Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: fKXNScl9cIxrZdOSz7kc9r9rKu/i9GXMaMdSe2qx0Wg=
Subject key identifier: FB:74:6D:AC:95:36:2A:47:FD:81:64:05:EA:55:C7:91:1B:F7:19:13
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019CACEBF3C47B609AC01449CF246E19C1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1666
Signing time: Mon 02 Mar 2026 05:01:10 +0000
Manifest this update: Mon 02 Mar 2026 05:01:10 +0000
Manifest next update: Tue 03 Mar 2026 05:01:10 +0000
Files and hashes: 1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: qjjbl/4Qm5n2Bu1vRdR98Ew6vXjdvwmxP5lwOMNkX+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f3:c4:7b:60:9a:c0:14:49:cf:24:6e:19:c1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Mar 2 05:01:10 2026 GMT
Not After : Mar 3 05:01:10 2026 GMT
Subject: CN=fb746dac95362a47fd816405ea55c7911bf71913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:fe:db:00:5a:9f:3d:2f:61:7d:74:b2:2f:
89:5e:6e:82:e8:46:b7:e5:44:48:cc:32:72:5d:f7:
ed:4b:3b:0b:48:5b:51:e9:ef:f9:01:55:ca:3a:cb:
3f:59:bb:9d:c8:0e:93:6a:af:55:a7:d7:cb:e2:fc:
4d:6a:2f:a3:8d:a1:8f:a5:b8:a9:23:03:c3:c2:a1:
55:5a:42:63:26:9d:f9:9b:ca:87:73:c4:6a:87:cc:
9b:68:81:0c:d7:f9:ec:d9:30:e3:cc:4b:d0:d0:5d:
8c:62:35:9b:05:e8:65:e0:72:7c:bc:31:93:72:5a:
45:25:ca:4c:9f:8f:47:bf:0b:60:47:1d:bb:9a:2f:
23:ba:7f:41:c8:36:ec:09:39:4b:c7:28:1e:5f:00:
9a:a3:bd:c5:82:eb:60:d5:92:dc:40:4f:70:13:2e:
b8:ff:70:58:63:41:1f:a2:38:19:23:6a:6b:98:ea:
30:8e:08:91:ed:e4:b7:ec:b9:c9:31:e4:60:5c:bf:
fa:f6:99:27:43:35:2d:83:27:81:2d:73:79:79:df:
91:e5:9d:73:df:cf:1a:29:41:8a:d1:4c:02:bb:98:
43:f5:8b:ce:87:f1:d1:32:5b:2b:cb:a5:2b:77:c5:
78:c4:ca:3c:96:57:d5:cf:cc:83:c8:4f:19:43:73:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:6D:AC:95:36:2A:47:FD:81:64:05:EA:55:C7:91:1B:F7:19:13
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8c:6d:97:d3:af:5d:2a:9d:74:0e:c2:7b:55:67:53:f1:de:
ef:b3:bb:7a:94:ef:49:43:6b:9c:8a:54:83:b4:93:e0:f6:c7:
f0:43:28:80:81:7e:8c:09:84:2c:98:04:3e:30:21:40:80:6b:
ea:64:d5:41:46:de:38:1b:34:aa:d5:d6:0e:67:72:28:7a:73:
fc:2a:1f:a9:74:d0:61:c6:8a:a8:7f:51:34:d0:a3:8c:6d:e7:
63:69:23:4e:12:94:c4:23:20:07:f2:62:bc:64:c3:55:f5:94:
f5:7a:06:53:d7:ac:c2:74:0a:c4:61:76:b5:4a:98:43:e3:7c:
68:40:81:9f:00:20:38:6e:ce:15:d9:8b:7a:af:a0:6a:80:2c:
bd:af:8e:0f:2d:38:c5:92:c0:a9:8d:c6:a1:66:ea:65:a0:7b:
2a:8a:22:08:4d:52:c2:b4:7c:ac:04:60:df:7d:c0:ba:fc:3a:
5c:96:76:d3:1b:14:31:67:c4:f8:55:98:4a:5c:06:4f:3b:fe:
5d:e2:ac:5d:7d:76:5a:36:0e:d7:5b:bc:19:88:ba:b8:c7:72:
46:82:11:6b:f0:3c:87:f4:1e:40:6a:5f:d5:83:89:37:03:75:
78:b8:9b:0e:77:55:bb:40:13:d0:39:ae:c5:e4:52:99:89:c3:
a2:8f:aa:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6/PEe2CawBRJzyRuGcG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1
YzdkYWMwHhcNMjYwMzAyMDUwMTEwWhcNMjYwMzAzMDUwMTEwWjAzMTEwLwYDVQQD
EyhmYjc0NmRhYzk1MzYyYTQ3ZmQ4MTY0MDVlYTU1Yzc5MTFiZjcxOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRr+2wBanz0vYX10si+JXm6C6Ea3
5URIzDJyXfftSzsLSFtR6e/5AVXKOss/WbudyA6Taq9Vp9fL4vxNai+jjaGPpbip
IwPDwqFVWkJjJp35m8qHc8Rqh8ybaIEM1/ns2TDjzEvQ0F2MYjWbBehl4HJ8vDGT
clpFJcpMn49HvwtgRx27mi8jun9ByDbsCTlLxygeXwCao73Fgutg1ZLcQE9wEy64
/3BYY0EfojgZI2prmOowjgiR7eS37LnJMeRgXL/69pknQzUtgyeBLXN5ed+R5Z1z
388aKUGK0UwCu5hD9YvOh/HRMlsry6Urd8V4xMo8llfVz8yDyE8ZQ3MjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt0bayVNipH/YFkBepVx5Eb9xkTMB8GA1UdIwQY
MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt
NmU2MzYxYmVhOTg5LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5
LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYxtl9Ov
XSqddA7Ce1VnU/He77O7epTvSUNrnIpUg7ST4PbH8EMogIF+jAmELJgEPjAhQIBr
6mTVQUbeOBs0qtXWDmdyKHpz/CofqXTQYcaKqH9RNNCjjG3nY2kjThKUxCMgB/Ji
vGTDVfWU9XoGU9eswnQKxGF2tUqYQ+N8aECBnwAgOG7OFdmLeq+gaoAsva+ODy04
xZLAqY3GoWbqZaB7KooiCE1SwrR8rARg333Auvw6XJZ20xsUMWfE+FWYSlwGTzv+
XeKsXX12WjYO11u8GYi6uMdyRoIRa/A8h/QeQGpf1YOJNwN1eLibDndVu0AT0Dmu
xeRSmYnDoo+qag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:56 2026 by rpki-client