0:3f:af:b7:d4:dd:04:54:e2:93:43:5b:aa:87:60:83:48:
f2:3c:87:7a:ab:62:e2:76:0a:0d:3f:80:22:1f:83:4e:37:7f:
9e:9f:6e:a4:68:95:65:aa:41:eb:92:37:a2:7d:b4:3f:84:a1:
10:c3:4b:12:a2:73:eb:e0:d8:d1:c4:0b:f4:95:47:5b:4a:0e:
2b:c1:0f:f4:c2:6b:85:c1:9d:32:34:37:e9:a0:f1:2d:af:39:
82:af:8b:a6:59:90:02:f1:95:d4:5c:63:37:cc:7e:ca:a3:88:
56:e5:c0:9d:75:6a:79:91:3b:82:52:be:08:5a:ac:e0:b1:1e:
9d:a0:15:54:0a:55:e4:9c:7b:0a:69:f2:8d:e3:e4:4e:ab:10:
76:2e:e0:4e:44:93:9a:b3:11:70:62:d3:08:3d:43:8d:1c:a5:
13:06:7d:9b:35:40:cb:8a:67:ca:a8:1e:5f:1c:76:fe:53:8a:
2c:33:36:ba:d6:77:98:70:7c:6d:b4:a4:ee:ac:8e:84:25:c7:
32:65:2b:be:12:0c:22:94:6f:be:ed:e7:c9:9b:31:eb:01:ce:
55:5a:25:93:2b:e7:d0:46:f0:57:91:a8:fb:e2:f4:3d:aa:91:
79:07:35:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:21 2026 by rpki-client