Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: eS3UJbdYLszVsOPognlZmfwL87x61fnnNPIJxoXbCrs=
Subject key identifier: C5:C3:B5:22:23:27:FB:9A:60:38:7D:BA:D1:90:DD:8B:26:64:2C:AF
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 019D3909828D5A08840D14BB57EF7822E06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0C4C
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: BLwnlpOPwEzBKmF_4QRTJYpcxNU.roa (hash: v4Ot4HyO70Y+AHmwBRqB50tH8tjobdfYFYP+6RLw5hM=)
2: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: dmA/dO9ERiv4OQidqcqFJD7WYf8puF+bCSGJb3mWFyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:82:8d:5a:08:84:0d:14:bb:57:ef:78:22:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=c5c3b5222327fb9a60387dbad190dd8b26642caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:e1:d4:e1:20:91:2b:d6:dd:18:7c:be:60:
28:ff:ea:1d:95:8e:89:4f:30:a5:c9:0c:58:e3:69:
6b:80:dc:38:19:26:e2:e7:d8:41:2e:aa:db:87:2b:
85:7f:4a:9b:da:27:8c:ca:99:1b:3e:f6:39:d9:ec:
3f:e8:df:fe:80:4d:20:95:88:db:1f:dc:a5:a1:4d:
77:6f:90:60:49:e0:fb:1e:0c:2f:08:a7:d9:15:0f:
86:fa:01:87:0b:0b:9e:0f:2f:b2:14:7f:37:d5:dd:
f3:81:46:49:fb:5a:16:d0:55:e5:f6:e1:47:d5:cb:
2c:0e:40:e4:d2:c4:1a:05:78:e4:08:75:15:53:41:
86:95:ab:58:81:c7:17:c9:44:bd:de:f6:3d:7a:15:
24:7f:99:42:8b:01:7f:a4:4b:f3:2f:f6:34:e9:ac:
0e:4c:47:ac:9f:29:c6:3b:73:da:80:4d:02:2b:1f:
13:ee:b9:87:02:f9:66:08:a4:35:a5:37:d8:b4:44:
9f:9e:fd:c1:86:cb:64:55:dc:4e:2a:d1:a7:38:77:
01:eb:ea:39:88:d3:8b:d8:71:bf:40:08:3a:8a:12:
70:e9:09:86:66:11:4e:bd:6f:56:5a:77:fb:b6:6d:
b2:8e:39:ac:5f:a1:d0:e4:3d:95:5d:64:94:ec:d7:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C3:B5:22:23:27:FB:9A:60:38:7D:BA:D1:90:DD:8B:26:64:2C:AF
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c1:22:df:3e:74:42:54:50:de:4c:97:37:6b:57:34:ae:6b:
90:9e:9f:70:63:89:4e:98:5f:d5:3a:81:f1:3b:af:76:4b:4a:
57:51:53:e0:2b:35:78:d3:48:b8:1c:e9:75:3d:46:0f:7d:ac:
95:9e:24:ba:c7:10:b4:af:79:92:40:2e:4f:87:3b:6d:60:b6:
9b:12:db:12:92:3e:f2:02:08:c0:9b:ca:6a:8a:94:88:b3:70:
b4:20:2d:da:36:15:3d:ab:81:d7:0e:78:e9:82:93:b8:32:c3:
bf:50:9f:68:25:15:72:0b:ba:93:4c:e0:93:f3:ff:d4:50:49:
dd:85:14:71:aa:c8:25:34:d2:23:e3:97:37:90:ae:ca:b5:e3:
cb:b9:ba:fd:16:a4:a8:6b:78:14:2e:be:c6:5b:d6:24:82:55:
15:5d:21:6f:8f:3e:03:cd:f1:a2:6d:1a:6d:d1:c2:1d:da:6d:
4c:c6:da:70:28:e1:67:f9:bf:16:8f:3a:0d:29:a4:97:c0:67:
b9:69:63:0c:03:6b:ff:dd:61:8c:c1:5c:91:6e:88:2a:37:42:
56:8a:0d:4f:a7:c3:7f:70:bf:3b:58:c4:f6:01:ea:d2:08:82:
08:bd:f2:4d:65:b3:b8:92:6c:6e:38:73:b1:74:88:02:0a:a5:
23:05:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:44 2026 by rpki-client