Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: YqN7+XL0gV+Sp0LSIGgdsO6lv+YDqvyBZFRxU0atZe4=
Subject key identifier: 53:B4:B7:AE:49:6F:23:15:2A:DC:50:2D:45:85:D6:1E:DB:A2:E8:33
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019CAE35DAE6137C1CBDF879874DA428D005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:30 +0000
Manifest this update: Mon 02 Mar 2026 11:01:30 +0000
Manifest next update: Tue 03 Mar 2026 11:01:30 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: PJbtUL2KsU3LHUTQHkwg0a7W5CNzxQtVwmwQr+Tg/cs=)
2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:da:e6:13:7c:1c:bd:f8:79:87:4d:a4:28:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Mar 2 11:01:30 2026 GMT
Not After : Mar 3 11:01:30 2026 GMT
Subject: CN=53b4b7ae496f23152adc502d4585d61edba2e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:7e:bf:15:ae:a1:f2:a7:ca:b8:9b:cc:46:
45:54:64:ba:ca:63:6f:58:78:12:47:9c:90:c8:34:
0b:d2:f9:1a:7a:6a:c0:d4:29:0e:01:a2:b4:b4:e3:
37:50:df:bd:f9:59:f2:d3:5e:53:24:a3:63:44:f5:
e4:e2:e8:9c:a5:f7:53:de:a0:a2:17:91:b4:d2:16:
72:20:6f:28:b5:84:d5:20:fd:2c:26:15:52:c5:ac:
cb:be:66:1b:b0:a6:5b:e3:89:3c:03:15:e0:6e:ac:
33:fc:dd:30:b7:f7:1a:10:08:e6:f5:0f:06:8b:18:
6e:2b:77:8c:b2:cf:5f:ce:bc:de:d0:e2:b3:e2:a9:
f4:91:ff:76:18:b9:ad:e2:7c:c4:1a:7b:93:57:a9:
55:35:e2:7f:f7:89:fc:8b:0e:4d:36:99:a8:13:29:
ca:ea:35:75:2d:eb:ac:79:a5:7a:c9:25:c6:c8:b8:
9a:eb:e3:2e:5a:8b:c2:c6:cb:01:27:cc:bb:3a:27:
01:8f:71:64:ff:03:da:d3:9d:8c:06:86:de:f3:e7:
19:1e:90:89:d3:ed:10:9f:6a:72:74:5a:2f:2a:bd:
50:41:7b:2e:11:68:ef:7e:77:da:3d:90:85:ac:4b:
ee:e8:7f:34:40:f4:80:d9:13:bc:c2:66:c3:aa:06:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B4:B7:AE:49:6F:23:15:2A:DC:50:2D:45:85:D6:1E:DB:A2:E8:33
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:09:84:1a:fd:c8:6d:03:72:38:8c:f2:67:f5:4d:07:92:18:
ed:c7:1f:5c:7d:16:bc:47:71:4d:d9:6e:2a:2e:b5:da:4c:dc:
86:e5:63:e3:3d:d5:22:55:b9:ba:5a:15:25:44:37:ab:51:f1:
bf:e2:7d:59:48:a8:16:98:64:25:36:65:be:7f:56:e1:de:d1:
a4:f1:5d:66:ea:14:23:d9:85:02:22:11:4b:f0:21:c7:9f:f4:
3b:a5:0e:ae:a5:6d:bb:9a:9f:70:bf:c7:c8:ba:00:42:77:0e:
23:7f:69:c0:3f:46:67:51:e7:a3:2e:05:41:de:c4:8a:37:b2:
d8:c6:9b:1f:45:f3:86:1c:bf:34:ca:90:3a:22:eb:61:f0:92:
be:7b:4f:b1:4e:bf:cc:cc:d6:48:cd:7d:b3:eb:17:f2:dd:65:
80:46:e3:7d:85:ae:ca:b2:9a:69:ab:0f:f2:b9:6f:29:00:e4:
63:4a:6c:52:97:01:09:1f:02:ec:f3:43:01:26:87:40:e5:a3:
54:55:fa:8c:c1:a1:0a:3a:dc:e4:b3:01:7c:bd:16:ec:52:6e:
e6:2c:60:41:07:44:7d:53:20:5a:98:56:ae:49:25:f4:b0:a4:
e3:62:cb:f5:39:c8:a5:c4:ad:37:80:8c:65:a7:29:b9:40:35:
fc:23:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:22 2026 by rpki-client