Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: Ttk53UUUD201a0DmkUn7PQx4em6nYx4XoHu2thn2Pm4=
Subject key identifier: 96:7D:69:02:60:74:A3:BD:E6:E3:E7:C0:86:23:78:F3:10:A5:CB:E0
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 01A0AFABB6FD4B2E04C30EEF224E98BE34D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1A5C
Signing time: Thu 17 Sep 2026 14:01:01 +0000
Manifest this update: Thu 17 Sep 2026 14:01:01 +0000
Manifest next update: Fri 18 Sep 2026 14:01:01 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 6SS37feRoO7hwHvfK/4doLCH8kAm5KMeSDG36dgvDck=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:ab:b6:fd:4b:2e:04:c3:0e:ef:22:4e:98:be:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Sep 17 14:01:01 2026 GMT
Not After : Sep 18 14:01:01 2026 GMT
Subject: CN=967d69026074a3bde6e3e7c0862378f310a5cbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:98:04:a2:8d:e9:87:a6:53:50:e6:e0:c5:
d5:43:06:36:78:3d:56:6a:ae:81:cb:7d:d5:46:e3:
4a:95:f5:f3:bf:80:b8:71:cc:74:8f:50:66:23:e1:
7d:1b:38:b9:47:98:08:10:d2:09:ae:5d:f4:99:a4:
41:a3:7b:88:65:c1:d6:3e:9a:01:c5:24:f5:48:fa:
67:94:f9:c4:e9:bf:68:3e:8d:ab:f5:ef:05:8b:f2:
a7:e2:e9:36:26:9e:4f:19:ad:44:08:87:9a:5f:47:
09:10:ad:41:c4:82:c9:12:cd:de:97:56:ba:24:39:
cc:62:e1:eb:9b:5d:14:6f:7e:88:4c:98:aa:f3:c0:
f2:e8:9b:d2:35:d3:63:b1:f8:51:f5:2a:05:75:df:
e0:52:36:9b:9a:b3:f4:11:13:65:ee:65:29:fc:e5:
dc:3f:15:19:bf:1b:5c:bb:bd:3a:52:bb:e8:0c:72:
a4:2b:83:91:03:3c:33:7f:ca:7c:6c:ac:ac:42:6c:
5e:d9:3f:63:3b:57:eb:4c:c5:ef:f4:18:c2:71:5e:
46:14:ad:dd:10:c5:f1:f4:fb:f7:5d:a9:4f:db:37:
16:2d:c6:e7:7f:08:1d:99:85:2a:d9:ab:00:84:b1:
85:a7:88:c7:ff:9f:52:43:11:f9:b3:30:05:62:fd:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:69:02:60:74:A3:BD:E6:E3:E7:C0:86:23:78:F3:10:A5:CB:E0
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:30:16:1d:9e:7d:b3:37:d5:4f:f5:a1:04:f6:0c:8e:92:e4:
ba:fd:bd:d8:78:a6:2f:53:f2:3f:53:08:f7:f1:38:ee:90:18:
70:41:1b:9b:31:00:b5:47:0a:9e:20:a0:6b:34:39:27:9e:77:
85:02:af:b1:cc:ef:09:2e:d6:3f:9f:48:a6:fe:f7:e8:69:17:
7f:c2:69:86:96:b9:3b:56:2d:73:18:40:5e:08:d2:99:06:f5:
cb:28:09:97:b3:cf:24:ce:d4:36:c7:33:0d:f1:1a:04:30:74:
47:4e:c6:f1:1a:7a:01:03:72:7c:78:6b:3a:bb:eb:f0:b9:2a:
a0:0e:fb:aa:5a:3e:36:7b:bf:6d:22:84:16:ae:09:ac:1b:a2:
24:02:ed:7d:7f:d7:18:40:e4:84:07:96:94:1d:84:2c:8c:bc:
b3:8e:d2:88:5e:9e:33:bb:45:21:3f:7e:b4:a8:76:32:2a:c9:
db:e8:67:21:59:44:e7:03:10:3d:b0:56:83:2a:f8:5c:d9:dd:
f0:76:ad:2c:9c:f6:76:d9:11:8e:72:cd:1b:15:ff:e4:5c:ba:
93:66:0d:0d:19:41:43:92:e2:a2:ab:79:b6:b6:e3:27:f3:bf:
99:ef:f5:6e:f8:6c:fb:4d:eb:de:34:d9:ff:c0:a4:f0:af:29:
87:df:16:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCvq7b9Sy4Eww7vIk6YvjTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm
YmQ0ZDUwHhcNMjYwOTE3MTQwMTAxWhcNMjYwOTE4MTQwMTAxWjAzMTEwLwYDVQQD
Eyg5NjdkNjkwMjYwNzRhM2JkZTZlM2U3YzA4NjIzNzhmMzEwYTVjYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkeYBKKN6YemU1Dm4MXVQwY2eD1W
aq6By33VRuNKlfXzv4C4ccx0j1BmI+F9Gzi5R5gIENIJrl30maRBo3uIZcHWPpoB
xST1SPpnlPnE6b9oPo2r9e8Fi/Kn4uk2Jp5PGa1ECIeaX0cJEK1BxILJEs3el1a6
JDnMYuHrm10Ub36ITJiq88Dy6JvSNdNjsfhR9SoFdd/gUjabmrP0ERNl7mUp/OXc
PxUZvxtcu706UrvoDHKkK4ORAzwzf8p8bKysQmxe2T9jO1frTMXv9BjCcV5GFK3d
EMXx9Pv3XalP2zcWLcbnfwgdmYUq2asAhLGFp4jH/59SQxH5szAFYv3AnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ9aQJgdKO95uPnwIYjePMQpcvgMB8GA1UdIwQY
MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt
MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz
LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDAWHZ59
szfVT/WhBPYMjpLkuv292HimL1PyP1MI9/E47pAYcEEbmzEAtUcKniCgazQ5J553
hQKvsczvCS7WP59Ipv736GkXf8Jphpa5O1YtcxhAXgjSmQb1yygJl7PPJM7UNscz
DfEaBDB0R07G8Rp6AQNyfHhrOrvr8LkqoA77qlo+Nnu/bSKEFq4JrBuiJALtfX/X
GEDkhAeWlB2ELIy8s47SiF6eM7tFIT9+tKh2MirJ2+hnIVlE5wMQPbBWgyr4XNnd
8HatLJz2dtkRjnLNGxX/5Fy6k2YNDRlBQ5Lioqt5trbjJ/O/me/1bvhs+03r3jTZ
/8Ck8K8ph98WSw==
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:50:06 2026 by rpki-client