Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: 3AKzIUbUN9RwHdEzq6RDgDZ2baG5lmD2IpzeGcSi/TU=
Subject key identifier: 04:38:F9:17:DA:18:A1:C7:51:D5:99:CB:8B:52:03:4E:5A:2C:FB:11
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019EC18023FD87CFAE5C46B2380ED0B39547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 15:01:00 +0000
Manifest this update: Sat 13 Jun 2026 15:01:00 +0000
Manifest next update: Sun 14 Jun 2026 15:01:00 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: 3HvDnmI4pmF91nouUQbGYJoF3rTNNEC9r3U/39eFSw8=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:23:fd:87:cf:ae:5c:46:b2:38:0e:d0:b3:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jun 13 15:01:00 2026 GMT
Not After : Jun 14 15:01:00 2026 GMT
Subject: CN=0438f917da18a1c751d599cb8b52034e5a2cfb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:f2:0d:88:18:b5:85:85:b8:01:39:24:ca:
fc:20:2d:36:51:a1:d5:51:26:ed:52:7c:d0:9c:7e:
e9:a0:1b:e2:16:23:42:cf:7e:09:be:bf:18:e2:0f:
e3:5a:6e:c4:e5:80:83:35:b8:1d:35:74:3a:f2:87:
c5:8c:d1:56:73:76:1c:59:7d:15:12:2b:3f:ca:b5:
f2:84:cd:c5:ff:37:2b:cd:a5:23:1e:42:a7:12:2f:
a8:24:ea:0d:e1:b8:84:68:f4:84:2d:d9:05:d3:c0:
aa:63:3e:55:f6:c2:8b:be:8d:05:0b:f6:57:9f:a0:
46:62:90:f4:ad:fc:6c:54:6f:52:a5:e7:5c:7a:33:
6e:09:4e:19:66:0c:12:19:c7:5b:eb:b2:cc:a2:cd:
06:64:30:e1:10:23:46:0f:a9:98:0d:03:a4:82:63:
86:31:db:f4:31:20:cf:9c:b8:d9:c0:5b:b7:19:2d:
ee:f0:cf:38:53:6a:04:40:b0:f9:3f:bc:f3:1f:8f:
68:57:11:08:05:bf:9f:f5:42:10:2b:58:13:4b:bd:
17:3a:be:68:63:ae:b5:b3:97:ca:f5:d7:c0:9a:9e:
d7:76:95:13:db:cd:83:f3:3e:f5:bb:5c:90:18:3e:
ae:46:fc:3e:b7:7b:7b:2d:f6:e6:c5:43:e2:db:20:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:F9:17:DA:18:A1:C7:51:D5:99:CB:8B:52:03:4E:5A:2C:FB:11
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bf:bf:57:85:9f:c6:a4:66:95:17:22:3e:3a:66:90:5f:44:
07:4c:8c:15:6c:8f:b2:64:a8:d2:b1:3f:56:36:d1:78:e4:cb:
ab:39:a7:af:cf:7a:66:e9:08:89:72:b0:6c:d2:37:3b:b8:4d:
17:5e:5c:ce:4d:84:f5:65:01:06:30:72:70:e0:f6:8a:16:0a:
45:8e:40:59:d4:51:f3:be:62:ae:67:e2:e2:f5:e3:81:06:7b:
d2:62:d2:ef:cf:f0:59:8c:0b:b5:5c:ac:19:e8:8e:85:01:19:
57:f6:82:21:15:c1:3f:98:a0:cc:10:af:b1:f3:5d:3d:47:c5:
2a:4a:21:9c:ac:18:89:b0:2c:ea:46:ab:aa:a1:d8:f4:c2:17:
46:c4:bb:fa:16:ec:52:e4:8a:5a:90:71:0f:a0:b3:4e:ca:c0:
c8:e4:fc:f3:3d:d6:50:16:13:94:41:59:3c:75:d2:85:3e:b0:
01:f1:56:a5:f0:23:b0:a1:1f:46:20:62:5c:8b:c2:9e:b9:5a:
5d:54:fb:d9:f0:ac:1a:6e:54:1c:ef:53:7e:e2:5d:ef:ad:c5:
ab:05:aa:9e:ca:a1:15:a0:47:e5:b7:04:04:1a:e3:77:51:4c:
3e:5d:0a:97:d8:cc:00:54:ba:7a:f5:a5:71:26:59:2e:39:c6:
f5:a4:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:27 2026 by rpki-client