Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: YzVWSvCRD7NwNbz8/WclJ3vqdtg+ROuv0RcDdIyaJ84=
Subject key identifier: EC:07:2A:6F:85:DC:48:2E:3A:E0:69:D6:82:2B:E5:57:14:80:FB:4F
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019D329B0284BE60C0425C0A5366BCE873DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 0452
Signing time: Sat 28 Mar 2026 04:01:52 +0000
Manifest this update: Sat 28 Mar 2026 04:01:52 +0000
Manifest next update: Sun 29 Mar 2026 04:01:52 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: hWouTYMhQaLQCg6JvX+uNNE//54wj6AK55pb2raHgiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:02:84:be:60:c0:42:5c:0a:53:66:bc:e8:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Mar 28 04:01:52 2026 GMT
Not After : Mar 29 04:01:52 2026 GMT
Subject: CN=ec072a6f85dc482e3ae069d6822be5571480fb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:fd:03:86:a1:45:1b:12:94:ee:a4:44:d4:
ef:5b:dc:34:fc:bb:11:14:70:38:4b:82:44:f4:6b:
9d:a1:13:75:6d:a9:16:46:d9:ee:2a:70:b5:ba:54:
ad:68:01:b7:3a:c7:b9:a0:59:31:cf:9a:ef:fb:31:
12:f2:2e:4a:5b:b9:43:bb:c0:71:4a:11:02:9d:b7:
02:64:da:1d:b4:16:b8:3c:2f:89:f3:8c:ee:ce:1f:
43:f3:3a:8f:ff:e1:73:7b:24:48:ca:a8:49:53:8c:
54:cc:55:a2:d7:70:8b:98:96:50:18:b1:99:33:cd:
e8:bb:18:57:83:0a:a0:b1:52:e9:96:a8:76:8f:8a:
f5:6f:94:e7:d5:c4:1a:45:03:ed:e9:3c:9b:ac:03:
84:e8:61:43:11:b3:f3:92:ae:ed:80:80:29:18:20:
39:44:d7:58:fa:38:e7:15:5e:ed:81:99:8e:b5:9e:
1e:4f:a9:53:bd:cf:67:db:0e:0a:3d:b2:b0:e3:1a:
28:4b:d6:30:db:d1:38:1e:0f:9c:38:4e:6c:5f:ed:
de:a5:cb:c4:90:40:75:dc:a6:03:51:f4:a6:ba:c2:
63:ef:34:5e:6a:83:c0:b9:64:ae:20:2c:43:ad:4b:
34:f6:a6:73:d7:75:fd:9c:70:ad:2c:b3:52:20:ed:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:2A:6F:85:DC:48:2E:3A:E0:69:D6:82:2B:E5:57:14:80:FB:4F
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bf:d2:f9:7a:6b:7f:5a:ce:01:66:6e:f3:b4:8d:90:0e:aa:
db:40:a2:b0:73:a7:b3:97:ee:9b:49:44:95:e1:d0:6d:11:cf:
88:b0:5a:3e:a6:18:d3:32:5b:a1:21:c6:87:52:32:1e:a1:31:
49:4d:24:9f:52:ad:d8:df:12:ae:ca:cb:34:8b:57:49:bb:82:
df:6a:52:d9:1a:9d:97:39:79:c3:bb:3f:1f:d4:7f:69:82:63:
81:9d:7b:47:7a:e3:6e:39:cb:67:13:4d:c6:b5:fb:07:67:7b:
69:b3:54:4f:8e:40:5f:13:60:e4:5d:23:21:b9:aa:8d:19:73:
04:d8:05:7d:ea:47:fa:c3:c0:4a:33:8e:04:4a:17:14:14:9e:
a3:f2:a4:e5:eb:4b:c1:7f:ec:bd:00:12:26:c3:9b:7e:14:7a:
28:b3:d0:8d:b6:be:dd:6c:b1:b2:dc:a7:3f:60:61:8b:a3:cc:
c3:4a:e8:ca:4e:88:58:2d:cf:02:cc:73:a8:e0:03:93:04:c0:
a4:01:cd:79:d9:28:a4:29:0e:87:19:f8:c5:e4:56:da:d3:3f:
d4:3c:4c:63:6d:54:cf:80:33:34:4e:3d:95:00:70:bd:20:03:
c9:d0:6b:fd:71:4a:cd:bb:86:92:b3:52:91:0e:4e:0c:4b:5c:
90:06:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:52 2026 by rpki-client