Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: m3ifbPpURO2EluBLtNlsZIraDg2LlIJXc/VZ4nr+eGQ=
Subject key identifier: BF:3A:8C:AB:0A:46:4A:26:A1:F5:43:37:C7:18:5F:F1:FB:10:A3:56
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019CFB756E8F04D5C34C5A4F5067711C8064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1871
Signing time: Tue 17 Mar 2026 11:01:43 +0000
Manifest this update: Tue 17 Mar 2026 11:01:43 +0000
Manifest next update: Wed 18 Mar 2026 11:01:43 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: fKS4fqVVPlWUVgVx1L8VhfVTWMuz7zs9Y65x0YlwKeY=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:75:6e:8f:04:d5:c3:4c:5a:4f:50:67:71:1c:80:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Mar 17 11:01:43 2026 GMT
Not After : Mar 18 11:01:43 2026 GMT
Subject: CN=bf3a8cab0a464a26a1f54337c7185ff1fb10a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:20:e3:1d:be:2c:a2:33:51:33:02:0d:bf:
c2:6d:65:48:11:ca:5a:c2:19:1c:44:f0:a2:91:b9:
9e:f0:8e:0e:b5:f8:b2:75:21:f8:a7:50:7e:a6:ff:
92:ae:2e:58:aa:12:a5:d6:af:e0:0b:ce:93:53:36:
95:3d:0b:01:44:3f:5d:f0:e9:59:0b:98:1d:02:e5:
5b:34:e0:d5:01:c7:2d:79:e4:08:ca:8e:d3:83:22:
df:4f:66:c8:bc:81:cf:d5:aa:c2:ab:ac:cf:7d:2a:
7c:60:7d:ea:bf:be:8a:1d:99:78:3f:a6:43:ef:40:
44:f9:5c:ee:43:74:56:eb:45:72:85:e1:2e:b7:17:
c6:dd:51:41:0c:70:57:84:9c:a9:1a:49:f7:d3:2d:
fa:be:38:86:46:f5:f2:a5:73:27:c6:2f:3d:4b:cb:
68:2a:6e:36:d9:e4:e2:fe:95:81:aa:72:84:19:41:
19:45:63:92:9c:d7:e5:7a:66:b8:38:b2:74:c5:fb:
88:bd:82:dc:c8:34:ad:47:89:e5:30:6e:7f:31:f1:
bb:72:e5:37:b6:d8:57:13:d7:c0:fb:44:30:dd:fd:
c5:c1:03:43:82:68:c2:22:c7:ed:ad:00:78:bb:7d:
6f:3a:10:e7:37:49:18:10:44:06:53:68:b0:6b:40:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3A:8C:AB:0A:46:4A:26:A1:F5:43:37:C7:18:5F:F1:FB:10:A3:56
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:74:de:aa:67:e1:33:47:5f:6d:e7:68:ae:6e:a4:cc:ad:
52:cc:fa:67:66:63:e6:ff:62:64:f3:c0:f2:fa:52:34:d2:6a:
5c:95:c7:5a:b4:1f:c2:5e:15:7f:bc:8b:c3:0d:7b:74:5b:ca:
ce:b4:f5:43:7a:f8:68:5f:3b:41:8f:40:8f:66:68:25:95:0d:
f9:70:f7:38:17:d5:db:d4:31:7a:3a:1c:60:44:66:92:7e:8e:
30:00:fe:0d:68:74:71:d5:be:52:0e:c7:71:69:b6:49:c1:26:
97:5a:94:f2:96:e0:c7:cb:5b:ca:c3:b3:27:97:52:2b:8e:58:
46:20:48:49:9e:64:60:9b:97:9d:25:d3:aa:b6:bb:13:b5:29:
72:e5:55:48:e9:82:80:14:74:81:7e:af:b5:e6:af:6b:84:92:
c7:3f:89:c2:af:a0:69:2e:98:aa:b8:99:65:1a:f2:9f:22:15:
0d:da:50:06:ba:ee:36:82:bd:35:2b:8d:2c:aa:c0:8b:0f:d8:
86:5f:54:0e:7d:d6:62:f1:c5:56:ad:26:a0:51:d6:d0:cd:24:
4e:7f:de:16:70:0a:7c:8b:d9:d2:63:6d:97:5a:c2:35:e4:85:
97:34:68:59:19:36:b0:87:4a:0f:15:bc:83:d8:a0:36:fb:23:
90:98:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 17:46:16 2026 by rpki-client