Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: JCW3wiHpnT8k8ITzVafWDrOVv8YNj3iPsyE6K9nHEBc=
Subject key identifier: 13:F5:FD:26:23:EC:26:6D:8D:66:7F:A2:79:52:6D:14:0A:46:5A:C7
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 01A0C58EE99B32971DD1BEA026A157BFBF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 20:01:12 +0000
Manifest this update: Mon 21 Sep 2026 20:01:12 +0000
Manifest next update: Tue 22 Sep 2026 20:01:12 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: TngU8XKsMxnrhodlce2SQ8ifAUaQsajlDEOw2G1AgvE=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:e9:9b:32:97:1d:d1:be:a0:26:a1:57:bf:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Sep 21 20:01:12 2026 GMT
Not After : Sep 22 20:01:12 2026 GMT
Subject: CN=13f5fd2623ec266d8d667fa279526d140a465ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:18:f7:96:56:1b:07:12:99:94:12:92:00:
7e:b1:bd:38:9e:02:65:8a:55:92:cd:78:36:19:df:
ce:48:a7:aa:a3:28:65:29:d0:02:61:3e:ed:7b:bd:
e2:5b:12:13:49:06:19:21:a0:41:82:bd:e9:24:84:
57:8d:3b:6d:a9:77:59:50:42:51:03:7b:2c:27:47:
e2:3b:6f:5f:01:d2:b1:51:e7:67:b2:56:95:f4:a7:
a4:12:84:0c:18:e4:71:a7:36:9d:6d:7e:5b:1a:50:
fa:bf:85:38:4b:82:93:3c:f2:cf:b6:99:c8:9c:cf:
3c:2e:30:a4:f2:fd:67:c6:a5:d9:0a:77:05:9c:a8:
4a:15:52:1b:eb:74:40:77:06:a9:80:29:2a:b9:8f:
a2:1f:62:5c:39:db:4e:8a:1e:09:fe:1f:e9:df:a6:
03:df:d1:49:92:78:68:c9:99:ae:70:be:eb:1d:22:
19:cd:55:e1:96:e7:4d:48:70:47:17:c7:19:44:a1:
39:43:5f:7d:a2:95:df:e1:9c:31:be:54:b6:01:0b:
22:ff:8a:14:aa:b0:84:5e:20:75:ce:92:00:ab:35:
99:a4:e0:e4:e7:fc:31:31:d4:1a:dc:6c:25:c6:cb:
f5:fd:b0:db:8f:66:9a:9c:b8:ee:3d:0b:e9:9f:b3:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:FD:26:23:EC:26:6D:8D:66:7F:A2:79:52:6D:14:0A:46:5A:C7
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:08:92:84:c1:42:e6:9b:f7:5d:36:4b:35:68:9e:de:d7:1d:
bf:6c:41:e5:6b:e2:72:cf:4c:93:40:55:2a:a3:a7:e1:ea:43:
f3:0f:2a:8e:08:38:d7:61:65:82:ba:b3:5c:d9:28:6f:a4:ea:
a9:01:b2:4a:88:ac:94:ca:99:b5:9e:1f:f4:1b:c6:87:73:33:
fc:de:5e:79:d7:6b:aa:d8:67:10:29:74:86:fc:db:e6:41:7b:
a1:4e:86:cb:9a:be:eb:fa:e1:a2:2b:9a:23:e1:5d:cc:ba:49:
3a:61:a0:11:ac:f7:88:69:ca:33:89:28:5f:c4:ce:8f:b5:02:
14:90:20:2c:41:81:1d:f7:1e:56:18:3b:5a:7d:77:d4:d1:9c:
f9:89:ee:f9:3f:2e:af:20:58:d2:02:f5:32:a0:19:29:bc:1c:
45:e2:ca:4e:a1:6b:75:98:0b:d2:c9:eb:5d:fb:39:df:ac:4b:
a2:1d:0d:8d:4b:d5:4b:65:07:4d:29:7a:bd:6d:99:bd:4e:7e:
ef:83:93:10:fa:45:8b:d6:4c:f3:4c:d5:09:c5:6d:d8:dc:8e:
a3:37:d8:6f:ef:b2:84:4d:b6:2e:66:5e:cf:26:a5:df:f5:67:
3e:ce:07:3c:bc:29:cf:c1:77:9e:a2:8e:9e:69:0c:72:0e:2a:
07:f0:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:05 2026 by rpki-client