Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: LFAB3DglWGcg1yrQvzzgtgV+mjldLqiQYm2z8STPaVM=
Subject key identifier: E7:25:2A:36:BB:D6:CB:F3:09:45:10:DA:2C:4C:A2:3E:73:C1:F1:32
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019EC1EE2A2BB154F03532A549FC529DC665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0A3E
Signing time: Sat 13 Jun 2026 17:01:11 +0000
Manifest this update: Sat 13 Jun 2026 17:01:11 +0000
Manifest next update: Sun 14 Jun 2026 17:01:11 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: Z-wGqJ-biofcF-Vp1NpHNNfxruM.roa (hash: ytiGi9sMZ7eWVpKKgVpL56C1f1ratIXBHa487lrjtIA=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: gkGyiSz5Gr3O6yO473/nMJzVlr+bqlIZG5B2UyKkYTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:2a:2b:b1:54:f0:35:32:a5:49:fc:52:9d:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jun 13 17:01:11 2026 GMT
Not After : Jun 14 17:01:11 2026 GMT
Subject: CN=e7252a36bbd6cbf3094510da2c4ca23e73c1f132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:fd:c4:49:8f:85:8a:1e:f8:52:fb:1c:95:
7a:75:b5:64:27:eb:5d:df:43:be:5f:03:98:89:ca:
9c:60:72:96:83:55:9d:4f:62:8e:8a:cd:4c:e1:4d:
41:95:ea:7e:59:c0:ba:9b:8f:67:38:77:62:e7:d6:
77:b5:c3:6d:b3:06:ee:ac:4c:74:0f:3b:fc:b5:1b:
66:94:4b:23:2a:f5:f5:ed:e6:4e:a2:58:7d:35:a4:
90:ce:fb:44:60:7f:1b:0c:bb:84:d9:b3:a0:10:b5:
57:25:96:78:cf:27:77:e1:a0:aa:90:83:e5:31:40:
3c:26:5d:5c:e0:fe:1f:0b:2d:de:99:09:a8:fb:09:
1d:8d:5b:df:52:76:08:1f:09:5d:e9:e5:c3:30:e2:
0c:f7:53:ab:91:45:52:7c:97:13:db:03:d1:19:9b:
30:5c:70:67:ba:21:45:6e:e1:60:15:69:cc:a5:3e:
eb:bc:f7:d9:92:9b:fa:23:ab:03:66:fb:ae:e6:b7:
66:03:8e:69:8c:22:4f:f8:72:d4:b8:e4:94:da:3d:
e4:14:56:ec:08:d7:19:5b:33:7d:9f:db:6f:3b:ab:
ee:42:a1:5e:d2:f8:12:d4:b3:18:bc:86:87:ee:3b:
78:0a:4f:94:2e:8d:e4:97:71:0e:51:dd:d2:91:c8:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:2A:36:BB:D6:CB:F3:09:45:10:DA:2C:4C:A2:3E:73:C1:F1:32
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:b3:ff:1e:77:9d:2a:79:da:fe:01:44:8f:9a:d4:1f:9f:
28:f7:1b:a3:14:61:19:13:a7:b3:ef:8d:6d:46:ab:86:f1:99:
35:04:75:5c:7b:b3:9e:37:5d:ce:df:02:85:00:c6:dd:da:2e:
3a:c4:60:ff:43:d4:6f:0f:54:ed:d3:7c:50:aa:7a:6a:9d:69:
4b:aa:ea:7d:9c:0c:ee:64:44:01:65:65:72:1a:41:92:40:50:
a7:5c:ba:9e:f4:d9:c2:97:85:2e:d2:ec:51:0e:b7:25:1e:d4:
8d:2c:37:89:a6:91:06:68:f8:e6:5b:b3:d7:16:18:55:7b:68:
38:a5:8d:b6:40:88:f8:2a:73:99:79:7f:ce:f1:46:32:cd:20:
b8:f2:54:a8:4c:52:7c:04:3a:a3:89:68:76:fe:b1:59:a1:d0:
8a:25:02:14:1f:e0:01:c0:b4:17:cb:f2:ff:b9:07:d1:da:ba:
f7:70:74:5a:50:55:8d:71:ba:20:a4:54:c5:80:8c:1e:77:57:
d5:8a:dc:e1:67:69:32:42:a4:42:da:dc:ac:b2:bb:5a:fd:5e:
01:2b:63:c2:4c:57:0d:84:58:aa:8a:94:0e:eb:3a:f8:98:aa:
05:9a:2e:ba:6c:70:e6:25:dc:66:a2:d9:09:9b:21:d2:dc:49:
6d:b7:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:52 2026 by rpki-client