Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: cSzI4wE58Tf/UPUqX+bIW6vcDvOojY2in7s6XO3Ac6I=
Subject key identifier: 08:DA:9A:FF:19:FD:A1:41:20:C7:C6:8B:B6:BF:DD:9F:58:59:A2:10
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 01A1DDCC6B0EE6B4AB6D15332AD557F10FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 1382
Signing time: Sun 15 Nov 2026 06:02:03 +0000
Manifest this update: Sun 15 Nov 2026 06:02:03 +0000
Manifest next update: Mon 16 Nov 2026 06:02:03 +0000
Files and hashes: 1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: D0a4nHZrir7VcTtYF6O9YIDr+oh44CYa0+RM/LrQADc=)
2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:6b:0e:e6:b4:ab:6d:15:33:2a:d5:57:f1:0f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Nov 15 06:02:03 2026 GMT
Not After : Nov 16 06:02:03 2026 GMT
Subject: CN=08da9aff19fda14120c7c68bb6bfdd9f5859a210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:d7:71:7e:48:60:7b:c3:6a:6b:84:bb:e0:
4a:fd:ca:b4:70:92:c2:e3:71:44:98:8c:4c:76:76:
97:44:b5:6c:5e:68:f4:82:f1:a6:0e:9f:43:6a:7e:
9b:17:23:0d:15:08:63:48:e3:ed:2c:db:c4:2f:ca:
7c:7d:ae:1b:62:57:73:c7:9e:1c:f7:85:f2:5d:ea:
28:79:2e:59:53:86:c8:cd:25:cb:4c:39:12:18:c8:
c4:49:8b:5d:6c:26:46:4f:89:ff:aa:93:7a:c2:6f:
97:6a:78:62:71:00:76:9c:bd:1a:81:61:0c:82:49:
f0:3e:92:3e:27:f4:42:95:20:e8:93:51:a0:cb:9c:
35:ab:65:07:7f:a1:19:33:a2:56:6b:b0:6c:14:33:
00:3b:d9:46:7e:40:f1:e4:fa:d8:dd:1b:25:69:51:
07:63:4c:80:c3:3f:84:5a:f9:36:af:1b:92:e3:2c:
b9:cf:cb:35:81:ed:cf:e4:fb:f2:f6:69:04:43:62:
bf:6c:60:37:85:3c:2e:3b:f4:c4:aa:ce:93:3f:25:
2d:11:05:a7:2b:f0:e2:67:47:f8:9e:2a:f9:d0:c8:
19:98:36:b3:65:7a:6c:55:1e:3c:9f:05:81:a1:93:
1c:2e:46:d0:25:3f:9d:09:f4:61:a0:1e:f6:08:33:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DA:9A:FF:19:FD:A1:41:20:C7:C6:8B:B6:BF:DD:9F:58:59:A2:10
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:0a:d1:be:c3:4d:d6:1e:62:69:4b:f6:f2:5f:ef:e7:72:
83:32:40:58:d2:21:db:e2:89:ae:c1:3a:6a:a2:6a:a2:81:1c:
22:af:a4:12:6e:a2:71:e4:42:dd:8d:d5:a0:00:75:1c:1e:84:
28:9a:ee:cf:90:ea:00:aa:e7:90:2d:cf:a0:19:9c:92:6d:d4:
3d:72:83:4d:14:cd:20:37:97:7b:ce:7d:ce:c1:0d:89:35:cf:
32:6d:05:23:21:11:ef:89:59:09:bc:8e:ce:87:17:98:13:54:
a0:89:dc:c0:44:34:61:e7:9c:2c:1c:60:93:97:4d:97:f9:41:
17:12:a2:24:b3:49:2e:fe:8c:32:75:5b:61:30:b2:0b:db:b5:
35:29:b0:f6:da:9b:f8:b7:e0:cc:30:de:b5:fd:c3:09:5e:94:
d6:2c:af:f7:99:6c:ec:2b:26:87:4d:44:46:94:e8:fc:43:38:
eb:51:7c:1c:b1:57:f7:1a:fe:de:be:97:85:5e:24:92:a6:fb:
65:04:0a:4b:8d:ab:48:e8:b5:7e:db:d4:51:f5:19:16:f9:36:
a6:8a:98:63:50:c2:4e:cf:2b:46:cc:5a:1e:8a:77:18:41:e6:
9c:3f:00:62:68:2b:0a:6d:f6:6f:1f:f3:ed:d7:88:72:09:93:
4c:b7:34:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzGsO5rSrbRUzKtVX8Q/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj
NTM2YTQwHhcNMjYxMTE1MDYwMjAzWhcNMjYxMTE2MDYwMjAzWjAzMTEwLwYDVQQD
EygwOGRhOWFmZjE5ZmRhMTQxMjBjN2M2OGJiNmJmZGQ5ZjU4NTlhMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKfXcX5IYHvDamuEu+BK/cq0cJLC
43FEmIxMdnaXRLVsXmj0gvGmDp9Dan6bFyMNFQhjSOPtLNvEL8p8fa4bYldzx54c
94XyXeooeS5ZU4bIzSXLTDkSGMjESYtdbCZGT4n/qpN6wm+XanhicQB2nL0agWEM
gknwPpI+J/RClSDok1Ggy5w1q2UHf6EZM6JWa7BsFDMAO9lGfkDx5PrY3RslaVEH
Y0yAwz+EWvk2rxuS4yy5z8s1ge3P5Pvy9mkEQ2K/bGA3hTwuO/TEqs6TPyUtEQWn
K/DiZ0f4nir50MgZmDazZXpsVR48nwWBoZMcLkbQJT+dCfRhoB72CDM87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjamv8Z/aFBIMfGi7a/3Z9YWaIQMB8GA1UdIwQY
MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt
ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk
LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5IK0b7D
TdYeYmlL9vJf7+dygzJAWNIh2+KJrsE6aqJqooEcIq+kEm6iceRC3Y3VoAB1HB6E
KJruz5DqAKrnkC3PoBmckm3UPXKDTRTNIDeXe859zsENiTXPMm0FIyER74lZCbyO
zocXmBNUoIncwEQ0YeecLBxgk5dNl/lBFxKiJLNJLv6MMnVbYTCyC9u1NSmw9tqb
+LfgzDDetf3DCV6U1iyv95ls7Csmh01ERpTo/EM461F8HLFX9xr+3r6XhV4kkqb7
ZQQKS42rSOi1ftvUUfUZFvk2poqYY1DCTs8rRsxaHop3GEHmnD8AYmgrCm32bx/z
7deIcgmTTLc0ug==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:10 2026 by rpki-client