Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: cS9+uEnqDuUC9bKKlLqOcfr0GBoQmtGZWvpl9Jvl89g=
Subject key identifier: 18:A2:8B:52:81:9B:4D:E6:27:83:AB:3B:9B:09:E8:FF:E2:6A:26:74
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 019EC03673EFE3DC50AF594B1775E8200CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 18C3
Signing time: Sat 13 Jun 2026 09:00:54 +0000
Manifest this update: Sat 13 Jun 2026 09:00:54 +0000
Manifest next update: Sun 14 Jun 2026 09:00:54 +0000
Files and hashes: 1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: hYNeaPyqaUKzmLG6PYtp67aiQBh2KaNlxeWLgapzReA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:73:ef:e3:dc:50:af:59:4b:17:75:e8:20:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Jun 13 09:00:54 2026 GMT
Not After : Jun 14 09:00:54 2026 GMT
Subject: CN=18a28b52819b4de62783ab3b9b09e8ffe26a2674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:b7:89:ff:58:91:65:45:ec:a7:f3:62:a5:
aa:76:7e:bd:19:29:77:5f:e8:78:5a:de:2a:d0:44:
b7:18:1c:47:9d:d6:67:47:cb:3f:70:70:e0:1b:79:
59:4c:1c:4b:97:62:2e:fe:01:30:e1:4e:5d:e0:02:
8a:40:e4:a1:ae:9f:b0:90:ff:fd:c7:fc:d2:00:62:
8a:60:ef:ec:29:3f:ff:ca:29:9c:47:14:28:82:37:
d2:ae:4d:8d:42:e5:d7:46:0b:3f:e3:c0:f8:15:a8:
be:5e:26:6b:50:d8:5f:fa:9e:74:94:32:71:6c:73:
c7:ab:a4:38:9b:0a:e0:48:96:7b:ab:5f:0d:6c:2e:
9d:e3:98:b2:e0:e5:df:76:03:31:d9:07:ea:4f:af:
a9:c8:7e:75:1c:f9:08:f0:e4:c8:58:00:c4:28:c2:
0e:07:6c:34:a0:20:11:73:57:45:e0:07:f2:c8:6f:
98:0c:ba:5f:4e:bd:2a:61:dd:fd:4a:49:1e:89:86:
0d:51:ac:cc:da:c0:88:a2:76:a6:94:92:c8:85:19:
46:b9:45:eb:57:18:56:af:1c:5c:e3:f4:3c:ce:c7:
17:af:1d:c4:21:34:81:10:55:32:e7:b5:e3:60:90:
fb:2c:e4:8e:6e:e1:96:cc:da:c8:0b:54:ca:81:ea:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:8B:52:81:9B:4D:E6:27:83:AB:3B:9B:09:E8:FF:E2:6A:26:74
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:5b:4f:46:92:51:e9:80:78:e8:c4:50:06:bb:00:63:7e:
78:0b:36:22:93:9e:24:d2:59:50:1d:4d:3c:4c:42:89:9d:ed:
5d:a6:03:8c:a8:1a:5d:d6:e2:9d:cb:01:68:15:22:dd:6f:43:
04:d5:98:79:41:34:ca:61:91:c0:eb:ef:20:94:c8:a5:06:8c:
9a:a0:09:6a:d6:98:20:83:56:be:91:9d:4e:3f:d2:23:db:77:
71:5d:ec:cb:83:a9:08:21:bc:25:4e:0c:c5:0b:07:81:12:06:
7c:0a:d9:2c:e2:ae:41:11:23:e6:e4:aa:29:28:68:aa:f6:f2:
a5:aa:8d:3f:a7:2e:66:df:de:7f:66:ca:61:d7:f2:5b:77:09:
79:f3:f8:9d:4e:c6:ec:66:a1:a9:86:6a:28:87:ac:cd:0a:e6:
79:b3:c7:3e:a8:3c:26:c6:8b:70:ca:1d:54:f9:61:8d:2d:22:
8e:96:c6:74:9d:e9:d1:13:67:73:59:f7:b6:8c:f7:db:42:a6:
3b:1f:a0:39:0c:29:95:7f:ec:fe:3d:ef:9f:e5:e6:ad:76:d4:
e1:54:24:ca:2e:85:0a:30:2d:ea:69:dc:f2:45:fe:28:b6:d0:
53:6d:a2:08:49:32:4d:1a:c2:17:76:ee:41:71:77:91:ad:aa:
6d:5f:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:42:13 2026 by rpki-client