Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: jZ+LXFhq/3K+daWfwLKV3FmiIlm69S7pb1jYdot71Zk=
Subject key identifier: 03:C2:63:5C:85:4E:5A:15:8E:2A:CE:78:B0:64:7C:43:73:03:27:A8
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019F90FEC847D12CF9EC8CAECD9AABCDE2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 058C
Signing time: Thu 23 Jul 2026 22:00:44 +0000
Manifest this update: Thu 23 Jul 2026 22:00:44 +0000
Manifest next update: Fri 24 Jul 2026 22:00:44 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: WGaRX/yiHozV+XPozPZXcySYCkaCgcPfXqL3taLA8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:c8:47:d1:2c:f9:ec:8c:ae:cd:9a:ab:cd:e2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Jul 23 22:00:44 2026 GMT
Not After : Jul 24 22:00:44 2026 GMT
Subject: CN=03c2635c854e5a158e2ace78b0647c43730327a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:41:d3:0e:18:5c:b4:8c:4e:80:08:2f:06:
ac:ba:f3:1f:6d:0f:51:1d:fe:6c:b1:e7:17:9a:8a:
de:9c:ed:f4:ef:0e:ac:45:39:01:18:b9:95:4a:1d:
4d:3e:68:11:82:07:37:f2:a7:09:3e:d2:c0:63:34:
33:ce:c9:be:c5:9f:48:3f:0e:29:04:c1:e7:23:0e:
c9:4a:34:6a:f0:4b:f9:30:00:8e:66:0f:f5:ac:9e:
40:0b:4a:9d:be:09:89:45:21:5d:1f:43:f2:b3:37:
a7:56:1a:8e:6f:f9:d4:9c:9c:b3:f7:5f:86:da:93:
55:68:bb:b4:f0:54:af:ff:7b:21:39:6a:0a:a7:be:
4e:e0:b0:a2:80:e8:21:06:58:97:2b:dd:fd:3d:32:
3d:9a:54:a5:78:4e:e9:3e:97:29:92:bf:94:b3:16:
5c:33:c7:97:2a:e9:6a:e8:e3:30:50:f1:1e:18:f4:
49:e0:87:37:78:f6:cf:c9:cf:84:93:4a:82:d8:d9:
75:56:90:3d:e4:87:bb:bc:fb:04:8e:d1:2d:2f:5c:
85:a1:72:a2:19:16:ed:a1:9f:fd:5c:de:bb:7e:52:
9c:6d:ff:fb:b4:18:12:86:c0:fa:97:92:78:c6:ef:
41:10:ee:16:77:63:ca:96:36:3a:f8:b2:06:71:23:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:63:5C:85:4E:5A:15:8E:2A:CE:78:B0:64:7C:43:73:03:27:A8
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ac:e7:c9:8d:00:4f:c8:34:26:bc:a6:c7:6a:79:f3:a1:98:
b9:34:22:e2:93:f8:33:0e:78:b5:9c:90:2a:9a:95:36:d0:d3:
21:56:c3:31:e7:e3:55:91:15:86:0f:0a:6d:f8:09:38:d0:44:
09:79:fc:45:6d:44:56:71:4c:57:85:12:de:99:b7:c5:94:ca:
40:87:ff:53:c5:ca:e1:07:f5:3a:98:22:86:86:c0:97:cf:e1:
ee:d6:ce:4c:a8:5c:88:f2:a7:bc:78:7e:56:b9:fc:fc:4c:c4:
1d:a1:6d:f0:ed:a2:2e:5c:c8:46:94:d7:8f:c2:dc:36:9d:20:
02:dd:b4:a9:37:39:d3:26:16:68:e5:86:00:3b:3f:2f:63:ce:
e9:b3:0b:92:27:a5:ab:1f:e4:87:00:d3:cd:a7:3d:c9:f9:f4:
56:f1:53:c3:d3:c2:a9:34:e6:1e:91:b0:44:d2:6f:29:a3:21:
63:e2:1c:19:d2:08:ed:a8:9c:db:7b:a6:c7:5f:20:09:78:ec:
60:4c:43:4f:41:40:f9:e3:e8:de:40:65:0d:23:c5:f1:3e:6b:
bd:b8:ea:c5:7f:c6:a0:c7:ab:c3:32:95:ee:6c:32:66:20:f8:
f4:a5:11:c6:00:79:61:09:e2:6f:b8:8d:ba:6f:77:dc:36:f4:
f0:b4:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:05 2026 by rpki-client