Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: jDqKf9cO1vELhA+aAzaXx6vThW96kMsM2hNLE9pn6a8=
Subject key identifier: 7D:02:1A:75:E7:66:0E:28:54:6D:8A:2C:61:49:A3:41:03:33:F3:24
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 01A142A7E8926DBA6C34B158D494E4CB5614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1AAC
Signing time: Fri 16 Oct 2026 03:01:02 +0000
Manifest this update: Fri 16 Oct 2026 03:01:02 +0000
Manifest next update: Sat 17 Oct 2026 03:01:02 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: /6+SHr5Ntq00n/GupIRrsRcLLtWTzdADa44OxbvkCJI=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:a7:e8:92:6d:ba:6c:34:b1:58:d4:94:e4:cb:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Oct 16 03:01:02 2026 GMT
Not After : Oct 17 03:01:02 2026 GMT
Subject: CN=7d021a75e7660e28546d8a2c6149a3410333f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:27:ea:41:95:a3:57:72:d0:6a:da:81:78:
0b:75:3e:af:0a:7c:49:f4:97:9f:12:d5:8c:d1:e3:
b8:c9:d4:5b:a7:85:e5:8f:ed:1e:59:4c:f9:57:19:
18:11:20:6e:24:72:b6:bc:ef:f2:35:1a:44:93:cc:
f1:6a:93:76:2c:ea:db:2b:a7:cb:56:a0:9f:25:91:
aa:d4:05:31:37:38:ab:ee:8c:f6:99:a3:d2:12:3c:
ca:98:64:6f:c0:86:08:d9:47:eb:d1:2c:02:62:36:
9c:39:af:68:11:a0:a5:91:38:0b:47:40:1c:91:05:
eb:2c:24:8b:60:e3:5d:9d:03:45:ae:5b:b8:59:04:
27:94:94:92:63:8f:f4:42:b0:20:5e:e2:8f:2c:56:
6f:75:5e:f2:27:44:82:7c:c1:2e:bb:a3:9b:ab:f3:
78:07:f5:44:ae:36:75:b5:55:ad:73:69:7c:eb:14:
5a:d3:8a:4f:71:76:e5:31:0f:2b:63:6e:87:4d:c5:
fd:a3:72:77:a3:67:29:93:f7:14:01:af:4e:af:55:
c9:67:2d:1a:9a:89:81:e0:2a:bc:c2:94:44:40:f2:
b7:8d:b7:97:f5:51:10:37:1e:74:dc:54:70:c8:70:
da:98:71:c6:5a:d8:14:51:c8:0d:99:b9:07:db:2c:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:1A:75:E7:66:0E:28:54:6D:8A:2C:61:49:A3:41:03:33:F3:24
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:0c:0f:8f:4b:42:38:17:5d:24:97:20:8f:f1:f1:d0:85:
ed:a0:8c:d5:ca:e4:06:e7:88:56:21:15:ca:5e:3a:07:ba:c6:
73:56:f1:00:9b:1e:74:8c:64:b7:8e:00:be:a2:2a:1e:e4:cd:
1d:9a:16:c4:9e:50:25:34:8d:5e:8d:20:36:2b:58:2b:2d:6b:
c9:d1:d4:9a:25:7a:1e:bf:4e:59:6d:02:ea:7e:87:02:29:cb:
6a:9d:41:d4:17:03:c2:32:5c:bc:d4:19:8b:5d:d2:19:3e:dd:
36:a7:20:b6:04:cc:1c:81:7f:75:48:f7:d0:30:6b:14:2a:63:
f9:f7:b8:53:af:a8:ab:9b:d4:15:cd:3f:bd:e8:77:66:32:b8:
21:d6:46:48:af:10:52:5a:11:39:3e:28:7e:3b:cb:fa:8e:b9:
48:75:73:35:f2:07:fb:91:47:93:15:19:f6:0b:5c:2b:e3:4b:
1a:03:49:87:ae:1f:bf:d3:68:d7:8d:f3:99:3c:4d:67:ef:12:
a2:99:22:68:87:7e:1c:46:90:56:51:7c:62:6b:09:f2:7c:51:
af:d4:9e:1e:21:b6:a5:0c:b5:6f:30:7b:43:56:62:b7:4c:1f:
26:30:90:d4:25:c9:7c:e2:2e:8e:5d:88:7f:ae:73:79:5e:f5:
db:0e:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:05:18 2026 by rpki-client