
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: D2QjCwFQtwvSgLvxa4JyEwim/tojTNJYvWHm+MMsXPc=
Subject key identifier: C6:7C:94:B8:3E:A4:6E:74:E6:BD:F9:62:EC:7C:FA:1D:C6:63:72:75
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019DA48A703B8980BEF25901EAE25CCF5E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 048D
Signing time: Sun 19 Apr 2026 07:00:29 +0000
Manifest this update: Sun 19 Apr 2026 07:00:29 +0000
Manifest next update: Mon 20 Apr 2026 07:00:29 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: 7QO3AThY/MRakSFGGZRxDa+dH6qc46ljZNpVMs2QCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:70:3b:89:80:be:f2:59:01:ea:e2:5c:cf:5e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Apr 19 07:00:29 2026 GMT
Not After : Apr 20 07:00:29 2026 GMT
Subject: CN=c67c94b83ea46e74e6bdf962ec7cfa1dc6637275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:33:ed:ad:ef:22:e8:5a:15:34:57:13:74:
e5:ca:9f:1d:64:18:1c:e5:5b:e9:cc:b1:17:36:36:
5b:e1:28:27:da:10:b0:1a:bf:bb:e9:3e:f3:95:84:
e8:41:13:64:34:cf:c4:c7:3b:09:cc:34:1b:65:7e:
d7:81:97:e1:a2:05:0c:3c:ce:e6:d3:8b:a9:4f:99:
78:8d:37:43:03:23:89:f4:fc:88:04:93:07:ac:08:
e0:67:27:36:ca:0b:ff:87:d3:15:96:c2:17:5d:85:
1d:17:2f:da:e0:ee:e1:87:ad:8a:31:ab:1b:39:1a:
74:52:1b:52:4d:7c:eb:ca:e7:db:b5:46:e5:af:66:
36:f4:84:86:ff:2f:f3:d3:8e:39:de:69:fc:2a:6e:
c2:8a:d9:86:00:3b:e6:a5:e3:9c:f1:26:fd:af:31:
d6:23:18:00:c9:43:8e:31:f8:76:a9:2e:ef:f3:f3:
ca:07:4c:45:b9:e5:74:4c:e3:0d:31:9d:70:c0:2a:
b3:83:61:d6:54:20:c0:0e:dd:2d:d3:86:47:fd:9e:
51:f3:1d:71:70:d4:ae:62:01:9c:ab:e0:27:28:1d:
12:63:ab:1a:9a:03:0a:7d:af:d6:12:0d:2d:7b:0f:
1e:3c:ea:0b:78:a6:0e:c0:67:66:40:15:71:c1:a5:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:94:B8:3E:A4:6E:74:E6:BD:F9:62:EC:7C:FA:1D:C6:63:72:75
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3d:da:84:08:2a:80:28:d5:6d:5a:28:ad:eb:05:45:7c:2d:
b5:85:ce:ac:49:2e:6b:0c:ed:67:9a:c2:de:86:06:bd:eb:a7:
e3:ec:96:9c:c4:2e:b3:b8:77:c6:f6:e3:14:28:d3:08:c9:31:
af:b6:52:4b:e7:52:da:00:fc:0f:a4:a7:ab:87:20:7e:38:52:
fc:b7:9e:9c:fc:09:96:fb:db:6e:1a:c6:ab:21:9d:a5:8b:d9:
86:97:ff:03:3f:ad:23:89:8b:7f:55:bf:93:ab:19:ff:1e:4a:
28:fa:d0:2d:04:8e:83:e7:ff:04:18:da:e7:ca:20:93:9d:ed:
c5:dc:9a:32:c2:29:34:aa:70:91:4a:dd:16:e8:e6:c3:25:08:
f7:48:41:a4:95:b0:43:24:79:64:2f:63:a9:bd:e0:1c:45:21:
b2:93:78:91:f0:72:06:89:fc:65:9d:65:50:f7:ad:34:37:84:
55:ad:34:39:42:9c:c1:4e:74:a7:c2:c9:a7:f3:1d:0a:1e:0d:
d3:b7:36:af:e9:27:2b:01:15:86:62:f3:2e:dd:8a:73:35:d5:
75:f6:ae:6e:88:d8:67:44:36:b5:92:44:b6:ba:e3:4d:1f:f1:
cc:04:f5:40:57:63:0b:bb:fc:d0:d3:8c:3c:ac:a0:be:ba:5a:
2b:4a:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:36:08 2026 by rpki-client