Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: HLAIYFGaRFSPHwmXKcYW5oUyYXEoNcnz5TZAROmkjG4=
Subject key identifier: AF:8E:8C:EB:30:99:0D:7B:04:4B:73:3B:96:D4:D8:21:CB:B2:A8:71
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019D386662BFD6B38ED312DD4780D0383C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 0455
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: SzLOR5YLcbpjFaXeQCUqJbXex0wSgR0YgroT075LV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:62:bf:d6:b3:8e:d3:12:dd:47:80:d0:38:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=af8e8ceb30990d7b044b733b96d4d821cbb2a871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:a2:cc:11:9d:a2:73:a9:66:49:b2:0a:16:
74:66:a9:17:bc:e9:71:6b:9b:1c:05:c6:93:e7:3c:
83:54:a5:84:65:bc:2a:22:db:15:b2:6a:ef:0e:56:
8c:5d:02:52:a1:9f:65:c5:05:ed:9b:d4:8a:d9:87:
7e:20:3b:a3:73:16:06:21:95:cc:2f:52:e7:49:d4:
ef:d9:1e:ec:28:1e:cb:86:ef:85:48:d4:c4:42:31:
6c:68:d3:ca:b7:28:36:80:37:17:f6:6f:80:b5:95:
4a:50:ca:54:49:d8:2e:58:71:db:0a:0e:82:86:24:
4e:0d:12:f4:68:bb:7a:0e:88:92:4e:28:38:17:e3:
fc:01:2c:56:0d:a0:36:5e:d6:21:16:42:7d:99:7c:
7c:b6:14:8e:80:89:eb:32:ff:04:42:94:36:a8:ef:
69:9d:bf:50:e9:65:48:84:7f:db:ea:b8:0d:93:93:
ee:ee:7c:e3:4d:24:df:d2:57:9d:05:9a:87:2d:3c:
0b:3b:78:57:19:71:87:b6:80:ce:59:51:de:bb:ef:
26:fd:5f:fd:30:ae:ce:11:b4:5f:2e:e2:ba:7e:40:
a2:0a:08:b8:c2:af:0b:fa:9b:9d:f4:21:75:6f:1f:
da:68:a1:4e:3e:50:22:ea:f6:70:97:89:f5:64:1a:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:8C:EB:30:99:0D:7B:04:4B:73:3B:96:D4:D8:21:CB:B2:A8:71
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:72:58:41:ba:bd:cf:c6:93:09:7f:e8:e7:48:30:98:f4:26:
f3:04:1e:35:26:68:7c:7e:53:dc:f3:34:77:18:43:ae:b6:d4:
f4:d7:36:3e:60:b4:19:0f:d8:62:67:0f:69:90:8b:99:6c:b5:
b9:71:13:ac:eb:78:4e:f5:c7:c5:f8:4c:56:01:1a:50:be:fc:
e7:5e:7b:20:36:99:fa:77:b9:80:16:dd:ba:f4:85:ec:12:23:
3c:f8:67:81:cb:38:17:dc:05:e0:d7:84:8a:d9:11:9f:70:55:
11:b2:07:03:c8:76:de:47:95:62:0c:6e:9e:98:6e:76:b7:a3:
80:d6:43:da:00:e1:6e:ab:3a:a1:56:72:b0:f2:51:dd:bd:c6:
4b:85:e1:18:78:10:9b:ec:fd:6e:44:85:c1:98:7e:83:43:cd:
ea:9a:40:63:72:ce:d7:fa:de:4f:69:66:7c:5e:13:69:c5:c6:
bd:86:1c:7f:36:60:9f:04:fd:ca:b5:d3:bb:df:76:1d:8e:50:
c2:5b:22:c6:2c:f4:38:02:9e:11:af:89:90:cc:8f:2f:00:2a:
db:95:c5:f5:2b:0a:c3:d7:a8:2e:de:ac:6b:24:e9:0d:47:b3:
24:fd:8a:c8:93:32:d8:6d:ce:61:9a:3e:11:49:e6:c4:66:83:
99:45:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:30 2026 by rpki-client