Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: pIx9GK9K3M/72xfl13Wg9wCL72hUKwT13urbHcWNIl0=
Subject key identifier: 49:C5:51:87:B0:DF:8B:82:EB:22:C1:F7:4B:4D:81:2C:F5:64:8C:36
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 01A03C71C68256E557D02FCB10FBB0C1F5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 183F
Signing time: Wed 26 Aug 2026 05:01:24 +0000
Manifest this update: Wed 26 Aug 2026 05:01:24 +0000
Manifest next update: Thu 27 Aug 2026 05:01:24 +0000
Files and hashes: 1: AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa (hash: H7RFq89YoSrzmmDi/9xMxCLOW54NyDvA/cZq9dYzaD8=)
2: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: hxJJn7TgA2gpVEHRyIbxBYUkW9+QVDryeBtHz9IKR4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:c6:82:56:e5:57:d0:2f:cb:10:fb:b0:c1:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Aug 26 05:01:24 2026 GMT
Not After : Aug 27 05:01:24 2026 GMT
Subject: CN=49c55187b0df8b82eb22c1f74b4d812cf5648c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:22:05:81:13:16:d5:dc:ff:d3:ec:e1:34:
fa:48:a1:3d:22:29:17:a9:48:89:48:13:7a:04:65:
aa:a0:3b:7e:6e:de:ad:1d:46:f0:ca:ad:b3:d0:f7:
9c:1b:30:3c:53:00:42:38:a2:dd:a0:bd:1d:94:9d:
ab:8c:3d:36:d0:87:78:e6:02:4b:19:fd:62:c1:e1:
b2:ac:93:46:3f:18:76:f4:e5:6d:12:e3:22:61:33:
69:b8:fb:00:ae:73:3d:9e:64:19:f9:7c:4a:0f:9c:
08:d2:c9:71:9f:0b:f0:94:1a:2a:39:eb:d0:1a:63:
ae:14:d2:2a:b2:00:ac:fc:de:a5:0f:0a:f5:bc:da:
b4:f7:85:0c:95:e7:00:c1:71:a5:a2:69:ec:28:d6:
94:bc:36:5a:e9:a0:75:fb:25:64:3c:c7:bf:22:9a:
2e:c0:41:36:1a:f6:11:b4:3e:1a:74:fa:c3:cd:08:
6d:ba:eb:db:6d:a2:57:77:4a:4c:b4:50:aa:ac:61:
30:84:19:7f:c3:93:75:1f:64:5c:9d:6d:d8:75:0d:
4c:76:6a:37:df:9b:27:6b:4c:e1:fe:8f:8a:cb:37:
d3:12:9f:3b:91:45:2f:a0:1e:d7:13:f0:11:b7:53:
f8:19:93:42:c5:7d:3b:56:2f:fe:7d:49:88:61:12:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:51:87:B0:DF:8B:82:EB:22:C1:F7:4B:4D:81:2C:F5:64:8C:36
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:10:f8:e3:12:a5:73:65:73:63:3d:f9:93:bb:03:b9:94:9a:
4d:12:f9:77:cd:12:54:cd:8e:43:94:92:dd:8f:9d:fa:94:99:
81:f1:49:da:a5:26:de:c1:c0:bc:45:a4:f0:f9:b3:28:1c:aa:
90:c3:56:16:a2:59:6f:d0:83:b9:d3:4e:37:bc:3f:9d:f9:55:
d1:72:3e:6e:f5:03:e5:99:43:1f:4a:8d:fb:e3:f3:05:0e:ed:
23:ba:ef:57:93:46:4f:24:7e:49:4b:49:c1:b9:fa:a8:13:1a:
23:8d:c6:99:1c:51:2a:c1:c4:80:31:43:af:85:e7:49:d2:5c:
3e:56:a8:e6:c3:85:17:3e:78:e8:4e:b5:12:25:4c:c2:22:aa:
43:fd:01:69:b8:6e:6e:a9:6b:85:9c:60:ab:ca:74:86:8d:19:
54:74:b2:bb:4a:8a:2a:da:16:90:e4:17:1e:87:7e:fa:e6:41:
2c:ce:57:f2:b5:4e:f2:dc:e6:48:e4:80:76:e0:f6:25:27:06:
79:55:c0:b7:27:ca:81:14:93:89:d1:dd:02:e1:84:ed:94:27:
d3:74:65:c0:b8:13:e7:c9:28:75:85:d7:e4:13:33:85:14:55:
d1:6f:f3:2e:ee:d4:92:85:17:b5:21:38:f9:09:7f:63:92:7b:
ed:27:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 14:10:23 2026 by rpki-client