Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: fcwZuG4rcVwnk5ZPjQxAA0KGVwPm4JV9lSwfdEeNmew=
Subject key identifier: 79:AB:4F:32:38:D6:D1:70:12:ED:D6:57:F9:44:64:47:48:47:EC:88
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019FAAF58058D2516D51F7254464D46A9357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 8rvu9FJHdTy3lH76f00sdv/kZ+EWTXH0yH2fsc8Jg50=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:80:58:d2:51:6d:51:f7:25:44:64:d4:6a:93:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=79ab4f3238d6d17012edd657f94464474847ec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:0d:ad:c2:6c:13:72:c2:58:a9:83:b2:98:
bc:d1:40:0e:cb:b6:62:2e:8e:df:cf:1e:56:ed:2f:
c7:fd:d7:72:c9:4f:14:2c:a8:37:29:fa:99:29:e2:
1d:69:c5:23:a2:de:11:2c:fe:73:01:1e:3d:01:94:
a4:50:62:3c:ff:86:e3:c3:7f:5e:eb:68:97:a8:f5:
48:ef:12:bf:da:dd:83:2f:57:76:a6:21:b8:9e:50:
0b:19:c5:a0:89:cc:09:1a:b4:07:19:46:4b:90:6a:
a3:41:4d:ac:90:a1:a3:25:5d:59:36:3e:3b:1c:ff:
14:4d:9d:3b:05:df:fe:82:ff:45:be:d2:8b:9b:6a:
82:45:c4:02:90:e8:41:46:62:0e:70:ad:35:5b:72:
91:b4:f3:19:92:df:b3:87:04:8e:71:24:20:ce:60:
1f:ae:58:17:0c:b0:20:de:cd:92:98:5b:f7:bd:bc:
06:bb:69:3c:55:0f:46:fa:77:3e:98:33:ed:94:03:
bb:20:49:9e:1d:f6:38:1b:76:dc:f2:7a:7d:54:c1:
2f:b4:36:16:48:1e:ce:7d:8d:d4:13:5a:2c:5c:a4:
bd:1c:8a:85:8c:fa:54:14:db:50:88:c2:de:62:0e:
29:93:6d:50:0d:30:e7:fd:a1:c4:80:83:88:6b:76:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:4F:32:38:D6:D1:70:12:ED:D6:57:F9:44:64:47:48:47:EC:88
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c4:fe:ac:34:6d:8e:4a:77:c4:1a:18:57:72:f7:41:34:ce:
36:e6:9f:54:c9:26:63:1b:4c:f8:59:01:25:d1:43:bf:6b:41:
30:22:75:ac:78:f0:78:6c:9b:fe:70:d3:ba:57:ec:b5:63:1e:
85:2d:3e:06:09:97:71:00:8e:16:3c:aa:f8:37:9e:39:08:15:
99:4a:50:75:62:14:be:73:c8:aa:27:ab:9a:79:b3:7f:a4:eb:
5f:5a:6a:bb:3f:27:b8:82:12:9e:c5:ea:89:e5:8b:ed:68:79:
a5:46:55:aa:ac:56:2c:49:ec:28:16:29:ba:dd:ba:fc:ea:9e:
c3:fa:79:5b:7b:b3:bc:1f:9c:98:e7:7b:c0:17:21:fa:bb:aa:
f0:df:07:c7:c4:1c:4b:4a:d3:0a:d5:07:8b:35:ce:29:fa:90:
3d:87:16:4a:fd:66:65:dc:de:0f:30:8f:fd:a4:b1:97:73:32:
08:d6:9b:34:59:9a:2e:0c:74:0e:74:1a:4a:07:ad:58:f0:cc:
24:60:42:d7:c4:f8:2d:47:ec:e4:15:75:3f:00:7b:bb:76:d3:
bc:b2:fa:2d:75:75:f6:d5:08:43:e2:99:d1:80:a3:43:6c:5f:
0d:e5:88:b2:58:52:04:09:fc:06:a3:c1:e2:f7:af:77:31:8e:
37:ac:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:42 2026 by rpki-client