Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: zZWRrpGidmkFLx647tCn5bLb5ztm/KnXrdEaTlxsJFM=
Subject key identifier: 83:07:D7:2D:31:96:15:EA:EB:FB:04:3E:10:1F:D8:2C:51:AE:10:B8
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019CAF4854D47F954115782D9EA862FE91A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 040E
Signing time: Mon 02 Mar 2026 16:01:18 +0000
Manifest this update: Mon 02 Mar 2026 16:01:18 +0000
Manifest next update: Tue 03 Mar 2026 16:01:18 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: asNSQJeo7QgtuXWB3x8iAC53n9I5iOA5HhFZ7sZPqY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:54:d4:7f:95:41:15:78:2d:9e:a8:62:fe:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Mar 2 16:01:18 2026 GMT
Not After : Mar 3 16:01:18 2026 GMT
Subject: CN=8307d72d319615eaebfb043e101fd82c51ae10b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:65:c3:0f:91:60:9d:a5:0c:00:17:f0:2a:
99:a8:44:91:12:e5:70:fa:a6:c3:ac:ce:de:c5:09:
4a:08:d3:56:ee:0d:f3:e0:c1:e9:e6:09:a1:28:97:
da:5f:96:81:cd:54:aa:77:be:46:47:24:4b:38:6f:
56:bb:30:74:82:2b:e8:6d:d5:ce:fc:7b:8b:7e:3a:
9f:eb:61:5f:8c:fb:fb:53:0c:41:f3:2c:a3:c1:e3:
b2:ae:d2:e2:dc:0b:0c:56:2c:e4:f6:1b:36:68:09:
7a:65:53:07:07:cc:c7:22:1c:24:33:b5:54:93:17:
62:bb:45:47:e4:22:b0:ef:39:68:36:81:4f:12:c4:
9f:64:03:a0:9b:02:4a:d4:70:b9:1f:27:5d:e7:6f:
16:3a:78:bd:e5:fb:24:50:62:8b:9c:15:05:e2:a8:
fe:bc:68:f7:2b:03:ea:95:84:b6:90:e6:b6:3c:59:
d3:81:9a:b6:fd:33:18:c9:80:5e:39:d4:19:21:6b:
ae:2b:e8:cf:a7:fe:2b:f1:cd:78:0f:55:d1:4b:b6:
80:98:4c:38:bd:3e:99:e1:e1:ec:97:52:7a:9d:cc:
69:14:e1:ce:5a:af:b7:78:fd:8b:bb:5e:79:29:40:
07:de:66:0d:88:80:c9:23:38:75:09:9d:f7:89:ee:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:D7:2D:31:96:15:EA:EB:FB:04:3E:10:1F:D8:2C:51:AE:10:B8
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9e:0b:b1:d0:ad:50:19:0a:82:ef:06:26:d8:f7:f1:46:2d:
1c:6f:e7:97:58:1f:e6:e4:8f:55:2b:8d:0b:ce:ec:49:7b:d2:
19:69:35:da:86:37:cf:e2:d6:f0:ef:f3:97:af:b1:af:c3:6d:
32:f4:5e:e8:0c:05:90:27:46:0f:e9:7a:8d:79:88:0a:ab:2b:
45:fb:d8:d6:c7:10:53:27:a4:30:8c:e1:b2:a4:23:5c:62:c6:
75:52:b4:ae:76:66:6e:dd:a0:8b:b6:9d:c2:61:54:1e:e7:c2:
b6:04:38:b2:58:28:3e:33:28:04:d5:1d:c6:da:d3:a8:23:2f:
7f:e7:03:fb:56:2e:e4:64:80:4f:63:a8:4e:0b:eb:08:54:f6:
14:80:76:f0:37:68:9c:61:c3:3c:12:5b:e9:78:35:ae:8c:26:
ad:a3:6d:25:6d:fe:21:3d:b8:ef:e6:98:67:f5:14:a7:21:69:
08:e0:f6:da:d9:aa:3c:0f:d3:a0:43:81:bb:17:9b:94:58:24:
a1:69:80:ff:d6:8c:a4:d4:42:60:14:f7:f2:60:2c:5f:62:9d:
1e:f9:8a:5b:89:b1:18:eb:d0:ab:0b:e9:fc:12:5c:4f:47:a8:
72:d4:cd:00:7d:e0:96:d6:5b:cb:73:4c:ba:cb:1d:28:39:7e:
21:92:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:58 2026 by rpki-client