Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: FAHITNzmmBQyOq86YY4H8bayzWFY6F9h+5EHHHrF/3Q=
Subject key identifier: 64:47:9A:9E:D8:6A:AA:D5:3D:C2:59:7D:3D:C7:DB:3E:2C:73:FF:73
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019ED3BD9E4B3501FF2D756C1E5BCD566A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 052A
Signing time: Wed 17 Jun 2026 04:01:19 +0000
Manifest this update: Wed 17 Jun 2026 04:01:19 +0000
Manifest next update: Thu 18 Jun 2026 04:01:19 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: WMfhAGSmkf1hiEoN9293N88Zu1JTJEjwnZPHhcsWLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:9e:4b:35:01:ff:2d:75:6c:1e:5b:cd:56:6a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Jun 17 04:01:19 2026 GMT
Not After : Jun 18 04:01:19 2026 GMT
Subject: CN=64479a9ed86aaad53dc2597d3dc7db3e2c73ff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:86:83:47:50:5a:3d:cb:c9:8e:a2:ff:8f:
23:f8:fe:0e:84:ad:d6:dd:de:05:e8:08:a8:f9:0a:
65:5f:45:d7:7f:f6:ea:9a:b2:9a:5e:37:a2:99:ac:
8a:99:4d:67:ef:25:b4:45:11:b8:71:72:9a:6c:ea:
24:2d:fd:29:40:48:90:44:56:f0:5e:32:44:e4:3f:
f2:fc:88:27:ea:8c:44:22:a6:d4:05:22:95:1b:0b:
cc:04:a6:b7:33:78:ca:43:d2:9d:2b:3e:b5:5c:00:
c3:e5:c1:cb:02:f2:90:72:8a:a1:e3:01:31:1b:86:
7e:73:41:07:e4:f9:44:bd:d9:82:a4:a4:09:01:3e:
47:5f:c6:12:00:74:d2:02:02:42:4d:aa:59:04:9e:
84:10:92:1f:a9:e5:f3:df:09:8b:35:bf:cb:55:9d:
39:31:74:2f:d3:d0:61:a7:a0:51:2d:35:36:7b:87:
44:b8:a4:03:a7:22:09:9c:c5:99:39:f7:f4:9d:12:
60:be:d0:6b:54:c6:26:66:99:f3:2b:e9:3c:e2:d7:
34:e7:f1:c8:f7:40:f2:df:d0:10:bb:0d:8e:f2:fc:
f9:8c:c1:ea:7b:20:bc:99:11:56:3b:06:d1:18:52:
e4:4b:c3:03:72:aa:c6:af:7b:c5:b8:cc:b8:ba:4f:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:9A:9E:D8:6A:AA:D5:3D:C2:59:7D:3D:C7:DB:3E:2C:73:FF:73
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d7:6f:63:0c:45:52:87:3a:54:ce:67:13:18:18:81:b3:5b:
34:11:38:44:c9:86:15:73:e6:20:d2:2b:bb:64:d0:cc:96:e1:
31:18:8a:22:12:b2:d1:4c:27:77:08:da:55:e8:2e:d8:8d:61:
55:4b:e3:b1:fd:9f:ca:aa:80:33:d2:df:12:7b:ea:85:6e:fd:
ff:c1:8d:ee:37:38:14:f9:12:85:29:a5:6a:34:a2:f1:8d:bd:
9a:10:77:0b:3e:58:63:ce:e7:12:7c:2e:aa:75:ac:35:cf:50:
71:34:5b:77:d9:6f:97:a7:85:6c:72:eb:ff:00:40:d0:e9:03:
30:52:de:5c:71:3e:5c:57:bd:17:92:66:98:87:cb:ab:fa:04:
14:56:74:8b:24:bb:b7:ac:8d:0c:f6:a8:51:38:d0:4e:e9:86:
fd:63:37:3c:e5:9b:03:f9:96:d5:f6:c3:90:f7:92:19:99:75:
b4:b9:27:32:b9:04:a6:33:9b:0d:28:f6:98:5b:27:b1:b9:c2:
eb:10:fd:6e:bb:1c:64:ad:b4:d8:02:22:94:62:6a:31:7b:e9:
eb:7f:db:7f:33:99:0f:26:10:18:44:8a:f7:6c:ef:1c:a2:de:
74:90:5b:5c:67:6f:8e:75:ca:cb:81:fe:a3:9b:e7:0b:0a:af:
7a:78:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:39 2026 by rpki-client