Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: 47uus463Ed3f6vYDvnRJFF1s7R4vuIdIEiO/u8v9Rnw=
Subject key identifier: BE:6C:4A:88:52:D7:0C:11:49:0F:9C:F6:99:EB:7C:99:00:F5:34:C9
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 01A0C3D6C7F348B59C0D78912A2D2C06007A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 12F0
Signing time: Mon 21 Sep 2026 12:00:28 +0000
Manifest this update: Mon 21 Sep 2026 12:00:28 +0000
Manifest next update: Tue 22 Sep 2026 12:00:28 +0000
Files and hashes: 1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: XRzDYBFTz1VTWDaC2CJTugW0gXllweDOSbwxe5CWt7A=)
2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:c7:f3:48:b5:9c:0d:78:91:2a:2d:2c:06:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Sep 21 12:00:28 2026 GMT
Not After : Sep 22 12:00:28 2026 GMT
Subject: CN=be6c4a8852d70c11490f9cf699eb7c9900f534c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:78:9a:35:55:82:27:98:89:f5:25:8a:b9:
b0:74:74:49:8e:ed:90:de:aa:0d:94:3e:73:d0:7a:
d6:b2:a5:8d:8d:a5:62:50:dd:c7:3e:72:0e:e4:d6:
96:fd:13:30:6c:de:c6:4e:3f:de:91:fa:8b:ed:2a:
b3:6a:17:60:62:a8:0e:cd:8e:46:a2:0c:0f:0c:b1:
d1:48:13:28:58:a4:2d:c3:ae:79:5a:6d:6d:2a:52:
fb:30:c7:3d:8a:12:ee:99:12:ed:e3:ab:6e:e7:f6:
ba:34:4b:41:a1:90:19:6f:cd:f9:42:da:e2:55:58:
48:dc:10:d3:7d:65:94:d2:40:b5:87:bc:51:cd:b8:
91:f9:12:37:eb:97:4a:66:24:2e:ed:b5:1d:c6:b0:
1c:78:dd:d9:d7:2a:c9:a0:58:c7:1e:1d:04:6c:93:
9e:1c:2f:60:25:0a:89:91:8b:b3:c4:09:e9:66:0a:
e3:50:7c:31:b1:8d:40:f7:15:d0:39:7f:f8:fd:34:
11:3e:f9:88:96:43:c1:ec:c8:07:63:66:aa:07:50:
45:ad:aa:b4:40:09:92:0a:ec:fc:b6:1d:db:d5:ba:
ed:1f:9e:7c:f0:d1:da:8c:ac:d7:3e:a1:96:6b:da:
56:04:13:ad:53:ae:fc:82:5d:f6:06:37:85:c3:a4:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:4A:88:52:D7:0C:11:49:0F:9C:F6:99:EB:7C:99:00:F5:34:C9
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:71:fd:fc:29:d8:47:74:d3:df:7f:50:93:54:e4:a7:a7:48:
69:81:f6:da:98:8b:53:2f:62:46:fc:60:34:f9:a0:0b:f8:fd:
14:45:3d:67:8d:9e:84:36:e4:af:21:10:7a:0d:82:20:4a:25:
04:cd:74:e4:0e:bc:f7:93:4b:4c:8e:cc:55:12:91:c2:85:d2:
fe:70:7e:19:0d:32:33:e9:a6:5e:4e:3c:a8:30:a0:cd:fc:0a:
e5:00:01:bd:0b:d1:60:10:83:69:b2:c1:bb:e3:fb:22:04:00:
35:f8:38:19:b5:68:00:98:a9:76:f2:4e:96:09:bd:ca:b6:27:
be:54:d5:c2:59:d0:d0:2a:93:ab:82:94:30:e8:aa:05:dd:d2:
b2:0b:a8:cd:98:ec:03:37:e1:52:f8:9e:59:e5:41:84:7e:39:
fb:fa:33:cc:68:82:ae:29:3c:45:69:60:12:a1:25:06:2d:e8:
8f:27:c1:3d:08:c8:91:fa:2b:8c:c5:14:b7:2b:11:59:af:4c:
29:4e:fc:68:fe:04:1b:36:a1:9d:67:eb:72:22:da:f8:43:90:
35:26:6f:66:8c:03:e3:9c:40:61:9d:f7:a3:e2:47:3a:b6:e3:
a8:8c:b0:ea:ac:fa:57:e8:72:c4:aa:96:ec:d7:17:a1:a4:a6:
a0:3e:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:33 2026 by rpki-client