Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: OGvNSKv1BOmri4+Ujo/qD3OYoRd3aQwkRFSWJF4WWI0=
Subject key identifier: CF:37:6F:C8:B2:99:D1:BF:13:96:6C:E0:37:59:F9:79:28:6C:7D:A4
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019CADC77F108B7CA66C9C994BED47244DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:00:58 +0000
Manifest this update: Mon 02 Mar 2026 09:00:58 +0000
Manifest next update: Tue 03 Mar 2026 09:00:58 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: Zb4nkD9g5gBQmxgguPXf3jl0MeFMd8P7KXn02K66FG8=)
2: aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa (hash: mLF2Kf7anYzulE7sB7wSf5Xv7XVNp9u3/BFnkY4aoaI=)
3: gQRcEiSOK1BvYtVOwMak5cgqArQ.roa (hash: epUHVlTyTlnB2yqzWN4cM7frnCSziUUq2Htq1QzVhaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7f:10:8b:7c:a6:6c:9c:99:4b:ed:47:24:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Mar 2 09:00:58 2026 GMT
Not After : Mar 3 09:00:58 2026 GMT
Subject: CN=cf376fc8b299d1bf13966ce03759f979286c7da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:1c:e5:fa:15:f5:a5:78:de:0e:a3:b5:1d:
5f:34:67:f6:1d:84:75:28:b5:71:36:13:03:35:32:
10:68:3d:3b:3d:02:6e:bb:15:56:b2:7a:80:27:c2:
53:73:52:22:fe:13:32:22:5c:fc:ed:8e:ce:13:fe:
96:3b:8a:71:8d:56:a6:a7:9a:91:3f:71:e5:8d:83:
f1:0a:cf:7e:4a:fe:97:3a:d9:34:76:b4:ca:4b:74:
ab:0c:03:d8:be:93:be:da:84:f4:ea:d6:8c:7b:c7:
b0:e2:56:b5:89:e2:7f:5d:d8:44:f0:3e:ce:64:ec:
50:94:0d:a6:de:73:c4:50:d8:d7:e4:96:0e:a5:3e:
09:fe:6b:27:36:50:0b:e0:02:a0:eb:12:d7:35:80:
4a:7c:bb:b6:9e:57:61:03:6c:52:8a:65:c1:b5:0b:
20:98:05:aa:34:4e:93:c8:69:81:0b:18:fe:7e:8f:
34:23:08:83:d7:78:d5:f3:e1:dd:49:3d:1b:4c:bb:
e4:11:05:84:9d:f0:d2:21:43:fe:5e:ae:4d:30:35:
9f:7b:a7:9e:30:08:14:1c:b9:00:8c:32:ca:c6:83:
1c:38:89:7d:71:7c:2f:08:fc:ed:5a:9d:af:c0:f4:
d1:81:47:62:21:10:17:60:d4:ed:14:69:a1:1b:84:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:37:6F:C8:B2:99:D1:BF:13:96:6C:E0:37:59:F9:79:28:6C:7D:A4
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:04:ca:19:84:43:d4:07:66:aa:ba:41:b4:00:6c:19:0b:
b4:4e:24:a2:05:54:ef:02:c5:03:00:3b:39:06:f0:19:96:39:
c4:4f:68:7e:7f:8f:cc:9a:3f:58:39:a3:38:e6:d8:74:b6:b1:
85:50:9a:41:4c:6a:1a:91:26:f9:36:14:44:b4:87:7e:f9:9e:
c6:cc:c7:65:ed:d6:3c:29:b8:4d:97:f1:c1:ca:46:a5:79:1d:
69:d6:78:a5:3d:d2:aa:4a:ff:82:d3:5d:60:e4:99:1d:a0:7f:
f6:2d:5b:98:cb:52:e0:7c:ec:22:58:e3:cf:79:b8:a5:42:7f:
0b:f4:38:61:25:26:c7:fc:03:82:58:c0:7a:7b:db:f9:24:f2:
db:ae:a8:3b:a1:1b:7d:80:78:fa:13:1f:c6:86:f5:c4:a3:b7:
29:1e:88:ff:67:44:b4:c5:be:80:f1:48:81:f9:a6:0c:7c:69:
46:93:5b:20:7b:6f:f9:02:75:5e:96:d2:a8:3c:dd:5a:5a:cd:
fa:69:dc:dd:8d:a7:82:e1:f5:c2:5b:3e:b4:c4:90:2e:b0:14:
38:f0:85:fd:78:fc:57:7f:42:7d:f0:32:33:a7:85:f5:63:c8:
18:b2:29:b6:e8:51:e5:01:2f:07:c1:5e:80:51:90:f9:fb:1a:
fe:da:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:03 2026 by rpki-client