Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: 49BxqpAivU9Lk755gR4oLDJFM+RJugO4IBwIzxALXfU=
Subject key identifier: A6:FF:E1:A2:F7:46:19:76:04:5E:22:FC:D7:BF:C7:72:01:21:5F:CD
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019FAAF550AABB2388AD7339CC73A47689BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0AB7
Signing time: Tue 28 Jul 2026 23:00:31 +0000
Manifest this update: Tue 28 Jul 2026 23:00:31 +0000
Manifest next update: Wed 29 Jul 2026 23:00:31 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: fnvEaAT28borLlTTWpW2AtTD6ZE.roa (hash: NaMO1Gs4SP/y+KjGpBAZ+hgdfrK/8YBpbJ/SmLQlPcM=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: C2IeBGNdR1n48ikcnRMJiMNND+ZgOK9NC/XgPj6FFwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:50:aa:bb:23:88:ad:73:39:cc:73:a4:76:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jul 28 23:00:31 2026 GMT
Not After : Jul 29 23:00:31 2026 GMT
Subject: CN=a6ffe1a2f7461976045e22fcd7bfc77201215fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:ba:e3:7a:a8:d8:77:ce:16:2f:be:15:4b:
40:5c:ff:8b:a7:60:63:77:db:7b:f5:01:ca:03:10:
a1:9c:62:0c:3a:f5:66:fd:6e:dc:13:af:b7:16:58:
5f:90:4e:37:bd:93:e9:e1:0a:6d:6e:e4:c9:d3:8a:
2c:20:0e:08:41:05:b2:50:4f:37:27:38:61:48:72:
ac:70:a6:ab:bc:c9:04:3e:39:8d:01:2b:d8:3a:7c:
c4:c9:42:68:f4:64:3b:10:b4:72:46:9e:63:21:e9:
8f:d2:89:88:39:29:f9:81:64:90:3d:31:43:85:c4:
52:05:95:b0:8d:82:53:16:e1:ae:00:1b:32:65:d9:
dc:3e:0b:a3:e9:99:6a:1f:04:b0:c7:a0:7d:3e:f9:
83:a4:d5:ac:94:5b:96:4b:c1:2d:8a:e7:60:f5:ad:
6d:56:36:bf:af:34:e3:fd:a9:0c:a6:cb:2e:b3:af:
e3:3e:e1:92:94:09:d8:82:cf:e1:49:65:a5:42:70:
a8:30:05:44:52:e4:60:6c:04:aa:03:91:21:87:fd:
6e:b5:f2:ee:a7:85:db:40:01:8d:a6:b8:37:a5:42:
4f:29:72:03:95:f7:bc:c9:43:2c:fb:ad:36:98:ea:
4d:f9:2b:30:67:c1:3b:91:85:a0:4b:43:d2:ed:e8:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:E1:A2:F7:46:19:76:04:5E:22:FC:D7:BF:C7:72:01:21:5F:CD
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3b:7e:c7:8c:40:9c:fd:89:b4:44:d3:e2:8d:e8:85:f3:c2:
89:6d:b6:28:e1:ef:ad:2d:4a:73:7a:a6:a4:f0:c0:2a:9e:36:
69:60:67:12:4e:50:e1:5a:58:63:69:a1:25:ac:ac:b5:2d:ea:
d4:26:45:1c:29:32:9a:44:60:b8:1e:bb:61:9f:c8:ed:b5:8d:
4b:61:bf:06:20:ce:09:97:ad:e6:25:08:77:03:21:5e:a6:40:
b6:a0:14:08:03:ae:c0:5a:ee:75:ea:e9:5c:c3:c6:3a:e0:54:
6b:1b:fa:92:76:f5:67:31:1a:fb:79:42:aa:4a:de:9c:e3:d4:
2f:ee:d7:65:2c:7a:08:08:95:58:d4:a3:c8:50:9e:9e:1f:ff:
b2:32:ea:3d:3b:96:66:55:6c:e8:a0:ec:9f:b1:e4:6e:6d:75:
ce:55:c8:53:4d:44:27:7d:ef:82:3d:6f:bf:4c:54:dd:a0:88:
16:5c:11:61:10:0a:13:9f:f0:5b:6e:f8:8f:d8:d7:f7:cf:36:
dd:74:35:50:ad:b4:43:56:95:1c:69:8c:85:b6:88:af:4c:f6:
1f:55:de:78:36:98:92:17:4b:51:98:8b:ef:2c:89:03:78:ca:
3f:ca:ec:6b:cd:58:b3:d5:a4:28:f2:cd:ec:a7:fb:17:7c:00:
c3:aa:d0:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9VCquyOIrXM5zHOkdom9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMWEzZjRhZjk0YTU4MGViOWU3YjU4NTQyYTAwODRiMjFj
MmIwOWIwHhcNMjYwNzI4MjMwMDMxWhcNMjYwNzI5MjMwMDMxWjAzMTEwLwYDVQQD
EyhhNmZmZTFhMmY3NDYxOTc2MDQ1ZTIyZmNkN2JmYzc3MjAxMjE1ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35S643qo2HfOFi++FUtAXP+Lp2Bj
d9t79QHKAxChnGIMOvVm/W7cE6+3FlhfkE43vZPp4QptbuTJ04osIA4IQQWyUE83
JzhhSHKscKarvMkEPjmNASvYOnzEyUJo9GQ7ELRyRp5jIemP0omIOSn5gWSQPTFD
hcRSBZWwjYJTFuGuABsyZdncPguj6ZlqHwSwx6B9PvmDpNWslFuWS8Etiudg9a1t
Vja/rzTj/akMpssus6/jPuGSlAnYgs/hSWWlQnCoMAVEUuRgbASqA5Ehh/1utfLu
p4XbQAGNprg3pUJPKXIDlfe8yUMs+602mOpN+SswZ8E7kYWgS0PS7ejdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb/4aL3Rhl2BF4i/Ne/x3IBIV/NMB8GA1UdIwQY
MBaAFLIaP0r5SlgOuee1hUKgCEshwrCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYt
NTEyOTE3MmI2OTY2LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYtNTEyOTE3MmI2OTY2
LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyzt+x4xA
nP2JtETT4o3ohfPCiW22KOHvrS1Kc3qmpPDAKp42aWBnEk5Q4VpYY2mhJaystS3q
1CZFHCkymkRguB67YZ/I7bWNS2G/BiDOCZet5iUIdwMhXqZAtqAUCAOuwFruderp
XMPGOuBUaxv6knb1ZzEa+3lCqkrenOPUL+7XZSx6CAiVWNSjyFCenh//sjLqPTuW
ZlVs6KDsn7Hkbm11zlXIU01EJ33vgj1vv0xU3aCIFlwRYRAKE5/wW274j9jX9882
3XQ1UK20Q1aVHGmMhbaIr0z2H1XeeDaYkhdLUZiL7yyJA3jKP8rsa81Ys9WkKPLN
7Kf7F3wAw6rQHA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:17:31 2026 by rpki-client