Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: bUiEMfObTflv7J3Bn5XNHsDeon3gVhAMTZIzziH6+1Y=
Subject key identifier: E9:43:1C:FF:A6:18:01:6E:B4:E9:7F:A7:03:5C:F2:53:D3:32:5C:DF
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019EC1EDE93F580383350A1AD4B9200C4900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 177A
Signing time: Sat 13 Jun 2026 17:00:54 +0000
Manifest this update: Sat 13 Jun 2026 17:00:54 +0000
Manifest next update: Sun 14 Jun 2026 17:00:54 +0000
Files and hashes: 1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: LOUZtIX2fWrXdP1MYa9mXCr9Snb5hlXFNaRWrX/mD+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:e9:3f:58:03:83:35:0a:1a:d4:b9:20:0c:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jun 13 17:00:54 2026 GMT
Not After : Jun 14 17:00:54 2026 GMT
Subject: CN=e9431cffa618016eb4e97fa7035cf253d3325cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:8e:c0:0a:31:84:b4:6d:b4:45:2c:0c:89:
32:01:d7:cc:07:5a:57:d6:8c:15:ea:e8:3b:d9:fd:
79:cd:25:38:d8:93:d3:e6:6d:72:2d:1c:64:3c:0f:
e8:49:f2:76:1d:4b:65:4f:27:c1:09:1d:e7:6b:1f:
6e:88:92:91:3c:5a:f2:fa:69:7f:bf:b9:d6:40:55:
76:84:2f:78:99:a8:d6:32:1c:4a:cc:27:c4:57:7e:
86:48:3a:87:a9:56:1b:f9:35:9e:cb:dd:2a:14:e5:
a6:bf:d8:01:7e:76:ed:36:2b:14:9b:22:33:45:7c:
9b:b4:69:fb:b1:b7:6e:f5:6c:12:fd:ca:13:4d:25:
7a:4c:12:75:dd:ab:89:aa:73:81:96:7b:f6:1b:77:
fb:7e:8f:dd:70:f2:7b:c8:3b:08:c6:21:60:de:fe:
49:b6:12:13:55:56:4c:a6:84:b8:ac:c7:ea:09:6e:
ab:46:07:b0:3a:fc:11:bd:16:c9:26:ad:42:0f:85:
31:42:b3:f1:24:a4:1e:1d:ea:51:86:73:30:a7:7c:
a9:7f:36:b1:e9:45:c5:27:87:f8:b3:e1:de:6d:30:
dc:04:20:ca:9a:cd:6b:12:5f:2b:ce:55:15:78:b7:
26:b5:ff:17:91:39:c2:ec:65:c6:92:03:12:11:be:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:43:1C:FF:A6:18:01:6E:B4:E9:7F:A7:03:5C:F2:53:D3:32:5C:DF
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:48:62:55:3d:07:d2:d2:02:03:9f:ba:bc:09:e7:5b:7c:25:
db:89:e6:7c:60:2e:24:f6:6c:e6:b6:2c:9f:4f:2e:4e:ad:f3:
6f:bc:a8:4f:61:10:23:97:d9:a5:23:25:88:a2:a1:d0:1f:67:
98:58:02:cc:e3:9a:57:55:38:46:23:86:97:a3:f1:6c:79:ae:
50:17:b5:33:c8:6b:ff:b3:ed:45:97:e5:fe:fc:33:2c:0b:6b:
59:4f:39:0b:63:aa:36:f7:1d:ea:5f:5f:2e:b5:d2:a9:af:1e:
62:9a:52:2e:18:d3:7a:98:95:35:6e:52:53:24:d3:37:fa:23:
c1:6c:d1:6d:05:56:cb:55:16:53:40:33:e5:aa:d4:c4:63:7f:
60:73:24:1b:80:00:ed:ae:ea:d4:b8:3e:84:83:ce:c2:18:fe:
d2:e6:08:0d:28:b9:20:d4:7e:a6:d6:7e:5e:82:1e:b6:4a:56:
8f:b5:e2:ef:32:c0:5f:86:e1:fc:64:05:d4:65:81:b7:be:67:
45:72:c0:6e:da:56:61:56:e7:df:81:f0:d5:ad:ab:46:bd:e6:
22:b5:4d:90:30:c3:c9:9c:7f:3a:d0:cb:4c:52:51:c3:a5:9f:
8b:e2:81:60:38:15:fa:5a:1c:11:20:e2:5d:9c:75:1d:dd:07:
88:7c:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:41 2026 by rpki-client