Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: tq5stXLtRz4PVbRjA60ytBn7Ac2sTeSb7H6l6CEno34=
Subject key identifier: 70:DD:E1:5D:55:B2:8F:DA:4C:5C:C8:BE:B0:F1:1F:78:FC:2F:52:65
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 01A17D73B95DAB58B11318BAFA03F11126A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 068B
Signing time: Tue 27 Oct 2026 13:01:38 +0000
Manifest this update: Tue 27 Oct 2026 13:01:38 +0000
Manifest next update: Wed 28 Oct 2026 13:01:38 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: VVWKkOyILH4EQ2rZbbTxVDCU+3SxOnorP4ERxIkei4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:b9:5d:ab:58:b1:13:18:ba:fa:03:f1:11:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Oct 27 13:01:38 2026 GMT
Not After : Oct 28 13:01:38 2026 GMT
Subject: CN=70dde15d55b28fda4c5cc8beb0f11f78fc2f5265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:f6:e1:0d:86:b8:75:43:0e:3c:38:ce:5b:
ea:14:5a:c3:0c:78:53:5a:7a:16:11:21:c6:6c:a0:
a9:eb:43:b8:8f:d2:a8:ff:d6:87:ad:4f:23:8c:40:
41:57:15:a8:a1:fe:1f:4c:55:8e:af:28:bc:97:8f:
29:89:68:80:ba:de:6d:ec:d8:58:b9:53:7f:2c:7f:
83:e6:6f:9f:1e:9a:08:a9:91:7f:88:e4:2b:0d:a9:
e3:6d:c4:a5:a5:9b:78:fa:56:87:91:c3:57:44:66:
22:bb:de:14:c8:63:b7:ba:73:19:53:b7:e0:5d:38:
fc:d5:11:25:ee:33:e5:6c:ca:36:81:77:e4:fd:14:
2b:03:65:f3:a2:1e:98:d2:18:ea:0f:cf:06:c1:20:
bf:64:a6:79:98:ee:f2:e4:e7:e0:1b:d8:fe:f2:fb:
f9:1d:23:56:84:2b:de:f1:b4:ed:aa:c9:69:c5:5f:
de:75:24:bf:ad:36:2f:7b:7a:32:d9:c3:16:47:90:
30:ef:0f:e1:0a:79:60:86:7e:dc:d4:ba:87:50:b0:
ac:c3:05:4d:5b:cf:b4:03:3c:1e:a5:34:c3:88:3f:
13:9e:dc:ab:d1:a8:26:f7:44:ce:5d:1e:52:24:80:
60:c3:f4:66:13:3e:55:d3:ff:b2:10:22:8e:12:28:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:E1:5D:55:B2:8F:DA:4C:5C:C8:BE:B0:F1:1F:78:FC:2F:52:65
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:9e:cf:1c:89:f6:b5:6d:21:06:2d:f0:7d:db:40:79:a6:
d6:f6:80:0d:77:bf:af:39:61:5d:ec:c3:9d:34:b3:6b:c3:de:
b2:15:18:0f:17:dc:74:74:a2:8a:ce:60:ad:0d:03:38:a1:ea:
6c:f5:3f:04:66:87:4d:eb:09:52:25:ec:63:ad:5f:dd:3f:80:
4b:30:9c:03:0d:e8:64:ee:2b:8b:fa:2f:23:9b:2d:27:f8:db:
fa:c6:e3:70:24:81:c5:d6:25:89:96:49:84:6e:c5:87:64:92:
0a:ff:ca:d6:ec:ee:35:a5:fc:88:58:bd:4b:eb:8d:cb:0f:25:
9f:6d:4b:bc:5b:17:26:b3:27:45:57:37:33:0a:1c:88:73:a4:
49:5f:8a:39:f8:9a:68:3b:4c:b2:90:c6:3f:7b:e3:62:99:58:
5e:c4:4c:ce:07:67:1f:5c:28:47:53:82:9c:af:41:47:10:49:
72:79:46:87:4c:7a:4e:31:ef:9b:fa:79:be:94:b0:63:34:66:
c5:53:ec:ec:a6:dd:b0:4c:e9:92:1d:5f:6c:1e:61:fe:72:04:
de:c0:ec:f0:51:80:d1:3d:b8:39:ed:2d:d8:94:5f:99:e7:c6:
32:8d:cf:e6:da:0d:a5:4f:b0:50:9f:f8:0e:6d:6c:03:29:48:
d7:8c:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:46 2026 by rpki-client