Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: f/VuGD0M6oejVQcGnSwGhOr/YVzkjr5A7xxfDi9SHIY=
Subject key identifier: EE:A7:94:D7:4E:A3:A3:13:7C:A8:BA:A8:7C:FC:8B:FF:3B:8F:CA:D4
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019D9AE31CB84708E51C241446BDDE020D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: wkLKSOgoWtBJ+Nc31ma7XtwolH0pgEaPoBG0N1Qm9XE=)
2: CACpNoNaghhV6-4wZwBz2EBPanY.roa (hash: MwIAAyngIo+iEvhjWrXe4WDnd298X6FFlNggROBItfw=)
3: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1c:b8:47:08:e5:1c:24:14:46:bd:de:02:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=eea794d74ea3a3137ca8baa87cfc8bff3b8fcad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:33:b1:6e:90:18:e2:23:7a:f0:92:72:6a:
f2:5c:a7:1a:c1:ed:bf:68:73:5b:c7:a4:27:69:84:
d9:94:53:ae:44:53:ec:71:29:59:92:a6:c4:5c:a9:
7a:14:1a:45:a1:b1:a1:0a:89:30:98:b6:46:ef:78:
e0:bc:93:cb:fb:28:54:98:1c:4c:5f:bc:75:75:56:
41:89:0b:c8:d7:b8:7a:5c:3a:3c:74:6d:21:6f:a3:
d8:26:38:ff:47:7b:f4:e2:85:df:b2:78:51:19:25:
69:10:da:9b:49:05:f4:d9:20:45:58:dc:76:0c:ee:
66:b1:5d:66:77:ec:c3:6d:84:af:ca:65:21:75:5d:
eb:bc:ab:f3:e3:01:2d:a1:18:57:37:f4:3a:ff:1f:
11:1d:f0:c9:8c:fe:ce:6f:f5:3c:83:11:fc:0c:8f:
9f:51:09:55:c6:81:e1:37:bd:9b:e1:28:b9:a6:a0:
f5:e8:30:65:2c:82:54:58:ff:1b:1a:11:3a:a1:a5:
58:be:ef:63:92:71:54:c7:22:3c:99:3a:0b:25:9d:
f1:68:5c:c0:ee:84:48:4e:94:a3:03:a4:f3:11:00:
20:1f:43:4e:22:54:b2:fb:1a:9b:8a:11:a6:43:f8:
23:ba:c6:50:23:19:cd:6e:26:29:59:da:7f:69:14:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:94:D7:4E:A3:A3:13:7C:A8:BA:A8:7C:FC:8B:FF:3B:8F:CA:D4
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d1:67:76:03:ba:36:13:7f:81:f8:82:18:19:c3:7b:7d:3c:
f1:9c:07:ec:d9:e4:0c:cf:ed:eb:a6:83:ff:5c:c6:17:2e:ab:
89:34:89:7d:c5:5b:d4:96:22:c5:ff:dd:65:30:10:2f:a6:9d:
0e:34:88:14:00:59:35:e1:37:80:d6:27:95:09:b6:c3:ed:19:
df:38:58:9a:18:9e:f0:39:92:72:91:d7:f3:18:49:39:c6:4d:
4f:80:51:6d:73:76:57:d7:bc:84:3c:5a:54:88:74:27:86:78:
84:d4:66:45:ac:89:44:7d:b8:09:e9:ea:5a:48:b2:7b:3b:21:
dc:77:f8:d0:99:dc:e6:d7:da:44:91:09:aa:4a:0b:ab:1d:e7:
81:c6:04:fb:d4:35:a0:3c:52:ca:87:d4:05:32:5b:e4:24:86:
79:82:a2:b2:09:b1:e7:81:b9:e6:50:d4:a0:28:3a:69:30:f5:
3b:fb:64:50:3d:bb:78:9a:0e:ca:31:5c:31:7a:39:28:85:d3:
a2:be:d6:5b:6c:9e:25:d5:37:46:be:ec:68:f1:7a:8c:07:19:
2c:0f:4e:8f:42:4b:29:e5:a1:10:ed:ed:85:17:4e:e2:f4:2a:
51:46:df:8c:b3:ee:cc:02:cf:47:b9:45:fb:7e:a2:8f:8f:ff:
5d:48:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:09 2026 by rpki-client