Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
File: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft (raw, json)
Hash identifier: qzlslLAJZTMDsifCl8le1FQ6UUtGeG7doM3BKu7Uc0I=
Subject key identifier: 38:39:3D:80:81:AF:C4:0B:44:B3:B0:B6:85:25:02:7B:0E:45:15:96
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial: 019CAD230A1FA8251C8FBF68D0930B77FBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:01:20 +0000
Manifest this update: Mon 02 Mar 2026 06:01:20 +0000
Manifest next update: Tue 03 Mar 2026 06:01:20 +0000
Files and hashes: 1: KbY3nni1wEfL__PANyZgyUs7RUY.roa (hash: gJHLBx+13eQSnJw340+rzpbr2Pvo3zONDmCvI5/SYVk=)
2: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl (hash: txtHL8HI8QNAE0M9E314Kay2P9NJ2uUjU12mWv82eHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0a:1f:a8:25:1c:8f:bf:68:d0:93:0b:77:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
Validity
Not Before: Mar 2 06:01:20 2026 GMT
Not After : Mar 3 06:01:20 2026 GMT
Subject: CN=38393d8081afc40b44b3b0b68525027b0e451596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:c9:81:f9:07:17:ca:4f:a6:32:ff:0d:f4:
9f:70:b6:ec:e8:75:98:8c:d4:07:c6:cc:56:cd:89:
10:54:80:a1:87:29:1b:f7:3c:3a:14:c8:0a:d7:b9:
40:de:23:70:ba:3b:fc:f9:f1:4d:2b:35:ac:ad:98:
1f:eb:5e:8f:28:60:76:d8:79:95:92:67:60:5f:7e:
c8:1e:01:28:77:86:a2:14:35:d9:ac:ae:eb:77:c0:
bb:12:2d:71:29:3f:5b:82:26:a2:37:29:1f:a9:ad:
df:fa:d1:c9:35:b7:78:37:2e:85:c7:09:f0:57:d4:
8e:44:47:38:18:3a:81:e6:a3:d0:a9:6a:ec:99:af:
d3:e7:f1:90:d1:70:26:cf:a1:bb:86:52:b0:c1:9e:
54:e3:dd:44:7d:1f:60:42:95:80:16:7e:28:47:f8:
10:d6:4d:1a:ff:17:6d:00:8d:b1:8c:59:0e:e6:16:
78:93:a1:e5:a2:2d:81:08:ae:63:45:14:99:ce:26:
27:82:50:ea:8d:fe:f6:a4:a7:70:4f:9d:1d:e5:80:
b2:f1:f9:0a:cf:91:c9:79:4c:25:fe:5c:82:a3:ff:
ab:7a:94:b9:b5:bf:5c:16:dc:ee:e5:a9:48:4f:64:
08:f5:f3:10:94:9e:83:a4:74:bc:0c:ef:fe:7e:f9:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:3D:80:81:AF:C4:0B:44:B3:B0:B6:85:25:02:7B:0E:45:15:96
X509v3 Authority Key Identifier:
keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:76:a5:68:35:ca:ec:54:20:4e:f0:e3:3c:4f:fa:51:c8:
c0:f0:a7:5b:58:56:74:af:cd:54:e7:4c:28:78:d3:0f:2c:a9:
45:e4:12:29:85:5e:5d:4d:d2:81:e4:19:f3:33:8d:f6:2d:1c:
e3:37:f6:c6:86:04:cf:9d:17:56:98:b4:e5:8b:a4:4d:3f:9d:
d4:68:57:83:dd:7e:8c:13:50:99:ab:00:cc:54:b0:10:b5:5f:
93:e1:0d:63:eb:54:11:b7:76:17:0b:f5:cf:95:03:50:3c:7d:
22:58:81:b0:86:ca:06:6f:08:36:d4:bc:b8:4d:92:c1:88:28:
cc:15:a4:9d:b9:e9:c4:63:0a:58:74:ff:2b:51:6f:9d:d7:30:
c1:d6:f7:e3:be:67:06:f7:b0:5b:74:52:88:11:64:b4:23:2f:
5c:93:73:b5:43:19:79:f8:b5:b4:bc:73:12:fe:ed:46:ba:81:
a1:f1:40:7a:74:b7:a6:c0:9c:60:b1:d7:d7:d7:2f:cd:1b:0d:
2d:da:00:3f:ea:9a:dd:f6:29:e2:86:37:80:1d:32:70:5d:a9:
e4:06:ff:cf:89:5f:08:46:04:78:b4:69:b4:c5:09:8e:b7:4d:
6a:53:f5:98:a0:40:3d:fa:0c:e2:5a:24:9c:15:f2:1c:32:77:
d5:f4:8e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIwofqCUcj79o0JMLd/vgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMWQyMGJlNzdlMTIyMzIzMjNjMTQyMmZiNTE5OGZlYTAw
ODYwMzQwHhcNMjYwMzAyMDYwMTIwWhcNMjYwMzAzMDYwMTIwWjAzMTEwLwYDVQQD
EygzODM5M2Q4MDgxYWZjNDBiNDRiM2IwYjY4NTI1MDI3YjBlNDUxNTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M3JgfkHF8pPpjL/DfSfcLbs6HWY
jNQHxsxWzYkQVIChhykb9zw6FMgK17lA3iNwujv8+fFNKzWsrZgf616PKGB22HmV
kmdgX37IHgEod4aiFDXZrK7rd8C7Ei1xKT9bgiaiNykfqa3f+tHJNbd4Ny6Fxwnw
V9SOREc4GDqB5qPQqWrsma/T5/GQ0XAmz6G7hlKwwZ5U491EfR9gQpWAFn4oR/gQ
1k0a/xdtAI2xjFkO5hZ4k6Hloi2BCK5jRRSZziYnglDqjf72pKdwT50d5YCy8fkK
z5HJeUwl/lyCo/+repS5tb9cFtzu5alIT2QI9fMQlJ6DpHS8DO/+fvmJdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg5PYCBr8QLRLOwtoUlAnsORRWWMB8GA1UdIwQY
MBaAFEodIL534SIyMjwUIvtRmP6gCGA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjct
ZWQyODg1MWVjYjc2LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjctZWQyODg1MWVjYjc2
LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZl2pWg1
yuxUIE7w4zxP+lHIwPCnW1hWdK/NVOdMKHjTDyypReQSKYVeXU3SgeQZ8zON9i0c
4zf2xoYEz50XVpi05YukTT+d1GhXg91+jBNQmasAzFSwELVfk+ENY+tUEbd2Fwv1
z5UDUDx9IliBsIbKBm8INtS8uE2SwYgozBWknbnpxGMKWHT/K1Fvndcwwdb3475n
BvewW3RSiBFktCMvXJNztUMZefi1tLxzEv7tRrqBofFAenS3psCcYLHX19cvzRsN
LdoAP+qa3fYp4oY3gB0ycF2p5Ab/z4lfCEYEeLRptMUJjrdNalP1mKBAPfoM4lok
nBXyHDJ31fSOzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:39 2026 by rpki-client