Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: K/rTMPLpXIl1AIqOUU/Iovy9nX3t5/5PJbe3n0Qr+Q0=
Subject key identifier: C7:A1:D7:BA:B5:18:B5:FC:B8:51:AD:30:43:69:9D:30:6B:58:EA:F3
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 019D99997D4E2F006BEFB111004BAA40FBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0C7E
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: BLwnlpOPwEzBKmF_4QRTJYpcxNU.roa (hash: v4Ot4HyO70Y+AHmwBRqB50tH8tjobdfYFYP+6RLw5hM=)
2: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: k2xQmVPjEJIToXmbfvbBf2C8dNsrwCkyiauabWRkIBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7d:4e:2f:00:6b:ef:b1:11:00:4b:aa:40:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=c7a1d7bab518b5fcb851ad3043699d306b58eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:8f:b0:03:25:1a:a2:e6:84:0c:c0:52:d3:
ff:5b:a6:b1:c9:36:25:f5:1b:2b:c6:38:4d:10:09:
c4:29:b1:2d:7d:c3:5a:68:e9:e3:14:c6:54:8a:4c:
bd:b9:b3:a6:98:e3:28:d5:bc:cb:6b:07:a1:17:98:
bd:38:18:1e:39:ab:e3:e2:ca:18:3a:8c:15:24:86:
26:00:a2:9a:2a:5e:1a:5d:31:c3:70:85:1c:2b:5f:
a6:11:25:2a:d6:c4:a1:aa:21:6c:37:52:7b:ea:17:
89:ae:25:ad:59:99:03:7c:ac:ac:95:07:5a:55:ab:
00:e4:97:7e:13:c2:7d:73:f4:d2:70:4c:77:bf:ad:
fe:ec:1b:9c:24:7c:27:53:02:52:74:69:86:c0:e9:
5d:f8:02:08:15:27:93:57:82:b2:fb:61:2b:d2:f9:
40:29:d3:fc:2c:f2:ed:14:b8:a6:87:6b:45:ef:89:
1f:83:68:a8:60:a3:7e:4d:0f:82:a2:35:a5:a0:94:
72:09:9b:ac:e4:9c:c9:d8:bb:9d:6e:a0:cd:70:0f:
f3:15:9b:6f:78:2b:ed:4a:95:d4:84:0a:2d:40:ec:
9b:cf:25:bb:48:e7:58:e6:cb:5f:ca:9f:26:99:d7:
11:a9:b0:ad:b0:b6:27:e0:f9:1f:55:4d:03:40:b3:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:D7:BA:B5:18:B5:FC:B8:51:AD:30:43:69:9D:30:6B:58:EA:F3
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:dd:cc:6a:4b:1c:c5:8b:6f:87:d1:9f:2b:8b:dd:24:27:
99:67:ee:a2:7b:08:48:2d:d4:e5:a7:ac:78:aa:93:00:63:bd:
d7:cb:65:08:f9:fc:4d:09:22:e1:2b:00:13:72:3b:94:c8:a1:
92:13:03:89:3f:12:ef:08:c1:90:b0:d7:bb:a5:2b:1d:9b:b0:
0c:1a:bf:7b:a4:a6:3c:5e:f6:0b:12:36:b7:4d:6c:13:e4:94:
10:b2:2c:c3:e5:89:a9:fc:89:7c:51:68:26:f3:91:3a:c5:c7:
c6:ac:8e:11:f2:66:db:1d:25:f1:52:42:de:41:ed:ef:9b:0e:
7c:62:25:1a:05:3a:ab:c8:e8:c5:60:4a:0e:25:13:6b:1f:a5:
90:c1:b4:fa:96:76:1f:b7:de:54:7b:71:58:37:2f:9b:3f:d3:
30:49:ec:3a:30:9d:fe:cf:c8:04:f5:7d:6f:56:1a:c0:af:fc:
d6:3c:aa:78:f5:7b:ea:ca:1d:55:f3:25:42:a7:51:fa:c0:4b:
fc:fc:4f:e8:76:8a:ee:80:9d:bc:cc:16:53:bc:65:4e:7d:72:
17:8b:5b:cc:83:37:9a:23:e4:98:29:7a:18:d5:4e:58:84:58:
5a:01:bd:68:7a:49:d4:51:1d:ac:cb:eb:6c:a3:cf:42:ca:70:
66:23:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:59 2026 by rpki-client