Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
File: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft (raw, json)
Hash identifier: 6+FZN+UMY+akZdAM0ohu2oDyCBbizKfmMa8GxZn5YlM=
Subject key identifier: 6B:91:EB:A7:90:65:21:24:62:D7:48:C7:ED:AC:4D:F3:04:B9:2B:BD
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial: 019D98BD515DC06F642F799BA5B67E1D9545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: KbY3nni1wEfL__PANyZgyUs7RUY.roa (hash: gJHLBx+13eQSnJw340+rzpbr2Pvo3zONDmCvI5/SYVk=)
2: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl (hash: QZ8r0m2xyjNdtm8QFaHL62DdLGmrCnnbJqDGvF/jVII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:51:5d:c0:6f:64:2f:79:9b:a5:b6:7e:1d:95:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=6b91eba79065212462d748c7edac4df304b92bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5d:41:1c:30:9d:d2:af:8f:1a:4b:65:c9:29:
fe:bd:3a:73:e3:33:5d:db:c4:e7:af:42:1e:9c:84:
03:ec:92:43:5d:d2:a2:df:d2:14:59:ee:13:50:48:
b0:65:62:e6:8f:3d:c5:0c:58:e9:2c:1b:d3:b8:9d:
67:94:b6:e4:3d:04:e4:b9:ba:ae:1d:d9:fd:23:60:
d3:94:62:b3:7f:d1:93:9e:43:13:e3:3c:77:68:1a:
04:02:08:4d:75:aa:1e:40:e0:4c:90:46:d0:d7:f7:
3c:fe:1b:cb:53:c8:ac:7a:74:82:b4:f7:e0:40:47:
22:bf:91:fd:d8:9c:35:22:98:62:40:33:3a:0f:cf:
19:41:af:f9:17:25:a3:e2:e2:d8:90:61:a1:ab:a4:
e6:0c:36:d0:99:3a:dc:5b:6d:2b:9d:48:13:08:43:
2d:58:54:ae:56:78:0d:d3:f9:b4:70:88:19:9d:27:
1b:44:10:98:eb:3f:58:e1:e8:d2:aa:dd:73:66:39:
20:67:b2:9d:27:99:a6:ec:69:f4:93:d1:97:fc:d2:
2a:e5:49:94:2e:51:cf:80:e4:05:21:fa:36:ef:d8:
e3:cd:47:0a:5b:c9:0a:05:09:0d:0e:34:18:9c:33:
9a:06:69:48:6e:8e:9d:c9:93:94:0e:14:86:63:e6:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:EB:A7:90:65:21:24:62:D7:48:C7:ED:AC:4D:F3:04:B9:2B:BD
X509v3 Authority Key Identifier:
keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:44:01:fe:28:42:25:6e:aa:97:16:cc:cc:2a:cf:57:26:
13:fb:26:cc:b1:6d:ab:d8:bb:d8:51:9c:8a:fe:b9:a1:60:78:
49:0a:86:44:15:a1:9e:e1:45:03:83:85:0c:cd:29:95:ab:91:
32:37:36:8f:cc:7a:b4:9e:87:78:5c:7f:25:46:ab:80:44:bd:
c0:51:d6:02:a4:1d:4b:bc:71:0b:1c:5c:b8:dd:f9:f7:65:aa:
1b:2d:c9:08:d4:29:c5:73:4d:28:61:6a:26:bc:19:65:5b:1a:
9f:f5:5c:d5:f5:71:43:b8:99:8b:6e:d1:e9:f7:7b:85:3b:56:
f9:cd:ea:0f:4f:05:c7:b7:c7:ad:50:64:16:d9:7d:47:6b:a0:
2d:be:8e:3c:7b:0d:ef:57:cc:83:d4:6c:42:a1:f9:96:74:d2:
78:3a:87:54:61:e1:bd:a6:d0:4f:23:b6:d8:0c:d4:3b:f7:a6:
83:61:b7:f0:34:73:fe:ea:6a:25:2f:52:73:98:a3:40:14:63:
f6:ee:20:70:fd:a7:02:15:c9:1a:0e:c9:12:ab:81:86:9e:e8:
d9:2a:2d:d0:39:71:44:2a:5e:ec:38:e7:dd:d8:24:6f:50:34:
e7:b2:54:4e:18:a3:1f:39:7a:6d:e4:6e:08:41:eb:a7:09:59:
ff:2e:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:39 2026 by rpki-client