Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: CA6tIrFiJTVja1RSq7YWJgN3XokEYBgHWLLqPUNyvU0=
Subject key identifier: F2:D8:9A:F6:56:D0:DD:63:16:7B:80:A5:61:23:63:CE:9E:DD:14:20
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019D9AE3228E660DA1ABE6A3D7F3D1ABEB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 09A4
Signing time: Fri 17 Apr 2026 10:01:09 +0000
Manifest this update: Fri 17 Apr 2026 10:01:09 +0000
Manifest next update: Sat 18 Apr 2026 10:01:09 +0000
Files and hashes: 1: MwiX1sWT4L9Sd2jLdKK-is1cuoU.roa (hash: oswXbOPtoGvOkQD2v1oxYSwYp3lw3uvemjQYUy0pcbU=)
2: qzh2vh62kqjCq_kquaQFKN2dkjk.roa (hash: z2SqtvBA5B+Uxlu9McSqz/3+lS4dmqsulgYELWekW6s=)
3: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: +4x2pQMV5ugHTB98/jf8ha8KHSDcnYL1izj+tjfC14E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:22:8e:66:0d:a1:ab:e6:a3:d7:f3:d1:ab:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Apr 17 10:01:09 2026 GMT
Not After : Apr 18 10:01:09 2026 GMT
Subject: CN=f2d89af656d0dd63167b80a5612363ce9edd1420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:9c:a6:da:a4:4b:9e:25:e6:2c:43:7f:fe:
55:0f:17:80:dd:c4:61:40:51:79:f4:0f:7d:8b:b2:
b3:fd:99:53:b5:64:b8:38:c2:76:f5:92:55:a5:a4:
56:d9:e5:ce:29:cc:8b:b6:e3:63:4e:d8:d1:bc:99:
1a:19:0e:9c:2d:15:0c:d8:f6:80:1a:77:90:36:3f:
5e:da:e4:a7:d1:35:16:07:c1:15:cb:25:26:54:15:
99:36:91:17:be:2c:b4:4f:42:73:ad:e1:3d:2d:f4:
0b:2c:17:fa:1a:67:54:90:1e:d7:50:4c:7a:dc:9f:
e8:04:ef:f4:4f:77:dd:c7:f2:20:50:a5:f1:fd:e6:
d3:4f:c3:b5:f5:a2:d2:0b:55:e3:f2:67:6a:89:77:
ee:9c:f8:9b:46:01:05:87:f5:ca:ef:cd:d5:df:b8:
84:91:39:70:86:a3:c9:4e:84:9b:e2:42:47:59:4f:
d3:b3:4b:e1:af:cf:b1:84:c4:4f:34:93:f0:bb:c8:
9a:b9:3e:4c:13:72:a3:8e:e4:b8:26:e4:a7:91:c3:
cb:0f:6c:bd:e7:17:1f:04:f9:4f:e0:ef:5b:1e:da:
96:eb:e7:19:3d:8b:76:54:89:2a:96:5b:d1:8d:a7:
c8:a3:2b:98:80:5c:fc:12:15:2a:fe:d1:54:b9:4a:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:9A:F6:56:D0:DD:63:16:7B:80:A5:61:23:63:CE:9E:DD:14:20
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:31:9a:37:de:e9:e5:3e:54:2d:95:9c:97:48:bf:fa:e5:4d:
3d:03:ef:bb:33:35:08:57:22:69:f5:58:f2:19:80:09:39:bd:
62:cd:4c:47:00:91:da:5f:d8:50:db:f9:de:3a:dc:b1:b5:69:
c7:a8:d0:fb:c6:85:01:ea:51:51:28:b4:55:18:3d:fd:ef:ad:
42:97:4c:b9:8f:8e:25:98:be:71:e0:30:5b:70:54:35:fb:84:
28:b2:2d:84:10:0e:2f:c0:2f:86:5c:9a:99:c9:6c:53:34:0a:
d7:9f:c6:44:9c:b3:fa:10:6b:08:92:74:34:22:48:e0:20:48:
07:d0:4b:af:08:62:99:2a:55:de:f3:7c:17:f4:a4:ac:c5:f7:
ff:b0:88:4a:46:87:23:28:77:0c:c0:20:26:1b:b9:a6:98:a5:
ec:02:df:1a:c6:cd:82:30:59:d1:52:38:71:94:ff:c4:81:0f:
0a:14:43:b7:9b:f3:62:9a:57:40:b2:62:c1:25:78:b4:9a:b2:
40:88:cf:ad:e5:01:22:ba:8b:76:c9:aa:e4:ee:30:68:92:24:
90:9f:c3:27:dc:1d:10:22:40:e5:c6:f8:8f:10:03:9d:d5:70:
1a:71:94:c2:cb:3d:eb:a0:98:f1:dc:17:2b:ed:4f:48:0f:23:
2e:af:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:03 2026 by rpki-client