Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: NcODEUhrPyUhjEX1LKcBYnhLfQfnnr60X+gJyE3U8GU=
Subject key identifier: E8:35:72:1B:F5:62:0E:97:32:6A:3D:E5:E9:4D:6F:36:E5:D8:21:13
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019FC41120C666CB5EAAEAECEE7091B32A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 19E2
Signing time: Sun 02 Aug 2026 20:01:24 +0000
Manifest this update: Sun 02 Aug 2026 20:01:24 +0000
Manifest next update: Mon 03 Aug 2026 20:01:24 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: Nu3yNGmFOs2mMnhcPgyAsULssZkl6/ELCF6imGqERgY=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c4:11:20:c6:66:cb:5e:aa:ea:ec:ee:70:91:b3:2a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Aug 2 20:01:24 2026 GMT
Not After : Aug 3 20:01:24 2026 GMT
Subject: CN=e835721bf5620e97326a3de5e94d6f36e5d82113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:37:87:dc:a9:89:cd:28:31:71:15:c8:f8:
8d:09:be:a3:f6:86:76:3f:98:e4:2f:31:5c:0f:55:
a8:a5:58:f7:04:90:0d:72:c2:f8:94:eb:db:a7:a5:
aa:ec:24:57:02:7b:f1:72:3a:53:4c:a0:83:31:ce:
5d:87:c2:12:cd:1e:b8:dd:b4:e7:f0:4e:92:c9:13:
ad:d8:95:1e:92:cc:ab:cf:79:a9:83:cf:45:f5:4f:
96:e6:5d:90:b5:77:30:90:a4:07:b3:60:0d:94:c5:
58:7f:c6:0c:93:37:a2:c0:e0:f1:d5:3e:5a:5f:6f:
ca:26:f7:ef:80:13:57:a9:27:2c:7d:48:31:f1:b6:
8f:42:a2:95:27:58:a7:41:71:91:33:7f:85:31:8a:
2d:16:24:d3:25:9a:9a:14:0f:62:36:af:42:1b:b0:
31:c0:8d:e3:5f:7f:58:bf:d2:19:29:9a:79:c4:97:
27:8d:40:56:23:50:64:ac:e3:2f:57:67:ae:ed:20:
fc:49:d5:34:e4:fb:0e:b4:91:3e:6f:b0:cf:db:64:
dc:30:1a:a4:de:2c:b3:81:aa:a4:ee:64:81:d0:35:
43:9a:44:12:0f:43:22:be:5d:aa:84:34:64:e0:a9:
a3:90:35:e4:d6:46:ee:0b:36:35:37:6a:40:e1:a7:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:72:1B:F5:62:0E:97:32:6A:3D:E5:E9:4D:6F:36:E5:D8:21:13
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:84:ba:92:db:2f:93:33:15:ae:58:32:ac:af:a0:b0:7e:9f:
a4:84:40:0a:66:dc:4d:93:a7:c4:5e:d0:ee:ac:14:99:9b:11:
9b:67:98:c7:d5:60:dd:8e:2a:fb:e6:ab:86:42:3d:28:6b:e3:
ec:1f:0a:99:9c:12:54:e0:a8:92:0f:4e:61:23:ac:b8:f3:bf:
4a:28:32:39:fa:b2:ed:c1:a2:bb:2d:40:02:db:9a:89:a3:bb:
74:4c:b9:a4:de:1d:c4:21:1f:7d:b5:be:78:1f:c9:8a:41:46:
d9:2e:40:42:89:6f:e0:e9:6a:52:95:8a:57:7c:94:c2:1c:be:
b2:11:44:a5:3e:21:ee:56:f0:48:21:ef:b0:67:e8:76:1c:64:
5a:b9:9c:d4:9d:a1:11:ed:02:ac:25:8d:fb:09:b3:a4:25:ec:
44:35:5d:9a:2c:dc:9c:95:fe:af:ea:37:f3:26:2e:26:fd:d0:
2a:d5:b4:52:1e:7d:77:a0:01:0b:66:0d:ac:b6:c7:2c:7f:83:
4a:eb:d1:b0:2b:15:b1:8c:23:92:95:df:7a:0a:05:c0:40:bf:
7b:5f:18:b3:7e:cf:77:98:04:a0:92:8d:62:3f:6b:08:88:0d:
2f:9c:92:f8:0a:cf:75:55:96:74:4b:2c:d2:dc:fd:7c:c4:87:
18:f0:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:00:24 2026 by rpki-client