Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: qnIXqGSMAQKEc9ig2mpLTimgY+nwlxur9+O5KVi6bmU=
Subject key identifier: DE:41:A4:ED:09:A5:D3:E2:6B:D5:86:59:29:2E:EC:76:B4:9E:00:E0
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 019FA9AC697DADD7CA18EA8007705D5EEDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:01:16 +0000
Manifest this update: Tue 28 Jul 2026 17:01:16 +0000
Manifest next update: Wed 29 Jul 2026 17:01:16 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: wF862K7EQR7mUjyf8PPK34J571nR+FU3Tgx/7qEZaaQ=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:69:7d:ad:d7:ca:18:ea:80:07:70:5d:5e:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jul 28 17:01:16 2026 GMT
Not After : Jul 29 17:01:16 2026 GMT
Subject: CN=de41a4ed09a5d3e26bd58659292eec76b49e00e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:55:e3:30:26:f0:c6:b0:28:17:76:44:2e:
a5:94:f6:34:2a:b9:7e:6a:15:44:89:4a:d9:44:ad:
f0:4a:4b:00:b5:19:1d:a6:e5:78:d7:87:9a:57:ae:
04:26:78:7a:7e:c5:c1:4c:20:02:08:57:92:48:3b:
52:3d:d7:89:69:ca:75:24:f4:ea:0f:c6:80:a8:81:
c2:5c:40:67:8f:d2:21:bf:5b:c9:64:85:98:5c:48:
03:b2:06:da:22:00:2d:61:1f:23:e1:ff:d6:c1:42:
ca:86:88:56:53:61:4f:59:2f:b0:57:66:4a:1d:84:
01:2f:e0:1b:9b:08:e9:df:64:3c:01:dc:70:23:1f:
37:9c:88:84:9b:98:af:98:6c:6a:11:a7:c6:b1:06:
c4:9b:37:ab:96:35:9b:d8:86:37:35:54:ff:e5:ca:
0e:12:99:2c:79:1f:5e:fa:e2:77:4a:f9:38:4a:0f:
32:ac:0a:af:85:35:44:2e:81:72:66:62:c1:4f:08:
b9:91:0b:4a:0d:d3:7d:82:c1:26:a7:76:64:a4:15:
c9:e0:44:ee:4c:61:21:49:93:2e:06:e7:5c:b7:d2:
49:cd:2b:b5:6e:38:c6:f5:2d:c8:7d:03:e1:46:03:
dd:3a:13:24:49:ac:f7:fc:45:5b:e0:50:6c:4f:f9:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:A4:ED:09:A5:D3:E2:6B:D5:86:59:29:2E:EC:76:B4:9E:00:E0
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ee:3b:b0:6b:c0:10:44:a1:12:fb:59:f5:31:05:5e:da:a3:
b1:73:21:57:6f:66:c8:a3:10:0c:0f:c1:80:e5:4c:67:6e:20:
31:8d:ef:58:2f:94:7b:95:d9:f6:d5:b3:07:f9:e6:a1:2f:de:
54:3c:20:29:04:c6:2e:27:9c:a0:81:84:66:1e:71:01:1e:ef:
d7:aa:8f:42:49:72:ae:84:a8:60:b1:1f:cb:96:c2:e0:63:16:
75:04:15:5a:07:f0:27:e7:a9:21:a1:39:2b:70:c3:fa:b8:db:
ff:09:13:67:97:4a:9b:86:58:fe:a3:86:9b:5f:5b:43:cc:14:
8c:ff:a3:49:61:99:81:b7:48:55:85:d8:2b:4f:53:ab:d0:9e:
89:b6:27:74:f8:6d:75:29:cd:a8:2b:86:76:6d:55:35:28:5c:
14:be:b6:13:6c:6e:7e:60:44:41:26:aa:81:9e:11:46:91:2c:
90:50:a2:ba:2b:02:30:1d:cc:5e:ce:17:49:95:81:32:5c:8e:
eb:26:f5:26:51:5e:32:d2:20:ed:03:60:dc:b7:36:68:aa:07:
3a:2d:bc:17:23:33:50:4d:2d:2d:c1:39:2d:e6:94:58:e9:7b:
0f:6b:ad:87:83:e0:0d:7d:59:28:07:bb:90:a8:65:21:ed:fd:
d1:8d:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:34 2026 by rpki-client