Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: H9DC7U2bL1+4F/ZZvZN82BT2/wPBEZ9Vss6hD+Fz3F0=
Subject key identifier: AD:7C:38:6E:03:DB:05:5F:B5:07:E6:CB:82:FE:23:1D:D1:5A:3A:DE
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019F18678ED9DAB458181B2428A3E74B3967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 12:01:07 +0000
Manifest this update: Tue 30 Jun 2026 12:01:07 +0000
Manifest next update: Wed 01 Jul 2026 12:01:07 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: Tjs5Lesm0qet3jUAfI8JJqLDJDhaOLXWegm+UEa5AA0=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:8e:d9:da:b4:58:18:1b:24:28:a3:e7:4b:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jun 30 12:01:07 2026 GMT
Not After : Jul 1 12:01:07 2026 GMT
Subject: CN=ad7c386e03db055fb507e6cb82fe231dd15a3ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:ff:1c:47:6e:b4:a1:37:7c:80:c0:bc:80:
76:3d:9d:b8:a0:aa:75:ed:47:c0:1f:bf:f2:07:69:
fa:96:b9:39:42:e9:1f:7f:25:31:b2:d3:a0:77:f3:
61:91:32:18:13:d8:ac:25:52:af:41:b4:62:49:fe:
ed:2a:3f:b9:da:14:84:30:a1:13:91:ea:7a:26:0b:
e3:ea:12:2a:e3:d0:dc:43:69:54:b6:72:ab:2f:f2:
0b:10:2d:b0:1a:29:13:04:2d:f5:c0:ff:bf:f6:f8:
b0:4d:3c:e9:79:9c:50:fd:c4:34:21:99:7c:b8:20:
d1:a2:69:17:44:a0:9e:93:5b:56:e5:3c:a3:0b:85:
0b:a9:39:06:59:30:10:01:22:3b:6f:f6:65:fa:65:
51:50:19:b0:33:ce:08:6b:79:1e:5d:7b:37:59:67:
6f:62:16:53:6f:00:8a:0c:46:02:41:fb:05:3d:38:
8a:44:a4:c4:15:37:08:21:af:9a:5c:d3:0a:d8:b2:
10:d3:05:d1:7f:61:77:67:9b:bd:a5:e6:82:e6:aa:
99:7f:ad:be:2b:e2:7c:29:34:f5:79:e1:dd:1d:27:
58:da:56:08:2d:73:18:60:cb:ce:d6:6b:27:bc:1c:
2c:8b:c7:6e:54:45:0d:7c:ff:df:8d:54:3e:18:9a:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7C:38:6E:03:DB:05:5F:B5:07:E6:CB:82:FE:23:1D:D1:5A:3A:DE
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:9c:ae:1d:33:22:db:ee:e9:8b:96:10:d9:9a:85:c0:bc:
17:c1:3d:d1:35:ae:29:22:5a:c8:f6:03:51:8a:b3:f6:53:b0:
bf:6e:b6:7e:48:ac:b7:d0:12:62:2a:af:b1:46:19:96:34:f3:
49:3b:49:e3:f5:98:ed:d1:36:68:d8:66:8e:1a:e6:76:bd:29:
46:16:6e:22:e5:7f:8f:b1:31:01:24:dd:b5:78:0e:42:18:7d:
a0:08:42:22:2d:9c:fc:5d:04:12:c1:61:c3:1d:c1:d4:0a:08:
7c:5e:a1:e7:89:8e:6e:eb:66:1e:51:fe:d2:74:5c:39:9c:63:
d2:e4:7a:2a:75:37:a7:0d:f5:a9:b9:c6:c4:4d:80:17:82:59:
70:fd:32:e1:4a:36:f5:79:7a:8a:6b:3f:4e:ae:87:68:e0:9f:
8f:ca:9f:8f:2b:70:fd:c9:5c:f8:a8:b1:f2:97:b8:dc:1f:fb:
68:1a:a8:db:db:95:3f:70:c9:ff:3e:c9:f3:77:c3:f5:e6:53:
0d:4e:ee:86:1a:d5:e8:b5:83:06:50:2b:7b:51:9a:5a:1f:d5:
bd:0a:d2:7f:3f:98:62:6a:5b:59:71:03:6c:77:e1:34:b9:18:
01:ce:52:26:a8:b1:24:62:82:ed:4f:91:f5:5f:ab:39:68:74:
46:ee:50:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ47Z2rRYGBskKKPnSzlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk
MThiNWMwHhcNMjYwNjMwMTIwMTA3WhcNMjYwNzAxMTIwMTA3WjAzMTEwLwYDVQQD
EyhhZDdjMzg2ZTAzZGIwNTVmYjUwN2U2Y2I4MmZlMjMxZGQxNWEzYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbX/HEdutKE3fIDAvIB2PZ24oKp1
7UfAH7/yB2n6lrk5QukffyUxstOgd/NhkTIYE9isJVKvQbRiSf7tKj+52hSEMKET
kep6Jgvj6hIq49DcQ2lUtnKrL/ILEC2wGikTBC31wP+/9viwTTzpeZxQ/cQ0IZl8
uCDRomkXRKCek1tW5TyjC4ULqTkGWTAQASI7b/Zl+mVRUBmwM84Ia3keXXs3WWdv
YhZTbwCKDEYCQfsFPTiKRKTEFTcIIa+aXNMK2LIQ0wXRf2F3Z5u9peaC5qqZf62+
K+J8KTT1eeHdHSdY2lYILXMYYMvO1msnvBwsi8duVEUNfP/fjVQ+GJrh6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK18OG4D2wVftQfmy4L+Ix3RWjreMB8GA1UdIwQY
MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt
OWI3OTk3NDgxZjcyLzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy
LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjOcrh0z
Itvu6YuWENmahcC8F8E90TWuKSJayPYDUYqz9lOwv262fkist9ASYiqvsUYZljTz
STtJ4/WY7dE2aNhmjhrmdr0pRhZuIuV/j7ExASTdtXgOQhh9oAhCIi2c/F0EEsFh
wx3B1AoIfF6h54mObutmHlH+0nRcOZxj0uR6KnU3pw31qbnGxE2AF4JZcP0y4Uo2
9Xl6ims/Tq6HaOCfj8qfjytw/clc+Kix8pe43B/7aBqo29uVP3DJ/z7J83fD9eZT
DU7uhhrV6LWDBlAre1GaWh/VvQrSfz+YYmpbWXEDbHfhNLkYAc5SJqixJGKC7U+R
9V+rOWh0Ru5QfQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:46 2026 by rpki-client