Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: sQsJmX1GiBCaSyqQPCbxd/BdiV1dRchKwlp+0+XTlmY=
Subject key identifier: C9:E0:89:1E:F7:11:CE:F9:2F:D3:76:46:5D:A2:45:21:39:46:35:0C
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 019D389C621DD571F309B9A85E7B12D290AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 0C38
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: 80aZm-LOIfOj4b0pErlGBGKAQkw.roa (hash: eeqWFn0rrMt+3uQyEjN0WfmfLfKkgvr7/Sm+KMOotdU=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: IE8SgR6W+pP9ZZU0sNKzESU1gc3DvpxKniihYAElT/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:62:1d:d5:71:f3:09:b9:a8:5e:7b:12:d2:90:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=c9e0891ef711cef92fd376465da245213946350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:ed:24:c7:c0:a8:fe:fa:f8:30:3c:f2:ba:
38:38:85:16:71:4a:38:97:b5:a1:4d:98:31:10:bc:
d5:10:c0:10:88:54:bf:22:9a:ed:75:7e:09:ee:25:
35:f1:17:15:b8:03:66:44:d9:e4:93:85:54:7a:63:
6e:f1:5d:3d:5b:74:44:de:92:d2:bb:f3:52:b4:7f:
dc:3c:4c:77:de:29:50:68:db:91:3d:f9:73:c5:23:
6f:e9:08:e6:e5:27:03:7f:53:56:fa:00:b4:c4:96:
ad:f9:fe:3d:ed:bb:d6:cf:01:af:ee:3e:48:fe:5a:
14:b0:b2:1a:38:2f:60:47:f4:89:f5:ad:ca:71:ef:
21:1e:79:0e:5f:1a:2c:42:db:fb:33:a6:7f:f3:0a:
cc:13:81:26:ed:e3:66:2c:67:bf:4f:b8:d9:35:2a:
ff:d0:77:90:1d:75:8d:70:63:00:69:fd:22:eb:3f:
1c:7d:89:a9:7a:dd:8c:09:5f:40:b2:39:e5:32:ee:
12:e5:09:cd:17:0f:bc:6e:17:1c:ce:e3:a5:7b:f6:
57:ba:63:fb:4f:d8:ea:a3:16:2a:55:99:51:d2:fd:
36:65:75:5c:5e:2b:67:f2:06:21:d2:27:7c:96:a3:
dd:5a:b6:78:98:10:1b:69:d1:d6:23:3c:d3:4a:69:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E0:89:1E:F7:11:CE:F9:2F:D3:76:46:5D:A2:45:21:39:46:35:0C
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:67:34:3c:0a:da:81:02:1e:46:6b:86:99:12:62:98:ac:04:
4c:cd:c5:9b:e0:03:3b:e9:57:39:c7:46:19:ee:60:db:89:07:
8a:1f:b4:41:1b:88:27:96:20:c5:53:a2:73:e4:a9:1a:81:f3:
0d:e8:77:a3:60:50:66:f7:c2:d4:79:1d:9f:57:d5:0c:b7:5a:
9e:42:2e:24:6e:7b:90:f3:ee:e1:66:9e:0e:8b:a4:54:dc:d7:
8a:d1:f6:ca:03:9e:a8:e0:0b:2d:7b:1e:af:0b:cf:fd:99:5d:
83:59:cc:8d:d2:7c:a9:1b:dc:55:cd:01:51:d6:63:d1:80:5a:
f2:e7:c4:6d:0d:d9:20:fa:0c:a7:61:70:7b:d8:13:96:b9:ff:
ea:b7:e6:df:28:16:a6:a5:ce:f7:01:8e:3f:6b:45:42:6b:44:
26:b6:67:b8:96:2f:b3:62:89:28:69:60:26:71:a6:a6:b0:07:
7d:4f:45:41:4b:7f:56:01:95:e2:23:cc:1e:ad:5a:28:fd:7b:
b3:ba:c8:2a:52:8a:23:b1:bf:1c:69:25:35:80:cd:28:97:59:
34:cb:f5:80:6a:89:40:23:80:71:73:c1:f3:5a:20:5d:86:70:
04:72:59:cd:79:25:a5:71:6a:9a:85:d7:3d:b5:ad:39:e3:6e:
b8:32:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:23 2026 by rpki-client