Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: vNBUAi6A6YWA9stkiIntpIrBfQ7pTP+oXlSKN+QR2dg=
Subject key identifier: 31:A8:A4:20:DF:78:A9:05:15:F2:3E:31:89:8C:DA:70:41:2D:E5:6B
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019CAB6BC7E23C96C8C509739FA4E3000314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0928
Signing time: Sun 01 Mar 2026 22:01:33 +0000
Manifest this update: Sun 01 Mar 2026 22:01:33 +0000
Manifest next update: Mon 02 Mar 2026 22:01:33 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: qzh2vh62kqjCq_kquaQFKN2dkjk.roa (hash: z2SqtvBA5B+Uxlu9McSqz/3+lS4dmqsulgYELWekW6s=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: iZPnyvwKAS9cZ/ervyCcX70K7hWYb8mx6Jj9Hc+W9CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c7:e2:3c:96:c8:c5:09:73:9f:a4:e3:00:03:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Mar 1 22:01:33 2026 GMT
Not After : Mar 2 22:01:33 2026 GMT
Subject: CN=31a8a420df78a90515f23e31898cda70412de56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:6b:21:b2:2c:fe:7d:b4:44:08:36:48:8f:
6a:d8:6f:41:68:e5:ae:ff:cf:b0:41:96:92:24:e0:
7c:f6:61:3e:4b:79:d8:be:b2:20:32:34:32:a5:5e:
41:f4:27:a1:b1:af:bd:0f:15:97:16:4a:cd:bb:c7:
88:f7:f2:01:74:5d:11:4f:b5:ac:7c:ac:b6:74:e9:
3b:8d:a7:a8:0e:bc:0b:6b:8d:27:75:77:ca:bb:eb:
19:84:6c:d7:91:1b:76:70:32:1f:4e:4d:6c:26:81:
e5:fb:ab:57:2a:bd:82:99:46:7e:4b:46:71:db:fb:
b5:72:ce:ee:7f:b7:3d:ec:e2:3b:51:33:65:a1:f5:
c8:3f:26:29:df:af:60:28:a1:e0:5b:5b:90:be:e1:
4f:b4:3d:af:b4:d3:0b:31:8b:55:e5:e3:bd:f6:2e:
ab:82:26:43:c5:62:6e:35:fa:c1:65:36:cb:19:35:
b1:f5:ae:b6:04:e6:fa:2c:bb:d3:1d:c4:d3:5c:6f:
7f:3f:0b:6c:33:99:c9:3f:21:3a:44:f5:b9:ec:90:
7c:c3:26:bc:14:59:28:b1:d2:49:4a:53:f4:e0:d9:
34:19:e8:42:a1:50:d2:60:61:f9:2c:6c:35:c5:3c:
c0:f9:bb:2e:66:55:e5:40:ca:12:ab:1a:ca:f4:3a:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:A4:20:DF:78:A9:05:15:F2:3E:31:89:8C:DA:70:41:2D:E5:6B
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:dc:fb:cd:bf:6e:67:e1:3c:25:a0:41:e4:cf:6a:8b:3e:
56:1b:2c:94:16:1a:e0:0d:72:c4:70:05:e0:0a:5c:7a:59:42:
e5:ac:52:cb:6e:12:ec:b6:2e:70:45:b9:43:bf:d2:24:02:71:
b2:57:61:c3:36:a3:fa:6c:4d:da:c1:18:4f:5c:ec:0e:e9:bb:
2f:4c:ee:01:f4:a8:7b:88:f7:87:35:0f:21:7f:82:4f:86:9e:
eb:d2:6d:c4:24:f6:15:1a:72:b5:ad:c2:e0:4a:cd:8e:74:71:
6c:c4:ab:3a:68:7f:82:1a:a7:23:21:04:a1:33:c2:d8:60:6e:
63:7e:73:b8:c4:79:0a:6a:9b:34:24:8b:13:2f:d7:b1:ca:91:
7a:0d:25:65:1d:5e:46:0a:93:f8:60:56:d9:97:9a:5d:1e:0b:
1e:85:f0:25:dd:50:24:6d:b3:8b:b2:77:13:ab:64:c9:1a:4b:
da:d1:4e:a0:e9:2a:f9:73:4e:28:1d:fc:20:41:79:b9:da:f0:
5b:eb:0a:20:0f:3e:fb:ad:af:f6:8f:e7:ce:91:76:06:61:79:
b9:a9:0f:9b:e1:75:7c:cb:9f:eb:39:9c:58:ff:af:9d:e1:3a:
82:35:63:17:fb:71:b8:70:a4:a3:8a:6f:26:0d:fc:00:02:eb:
f9:33:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:45 2026 by rpki-client