Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: +6+VF0Xn+kR04WMgOxn8iJ3fAFIngFT4uucmROiZH7A=
Subject key identifier: CA:12:AA:B7:45:88:4B:60:AA:F1:2D:53:97:5F:F7:E0:0B:2E:4F:6F
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 01A002142797200D3D1100A4D46F35BB27F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 21:01:10 +0000
Manifest this update: Fri 14 Aug 2026 21:01:10 +0000
Manifest next update: Sat 15 Aug 2026 21:01:10 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: Um+ku8kfw27DcQDr5zzkDLuegn3WqaTdGQ8aX/l9Aiw=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:27:97:20:0d:3d:11:00:a4:d4:6f:35:bb:27:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Aug 14 21:01:10 2026 GMT
Not After : Aug 15 21:01:10 2026 GMT
Subject: CN=ca12aab745884b60aaf12d53975ff7e00b2e4f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:c4:66:96:ba:2f:ad:4a:3a:b0:be:df:26:
3f:c4:b4:a2:e6:be:32:65:94:52:55:0e:16:94:16:
7c:b6:8c:33:32:ba:9f:75:cc:5c:48:01:43:c1:54:
08:48:43:d9:84:c0:e4:7d:dc:05:57:22:bb:0d:d1:
53:ec:7b:b2:1d:05:00:e5:47:3f:b6:e9:06:e8:28:
92:19:60:0c:d5:f5:13:82:69:06:c0:f4:cb:77:de:
67:15:5a:a6:20:f0:32:2a:27:c0:ed:09:5c:5b:c5:
b2:99:a6:50:4c:c8:43:9d:e7:bf:dd:66:7d:c9:c9:
4f:0f:9d:67:3b:bd:b2:b1:3a:8c:5b:30:92:50:46:
8e:7d:1b:2a:a0:cc:05:af:a3:7a:42:6f:7f:53:c0:
f4:b8:35:c5:db:14:98:a3:13:9c:e5:f3:9e:07:40:
1f:5c:71:c7:1e:43:f1:78:69:fb:b9:2c:0f:2e:bc:
a8:cf:75:f4:31:15:1e:83:0e:3c:59:4b:49:09:fe:
dd:eb:62:35:3e:d6:69:f4:43:ba:de:90:b9:48:90:
f3:ab:59:fa:e4:f7:2b:b5:e2:5e:b9:71:1e:e5:ed:
56:5b:09:ba:63:7e:30:00:7f:4a:83:63:93:43:89:
73:f0:92:02:cf:c5:46:66:ac:47:5a:24:01:75:2e:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:12:AA:B7:45:88:4B:60:AA:F1:2D:53:97:5F:F7:E0:0B:2E:4F:6F
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1d:0d:69:91:70:ad:aa:96:e8:4a:66:7d:19:00:84:fc:d1:
c0:91:8d:1b:0a:c2:3f:a0:55:a1:86:f5:75:c0:85:8b:57:9a:
e8:8f:a9:43:52:b6:ac:81:61:55:8c:56:de:eb:05:83:bc:50:
04:00:22:9e:58:ca:4c:b8:79:bb:9b:c1:a5:58:1f:02:9a:f7:
b4:d1:ee:db:d7:40:b1:64:cd:76:d0:39:46:b6:08:1f:55:fb:
39:2a:94:c6:82:74:2f:2e:d8:ad:3c:7b:8d:00:bc:58:62:6e:
7b:3d:0e:95:82:a9:4e:6d:91:85:f8:b8:97:f3:ce:b4:36:57:
7a:3a:dd:bf:08:9e:0f:b6:b8:b5:18:3c:77:8f:72:7d:3b:2e:
d0:b9:ce:4f:74:88:2e:d3:76:00:c0:cf:cb:0c:d8:37:0c:1b:
91:e4:e7:e2:bf:0a:38:2c:ae:5f:ff:b1:79:3b:03:d8:6b:ec:
ce:3b:f5:dc:b7:55:ed:00:01:1b:21:5d:5b:f4:52:01:d1:11:
60:fb:50:dd:20:ae:9b:8b:2b:ce:d0:1e:05:c3:ce:0f:fd:5d:
45:a9:85:42:3c:bf:8a:08:4f:34:05:1f:8f:18:9a:c9:e4:40:
0f:58:dc:2b:f6:63:d0:1c:fa:e3:7b:bc:fd:05:d9:b4:9a:3b:
e6:4b:6e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFCeXIA09EQCk1G81uyf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk
MThiNWMwHhcNMjYwODE0MjEwMTEwWhcNMjYwODE1MjEwMTEwWjAzMTEwLwYDVQQD
EyhjYTEyYWFiNzQ1ODg0YjYwYWFmMTJkNTM5NzVmZjdlMDBiMmU0ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWzEZpa6L61KOrC+3yY/xLSi5r4y
ZZRSVQ4WlBZ8towzMrqfdcxcSAFDwVQISEPZhMDkfdwFVyK7DdFT7HuyHQUA5Uc/
tukG6CiSGWAM1fUTgmkGwPTLd95nFVqmIPAyKifA7QlcW8WymaZQTMhDnee/3WZ9
yclPD51nO72ysTqMWzCSUEaOfRsqoMwFr6N6Qm9/U8D0uDXF2xSYoxOc5fOeB0Af
XHHHHkPxeGn7uSwPLryoz3X0MRUegw48WUtJCf7d62I1PtZp9EO63pC5SJDzq1n6
5PcrteJeuXEe5e1WWwm6Y34wAH9Kg2OTQ4lz8JICz8VGZqxHWiQBdS5c/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoSqrdFiEtgqvEtU5df9+ALLk9vMB8GA1UdIwQY
MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt
OWI3OTk3NDgxZjcyLzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy
LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx0NaZFw
raqW6EpmfRkAhPzRwJGNGwrCP6BVoYb1dcCFi1ea6I+pQ1K2rIFhVYxW3usFg7xQ
BAAinljKTLh5u5vBpVgfApr3tNHu29dAsWTNdtA5RrYIH1X7OSqUxoJ0Ly7YrTx7
jQC8WGJuez0OlYKpTm2Rhfi4l/POtDZXejrdvwieD7a4tRg8d49yfTsu0LnOT3SI
LtN2AMDPywzYNwwbkeTn4r8KOCyuX/+xeTsD2Gvszjv13LdV7QABGyFdW/RSAdER
YPtQ3SCum4srztAeBcPOD/1dRamFQjy/ighPNAUfjxiayeRAD1jcK/Zj0Bz643u8
/QXZtJo75ktumw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:23 2026 by rpki-client