Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: 8SIPRygXQJB94nvhKTqGwtOoE+hm5cFB5Wozmj6/PNc=
Subject key identifier: AB:E4:96:4C:DB:FB:D4:C8:BE:67:B9:DD:8B:E5:57:F3:C3:8B:F7:04
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019D99CFB948D6819A82FBB4D439554E3DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:20 +0000
Manifest this update: Fri 17 Apr 2026 05:00:20 +0000
Manifest next update: Sat 18 Apr 2026 05:00:20 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: +l348aXTEkDMG4vLVOizDN2n9YUWONjPNUWgQRjaFfo=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:b9:48:d6:81:9a:82:fb:b4:d4:39:55:4e:3d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Apr 17 05:00:20 2026 GMT
Not After : Apr 18 05:00:20 2026 GMT
Subject: CN=abe4964cdbfbd4c8be67b9dd8be557f3c38bf704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:c0:3f:bf:75:b4:7a:09:57:41:a6:9e:9f:
a3:c4:fd:43:be:b7:3a:11:aa:57:ef:24:92:db:5e:
84:77:f8:33:2a:85:0f:1a:aa:7b:99:8f:30:f7:ec:
33:0e:2b:ab:ba:57:80:3a:d7:86:91:0d:f1:22:51:
31:e5:0c:f6:1d:ba:c0:63:8e:d8:75:d8:3f:47:a7:
0f:4c:96:d5:19:48:ee:e5:d2:50:5b:4d:41:8c:52:
92:3b:af:16:6c:fb:a8:9b:aa:98:ae:72:95:97:77:
dc:d3:9b:1b:80:90:97:84:7e:fe:a4:b6:b9:89:3a:
88:f8:3c:a7:4e:40:de:99:51:52:31:0b:a9:f2:df:
63:b6:13:3b:d3:aa:24:ac:51:26:7b:a2:a7:a1:10:
5b:a3:61:61:80:dd:97:cf:ad:1e:cf:b7:c0:a3:e5:
ba:76:39:ba:fe:17:c0:ef:cc:69:b0:2d:8b:9c:e1:
ea:b6:d0:c7:ad:99:12:d1:9a:d7:39:c5:18:b7:3c:
0a:17:fd:d4:d7:3e:83:e0:8e:ac:e2:af:e0:9e:8a:
9e:33:d4:58:ad:8d:d8:46:2f:0f:3f:cf:c3:50:f2:
97:2a:d5:16:a6:e0:e1:46:a4:f9:84:4d:c9:e0:39:
86:93:4a:d7:e0:b2:d6:f3:93:63:ef:32:f0:4c:f0:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:96:4C:DB:FB:D4:C8:BE:67:B9:DD:8B:E5:57:F3:C3:8B:F7:04
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ff:8a:e9:c1:06:c0:88:65:fe:13:d6:35:41:9b:d8:74:1b:
e5:14:32:80:ab:0d:6a:17:03:ee:61:7a:82:51:e2:a0:70:11:
ca:05:0a:f0:36:1c:23:34:32:4f:5a:45:fa:66:9e:0d:58:ec:
05:b2:24:a5:07:ed:11:e7:26:3d:d4:cd:ce:d1:e2:ed:6f:45:
b5:15:b4:18:f7:db:0b:9e:c9:e4:7d:61:84:fa:ba:db:f5:d1:
8b:f0:a6:1a:d1:d5:45:1b:cf:86:63:f3:e0:74:8c:e6:fa:c8:
7c:a6:07:3f:5a:21:21:30:cb:c6:5d:59:69:f1:65:8a:ed:85:
04:c0:12:9b:6f:de:bd:8d:88:79:29:76:75:0a:be:ff:8d:e9:
54:09:40:91:dd:47:1d:f0:a0:ab:5f:20:83:9f:11:90:db:11:
2a:dc:9a:71:ca:e7:30:f7:9e:1c:53:bd:8f:91:e7:e0:1c:37:
b4:fc:41:27:a3:23:32:42:3e:c3:62:87:45:08:dd:4b:52:cf:
ab:f4:34:b4:c8:9b:5c:11:ba:c6:01:e0:8f:75:ef:ec:f1:27:
cc:e6:80:bc:dc:ac:3c:87:f0:35:24:de:4d:1f:58:b4:23:41:
ba:46:e5:c1:f5:f8:f9:52:4d:b2:e9:2d:f9:37:b5:7a:a4:d6:
91:ca:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:12 2026 by rpki-client