Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: NCzYaI/gX2DFEmdKii5c2JdecIWk6knGZNmPWDqyA5o=
Subject key identifier: 4F:E2:71:D2:79:56:28:C7:A0:C6:3F:5B:13:0B:86:C7:2A:5B:63:05
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019CB0244B7702211EFCAE5872B4AF4CE34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 20:01:34 +0000
Manifest this update: Mon 02 Mar 2026 20:01:34 +0000
Manifest next update: Tue 03 Mar 2026 20:01:34 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 3tAdeDeatKoEBwKdUwwsuTDLSXNVykkDfdCLxmxH7EE=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:4b:77:02:21:1e:fc:ae:58:72:b4:af:4c:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Mar 2 20:01:34 2026 GMT
Not After : Mar 3 20:01:34 2026 GMT
Subject: CN=4fe271d2795628c7a0c63f5b130b86c72a5b6305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:09:ab:ae:ed:6b:bf:58:ec:3b:36:1d:f1:
3a:d8:02:98:27:ae:5a:a7:51:59:65:1b:49:b9:2f:
c8:41:94:e5:8c:1e:98:5d:7c:bc:bf:1c:04:a1:b0:
a3:56:65:bd:85:a5:dd:72:f7:46:66:2b:28:d1:76:
b5:f7:86:f1:18:fc:69:b1:d4:1c:f4:91:63:dd:4e:
cc:1e:82:3a:8b:b4:f4:9b:1a:58:52:49:5c:a6:71:
33:6a:d4:89:3d:71:44:04:08:91:0d:90:39:a5:44:
24:9d:35:52:64:de:4d:11:60:13:17:a7:75:91:ae:
bb:e4:0f:4b:9a:43:74:76:d4:52:5c:b9:13:1e:81:
48:c9:22:ec:aa:47:16:05:55:c6:7b:a2:17:00:2e:
31:bb:71:ef:41:5a:db:48:60:18:70:30:ed:0a:70:
c2:82:f6:a8:97:9c:8e:ae:73:02:2c:fe:60:b5:b1:
a4:1f:dd:ab:d3:4e:6d:e4:40:23:8e:12:5a:c6:18:
d2:2b:e1:a9:dd:e3:48:1a:d9:83:d0:a9:1c:bf:9e:
65:bc:6c:c2:8d:a1:7c:0f:89:fa:29:62:23:01:49:
f7:a7:94:16:20:cf:fd:d6:3a:ee:ef:61:49:ea:3f:
42:19:77:c0:93:34:64:13:1e:77:6b:32:42:71:5e:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:71:D2:79:56:28:C7:A0:C6:3F:5B:13:0B:86:C7:2A:5B:63:05
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:6e:cb:5f:f8:ae:95:ed:ea:30:f5:06:fa:bf:0f:33:00:
2a:59:ee:32:59:53:ff:d5:0f:07:62:c9:87:05:c5:b8:28:4a:
1e:c2:6c:28:e6:ef:6a:65:f6:da:7d:2c:c1:bd:fe:79:a4:bd:
be:4e:8d:58:a9:23:39:eb:da:cb:97:bf:d8:1d:a8:76:08:d7:
05:4c:44:99:02:97:d3:dc:13:e7:17:fe:6a:1c:6f:9c:b8:06:
4f:50:31:9d:3b:31:9b:d6:29:f1:fd:78:e7:cc:db:08:5b:59:
e4:c7:ed:c7:73:4b:1a:1a:6a:2f:bb:bd:4e:91:82:ad:79:0c:
9d:24:ab:cd:93:87:f1:ff:f5:db:28:d1:4b:63:4b:bd:dc:0f:
89:a1:13:13:68:61:92:3a:a4:2c:c8:c7:73:bf:e5:13:0d:e5:
bf:50:e0:22:ee:32:30:17:6e:05:09:cd:ad:c5:87:2a:51:45:
bd:20:35:b0:00:6e:f1:0b:77:91:e6:5d:d3:44:4a:36:a9:bb:
0a:56:44:2e:c8:74:28:60:d5:d2:ad:02:e0:87:c0:a9:f4:5a:
93:f0:03:ad:53:ec:3c:6a:c2:29:b3:a2:af:93:eb:8e:b9:b2:
b3:a2:a1:69:34:e8:59:6f:50:8a:22:d7:f3:51:2c:f6:ab:21:
10:19:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:45 2026 by rpki-client