Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: 5DCmXwQ3vw4cCSEBGu3M3C33YlWt4qmPiFeKj1MgHWs=
Subject key identifier: DF:FC:A4:AA:7F:3A:6E:69:9E:A0:A1:52:82:A2:30:D5:DB:BA:9F:8D
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 01A0C5C53F34098B978584D7BD9F6A0090A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 19CF
Signing time: Mon 21 Sep 2026 21:00:33 +0000
Manifest this update: Mon 21 Sep 2026 21:00:33 +0000
Manifest next update: Tue 22 Sep 2026 21:00:33 +0000
Files and hashes: 1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: dmNvZ/21KoKZKSJx0GxqNuvgP0X/kbZHOp8H31kutnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:3f:34:09:8b:97:85:84:d7:bd:9f:6a:00:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Sep 21 21:00:33 2026 GMT
Not After : Sep 22 21:00:33 2026 GMT
Subject: CN=dffca4aa7f3a6e699ea0a15282a230d5dbba9f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:eb:5a:46:ff:0d:d4:b2:ab:3c:61:16:b5:
98:b2:6d:e4:11:82:7b:f7:7d:d5:23:70:50:4a:6b:
5e:32:b2:6d:c3:53:97:a0:e6:c1:a8:e0:16:d7:bc:
22:b6:9c:3a:cd:61:d2:04:b1:83:dd:52:a1:36:8d:
8f:6b:f4:6c:50:df:f2:4a:3c:d3:0d:21:9e:3b:fc:
4a:c1:17:4f:56:1e:c6:06:f0:9d:41:66:6c:3c:2f:
22:b0:55:52:30:53:55:1c:bf:c3:c1:d4:07:78:ba:
63:78:b3:bc:04:c6:74:11:aa:25:29:d4:0f:fe:b5:
d8:5f:7e:79:f5:a0:48:5b:69:94:61:c1:70:67:95:
6c:a3:44:69:41:f8:4b:37:64:af:33:8d:dc:db:dc:
7f:22:33:c9:14:12:f9:98:ae:2e:bd:99:6a:f8:01:
d2:94:cc:10:b4:aa:e1:37:60:80:09:f0:a2:75:f4:
9a:0c:bd:27:4c:0f:b9:86:13:aa:28:e7:2c:af:02:
99:25:51:d9:42:4b:09:ce:6e:a9:f6:89:9b:a1:b9:
c5:ea:77:fc:b0:e1:0d:45:9b:a1:fe:1c:1c:01:b5:
87:ec:60:d9:c3:c0:6b:aa:96:c1:c8:85:bd:e5:9f:
81:2a:01:b6:67:cc:77:1b:10:db:65:17:f7:4a:16:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:A4:AA:7F:3A:6E:69:9E:A0:A1:52:82:A2:30:D5:DB:BA:9F:8D
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3c:c6:72:b5:1d:00:94:89:d4:ec:ec:b4:de:da:fa:11:11:
7a:52:f7:d2:49:6a:72:2e:0c:98:5b:44:35:9b:70:05:36:5b:
ad:87:73:71:0f:9f:f8:ef:2c:eb:bf:cb:16:11:20:cc:99:fa:
85:bd:ed:84:cc:8c:ef:c3:9d:ff:4d:d5:ed:6a:85:24:48:93:
1b:74:40:a3:c7:75:f5:10:de:01:1a:a9:fa:27:a9:9d:4e:fd:
00:2b:4b:52:dc:9b:f5:af:f0:db:ab:f2:9a:cf:c0:9b:a0:1b:
af:b6:92:00:1a:4e:86:46:e6:c4:73:a7:ca:39:a2:3c:b3:78:
d0:11:8b:6e:86:21:fc:00:f3:e0:2e:92:e9:cb:f0:b2:61:85:
28:b3:c1:d6:84:2b:61:ab:1a:0a:d4:e5:5c:d3:2f:0d:02:9d:
0b:a5:da:33:ce:aa:25:db:60:e5:98:82:12:23:0d:7e:1f:fc:
c6:05:3b:ee:f7:6f:3b:66:c9:a4:84:eb:e4:0b:21:c3:31:a6:
89:9d:a4:c2:b9:05:9a:bb:f2:3c:c6:38:75:59:7d:9e:9f:92:
7b:e1:6e:71:b5:ca:39:fe:50:c8:42:05:f2:dd:e4:eb:1a:f8:
61:3c:b7:28:58:36:06:f4:88:6f:33:ec:3d:b5:a0:5f:a5:fe:
bd:f8:29:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxT80CYuXhYTXvZ9qAJClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMTVjZDhlNmRiMzU0NDE5ODRkOWM3ZGZjOWFmYjY1M2U1
NWRmZjEwHhcNMjYwOTIxMjEwMDMzWhcNMjYwOTIyMjEwMDMzWjAzMTEwLwYDVQQD
EyhkZmZjYTRhYTdmM2E2ZTY5OWVhMGExNTI4MmEyMzBkNWRiYmE5ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTrWkb/DdSyqzxhFrWYsm3kEYJ7
933VI3BQSmteMrJtw1OXoObBqOAW17witpw6zWHSBLGD3VKhNo2Pa/RsUN/ySjzT
DSGeO/xKwRdPVh7GBvCdQWZsPC8isFVSMFNVHL/DwdQHeLpjeLO8BMZ0EaolKdQP
/rXYX3559aBIW2mUYcFwZ5Vso0RpQfhLN2SvM43c29x/IjPJFBL5mK4uvZlq+AHS
lMwQtKrhN2CACfCidfSaDL0nTA+5hhOqKOcsrwKZJVHZQksJzm6p9ombobnF6nf8
sOENRZuh/hwcAbWH7GDZw8BrqpbByIW95Z+BKgG2Z8x3GxDbZRf3ShZZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/8pKp/Om5pnqChUoKiMNXbup+NMB8GA1UdIwQY
MBaAFLIVzY5ts1RBmE2cffya+2U+Vd/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMt
ZTk1MGQ4N2Y4ZTI1LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMtZTk1MGQ4N2Y4ZTI1
LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDzGcrUd
AJSJ1OzstN7a+hERelL30klqci4MmFtENZtwBTZbrYdzcQ+f+O8s67/LFhEgzJn6
hb3thMyM78Od/03V7WqFJEiTG3RAo8d19RDeARqp+iepnU79ACtLUtyb9a/w26vy
ms/Am6Abr7aSABpOhkbmxHOnyjmiPLN40BGLboYh/ADz4C6S6cvwsmGFKLPB1oQr
YasaCtTlXNMvDQKdC6XaM86qJdtg5ZiCEiMNfh/8xgU77vdvO2bJpITr5AshwzGm
iZ2kwrkFmrvyPMY4dVl9np+Se+FucbXKOf5QyEIF8t3k6xr4YTy3KFg2BvSIbzPs
PbWgX6X+vfgpig==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:26:24 2026 by rpki-client