Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: dmtAyDbYRBqIqxCqTuLsLhIKX0CTs9GOYfhKtHuwFCY=
Subject key identifier: E1:CD:47:C0:5A:8D:2E:52:D0:35:A4:04:0F:BC:6A:42:AC:82:A2:65
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 01A123C1DA12F2C297782BFAC24ED524794B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 03:01:09 +0000
Manifest this update: Sat 10 Oct 2026 03:01:09 +0000
Manifest next update: Sun 11 Oct 2026 03:01:09 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: veCBjUjSFj4indwajdKW0cfLZ6wGVlBCUoLp1P5ojes=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:da:12:f2:c2:97:78:2b:fa:c2:4e:d5:24:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Oct 10 03:01:09 2026 GMT
Not After : Oct 11 03:01:09 2026 GMT
Subject: CN=e1cd47c05a8d2e52d035a4040fbc6a42ac82a265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:cd:e7:8c:ca:b5:ac:1e:a3:de:1a:cc:e3:
e2:65:b4:e6:45:bd:55:37:33:38:6b:c9:c1:f2:8a:
b2:99:f1:80:7c:5a:2c:25:3e:f5:3f:b6:af:69:68:
0c:36:41:76:f5:7d:ea:77:d4:2a:50:06:07:3f:4a:
58:67:76:ee:75:8f:ee:a4:f4:ad:78:16:aa:f4:92:
cf:e7:38:59:9a:dc:96:e8:e0:7a:f6:35:33:e3:0c:
90:33:63:be:68:b0:72:b7:a2:e4:e7:10:4c:ae:bd:
fe:87:d8:d8:b3:59:ad:01:42:98:8f:90:ed:c2:59:
89:9c:ae:2e:f2:60:3d:1c:34:43:be:f9:eb:18:51:
84:d9:40:59:51:5e:45:c5:99:09:c4:98:bc:af:fa:
08:45:ff:0e:3a:b2:f6:e0:c5:fe:3e:73:f1:aa:17:
87:a8:1b:5e:9c:3b:3c:75:3d:3c:b5:1c:9a:18:e5:
ea:16:1c:2e:19:8d:8f:43:41:e7:33:fb:f6:bc:67:
00:b7:82:73:ee:a2:3c:0d:5b:28:b2:46:87:3d:84:
10:e7:a0:99:cc:4b:9c:be:09:d1:59:7e:c6:cc:16:
70:8a:39:b8:fa:e3:d8:99:40:48:4e:9a:d1:0e:d2:
aa:24:71:41:47:fe:62:09:ec:8d:15:81:16:5f:3d:
2b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:47:C0:5A:8D:2E:52:D0:35:A4:04:0F:BC:6A:42:AC:82:A2:65
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ac:db:db:1d:f1:a3:17:2c:43:2a:d3:1a:1b:86:65:2f:f2:
0e:44:69:db:25:ac:37:c4:fb:c5:5a:2f:37:a4:f8:9d:86:d9:
b3:f0:90:72:65:9d:23:81:f1:7b:35:dc:75:ea:3f:1c:71:47:
01:15:64:81:88:1c:43:31:c1:a0:b8:63:8a:17:a6:01:37:4e:
8f:3f:10:b9:c3:1c:e3:a6:b6:ad:32:9f:17:5b:10:f4:2b:c0:
6b:12:97:48:26:21:74:49:5a:e0:a5:26:33:7d:40:53:b5:18:
b5:53:05:9c:c5:3e:8d:d6:96:2d:53:ee:6f:cd:94:51:f3:65:
78:04:fe:9e:00:62:1e:34:c5:06:4e:45:be:22:2f:48:03:16:
62:9b:6a:56:c1:01:5f:57:b7:6e:75:9b:e1:4b:59:ed:d3:81:
fe:35:09:b8:16:84:ab:ec:d4:6b:7a:83:1f:bd:87:31:92:47:
19:9d:fe:fb:72:81:00:7a:b7:03:1e:ac:04:4b:0b:6d:f3:ef:
21:c0:e7:57:5d:a0:75:f0:6e:87:bd:47:fb:4a:7c:10:b2:9b:
95:2e:f3:2e:e5:36:b9:b3:0f:8a:cb:5a:b5:2c:e3:41:f7:f5:
e2:05:0d:ea:04:91:80:0e:ac:3f:ee:7f:b3:c6:5b:29:de:ea:
89:32:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:52:32 2026 by rpki-client