Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: KcmVTC/S1fMikGPzG/2m3/Od3D7OgP2PnIb78oUhK9g=
Subject key identifier: C1:6D:65:B5:30:8F:EE:41:96:C3:C3:8B:F4:9A:AA:B0:EF:78:E3:4B
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 019D9AABF2CFDFDFC0B518300C43791F6416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 114D
Signing time: Fri 17 Apr 2026 09:00:53 +0000
Manifest this update: Fri 17 Apr 2026 09:00:53 +0000
Manifest next update: Sat 18 Apr 2026 09:00:53 +0000
Files and hashes: 1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: sjXtJCzNLtKomFfm1Kihb/IJtd0KTRf5GXG9agLXBNs=)
2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f2:cf:df:df:c0:b5:18:30:0c:43:79:1f:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Apr 17 09:00:53 2026 GMT
Not After : Apr 18 09:00:53 2026 GMT
Subject: CN=c16d65b5308fee4196c3c38bf49aaab0ef78e34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:34:e6:0b:15:45:3b:c0:c3:6d:f7:38:14:
14:68:e8:f1:37:a7:f6:7c:1b:2d:81:9d:c0:65:24:
2e:48:a5:c3:90:49:df:0c:59:1e:a9:a3:b5:27:63:
05:9c:cd:3c:65:d2:99:09:59:69:0e:13:53:ee:31:
04:ad:10:6e:af:92:f0:02:ac:b3:65:b1:8a:7a:23:
04:dc:a2:cd:d6:aa:69:e1:65:6f:5c:9a:a1:29:c1:
23:34:d7:78:cf:05:48:62:70:45:71:09:0f:e1:42:
88:3a:5d:cc:f8:19:36:d1:58:06:38:dc:cc:49:28:
7b:4a:3d:db:aa:9e:d7:ac:7b:44:6d:ce:ea:c1:c2:
f3:d2:3f:3a:f4:78:f2:43:dc:8c:a6:00:1b:c6:bf:
22:10:dc:ae:a3:c2:1a:ec:58:7e:03:cd:cb:08:2d:
9f:af:fd:81:a5:2f:f7:a7:95:fd:5e:aa:14:55:0f:
e9:ad:7e:38:09:30:5d:d9:8e:74:0a:2b:31:06:4a:
2f:8c:7b:21:f6:db:41:15:a4:af:47:42:30:e4:ac:
76:5f:4d:b1:97:e0:44:06:c8:66:68:93:2b:35:0d:
03:ce:4e:48:30:a3:b1:e1:94:64:08:4f:f4:90:39:
e5:e5:ad:f1:9b:0e:b8:d7:b7:4e:a6:11:7a:5b:07:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:65:B5:30:8F:EE:41:96:C3:C3:8B:F4:9A:AA:B0:EF:78:E3:4B
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ec:c6:c1:0f:d6:8f:bf:cb:f2:4e:51:8f:ac:74:59:45:5d:
2a:2a:a5:ac:b5:8d:cb:f9:d2:42:29:09:78:24:19:21:ab:6d:
bb:99:db:96:3b:40:4d:e2:77:28:2d:d5:51:33:20:41:38:7a:
57:0f:66:11:2d:04:90:aa:c3:7f:5c:a3:60:3b:db:92:e4:92:
86:59:37:9c:6e:7e:6c:3d:14:3f:06:9d:99:18:81:94:5c:21:
60:07:17:bd:18:b1:13:61:ed:7f:ad:e3:6a:1d:d3:62:f5:92:
c0:02:e6:33:40:3a:48:60:42:3e:bc:c7:eb:d0:41:1a:74:aa:
23:d4:10:98:5e:38:a7:1e:e2:cf:a3:8f:39:cf:bd:66:6f:a5:
b9:3c:ef:a6:04:81:14:1d:b4:07:13:fa:ec:a0:4f:ae:d2:53:
ae:a1:09:6f:8c:f9:ea:ae:7f:1d:50:1f:16:11:c5:22:ca:39:
0a:03:7c:a8:39:eb:63:b6:0c:e3:c3:1c:d3:75:9d:cf:16:de:
05:a8:e4:0b:6d:1f:2f:d9:8b:45:0b:9e:bc:c2:79:63:92:f4:
be:d4:34:ee:5b:f8:e6:97:91:5d:8d:c2:14:65:be:b6:70:76:
aa:33:5b:d9:b9:8d:26:d6:06:b8:fb:b8:43:96:10:b1:71:f1:
4e:5f:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:00 2026 by rpki-client