Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: mYNddtASev+HKY8X8bnYQCAAEgNpX5dUSVKdWouWW8c=
Subject key identifier: 4D:19:B1:57:85:CF:F7:19:F4:45:5A:49:09:2E:02:BC:DA:A5:B8:08
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 01A1280CBF4EC66DA4399018AFB50AEAC418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 18B9
Signing time: Sat 10 Oct 2026 23:01:26 +0000
Manifest this update: Sat 10 Oct 2026 23:01:26 +0000
Manifest next update: Sun 11 Oct 2026 23:01:26 +0000
Files and hashes: 1: AlxQ5k-u-Ouf8v88D3bEiE3m_w8.asa (hash: H7RFq89YoSrzmmDi/9xMxCLOW54NyDvA/cZq9dYzaD8=)
2: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: j3up6wZxrDcYN7GR9xnt+7N0HzczWZ9H73Y7XRSVoXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:bf:4e:c6:6d:a4:39:90:18:af:b5:0a:ea:c4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Oct 10 23:01:26 2026 GMT
Not After : Oct 11 23:01:26 2026 GMT
Subject: CN=4d19b15785cff719f4455a49092e02bcdaa5b808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:de:be:71:4a:c3:32:d9:03:68:2b:01:86:
4a:e9:73:16:9c:4e:91:84:88:07:61:5d:22:bb:4a:
85:71:06:b3:49:dd:ce:07:7e:ad:21:e1:e2:b5:28:
40:8d:4c:e3:0e:54:34:5e:2a:ac:59:41:8a:59:41:
50:7e:ac:12:e4:01:cf:1f:bf:35:03:e5:07:c1:16:
26:79:0d:44:ec:24:78:a8:19:e9:33:f9:0e:20:89:
07:71:ab:5a:da:71:52:53:0c:41:a8:ce:61:55:43:
45:1d:ae:ff:c5:69:d4:e6:70:75:98:0f:f7:19:f7:
61:16:0e:b5:d8:1b:40:74:32:24:89:fa:dc:de:d0:
a1:ab:b2:92:d2:2a:19:7a:1c:22:5d:40:46:8a:1f:
e6:21:d6:10:37:06:d1:64:c7:1b:0f:16:94:f7:f1:
98:b3:5d:c7:43:e1:37:18:c8:6f:2b:e6:81:9b:03:
bc:36:b7:c7:b2:6e:82:68:3f:68:65:57:fd:68:54:
5e:13:3e:a1:9d:32:53:c2:db:e9:69:78:27:be:3c:
f5:7a:b4:f3:00:75:5e:00:55:65:63:37:13:f3:9b:
c3:f6:80:f5:ed:d0:a5:c4:db:b9:3d:00:f0:a0:a0:
87:35:1e:e1:6f:0d:63:d4:ee:92:0d:a9:a3:32:5c:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:B1:57:85:CF:F7:19:F4:45:5A:49:09:2E:02:BC:DA:A5:B8:08
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1f:56:89:df:30:4b:21:56:57:4d:47:c5:59:84:9b:22:11:
cd:01:c2:8d:2e:16:db:d6:c1:c1:82:02:6d:6c:8f:74:7c:8b:
70:ec:a6:85:f4:74:7a:39:66:4a:28:a8:6d:7a:49:29:0f:ec:
74:d8:15:4e:41:b9:4a:63:46:6f:d9:1a:ea:23:51:1e:fb:74:
55:5b:d4:12:22:ce:80:91:6e:b9:32:cb:d3:65:30:78:de:1c:
1a:b6:fb:7e:82:7f:09:29:5a:16:8c:ec:e9:60:b7:52:18:03:
62:12:18:a0:16:3f:ea:ef:f8:4d:c3:cc:60:80:7e:f9:a4:09:
a3:f1:df:82:da:77:72:46:10:b7:3a:01:e2:d4:8a:61:fe:a7:
11:bd:04:d4:3c:aa:d1:ad:1c:63:2d:9f:72:ca:9c:d8:1d:20:
16:38:04:8b:31:8c:53:ad:89:55:04:ec:91:40:b3:86:51:d1:
90:43:c9:b4:e5:37:07:0b:33:1d:9e:b2:dc:6d:5d:4b:79:7b:
cd:d4:9b:b0:4e:39:dd:06:31:01:cd:ec:25:fe:a4:e8:f5:e7:
3d:9a:0a:35:e5:30:b1:76:cd:b8:2e:ad:a0:e4:ee:d3:43:5f:
31:4b:e4:8e:2a:4b:8a:ba:b6:99:31:a1:5b:5b:5d:45:91:3a:
78:55:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:14:25 2026 by rpki-client