Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: yiqv9Ace+lLduGjZT9nd/oXXSE41Qio1zXEtRtJAuTg=
Subject key identifier: A6:AA:D3:08:D2:DC:4C:EB:92:F2:8C:9B:50:F8:13:57:D0:D3:A6:38
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019D3AC2086466554F291166B2D25F3FD100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 18:01:27 +0000
Manifest this update: Sun 29 Mar 2026 18:01:27 +0000
Manifest next update: Mon 30 Mar 2026 18:01:27 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: QQIUSCvTcL4UMtYygGzi7pBtZ6fZ3ypvav2PTxvxCSU=)
2: aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa (hash: mLF2Kf7anYzulE7sB7wSf5Xv7XVNp9u3/BFnkY4aoaI=)
3: gQRcEiSOK1BvYtVOwMak5cgqArQ.roa (hash: epUHVlTyTlnB2yqzWN4cM7frnCSziUUq2Htq1QzVhaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:08:64:66:55:4f:29:11:66:b2:d2:5f:3f:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Mar 29 18:01:27 2026 GMT
Not After : Mar 30 18:01:27 2026 GMT
Subject: CN=a6aad308d2dc4ceb92f28c9b50f81357d0d3a638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:dd:16:e7:5a:c4:99:3f:07:ee:2e:bf:c8:
8c:80:ef:42:0d:88:ef:a3:4c:95:c5:a3:39:e6:2c:
83:cc:0e:1d:40:71:8a:c5:7b:48:04:4e:43:06:ca:
db:7e:ac:d8:85:33:f3:cc:ba:cf:3d:33:ba:89:ee:
b7:c2:01:11:94:63:d8:ae:5a:d9:5d:2a:80:a9:91:
8e:61:fc:74:59:15:12:bb:97:5d:c4:59:62:c4:7f:
73:e9:0d:22:65:5a:f4:60:c7:7a:d9:75:a2:16:28:
fd:67:e2:24:be:90:df:d9:ff:b8:36:5c:9f:f7:47:
9b:94:e5:00:ca:a2:92:45:30:a7:47:c2:d6:61:82:
7a:05:3a:26:88:73:30:d2:2a:b3:29:89:50:c9:51:
e3:f1:98:0c:2b:85:4a:aa:2e:3d:fa:38:01:1d:fa:
64:93:d8:25:5f:dc:1a:1e:73:f0:b0:1e:04:81:e5:
30:9a:c7:69:73:db:e3:da:ac:3f:3d:d3:cb:e2:22:
d7:2b:49:01:2a:34:c3:2b:6d:93:2f:2a:f5:8b:d0:
72:d6:0d:f7:31:b4:10:b8:15:69:cc:c4:a2:fe:94:
6c:53:d0:69:f2:1c:76:0d:86:b8:7e:6f:93:a8:fd:
11:81:84:7c:d1:ef:19:da:05:a4:16:dd:b5:08:fe:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:D3:08:D2:DC:4C:EB:92:F2:8C:9B:50:F8:13:57:D0:D3:A6:38
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:69:35:80:ad:ab:e7:54:c2:4b:7e:ca:30:15:3e:85:f0:
cd:1e:04:3b:05:2b:33:63:fa:45:59:15:2b:5d:f3:e0:1e:4a:
af:87:2c:d2:84:c5:b1:2f:6e:e9:26:fb:19:69:f6:df:04:f7:
99:1d:ef:6f:60:78:95:8c:ba:0b:65:aa:35:b3:67:5c:cb:f7:
73:81:3d:b1:18:69:4a:35:b6:5a:e9:01:67:7e:cb:43:de:e9:
31:6d:53:ab:50:9c:10:0c:22:1d:ed:27:99:ca:14:21:08:a5:
aa:83:bd:f9:fc:2f:68:c5:c8:39:17:bf:6f:81:1e:d8:53:2f:
0d:9f:aa:9c:cd:03:21:1e:9e:c1:92:f8:9c:2c:1b:eb:e0:c0:
3f:21:ea:cf:8a:fa:09:05:ad:f1:dc:15:66:d2:9a:a1:54:06:
22:76:c0:e9:cc:fd:a9:6b:48:ba:4e:19:4b:57:2a:d3:59:fc:
6b:fe:a9:31:ee:6d:4e:1f:a4:9a:d0:3f:ed:8b:0f:ce:4c:70:
72:61:98:03:a3:49:31:0c:47:1c:35:7a:a5:db:c1:42:c1:18:
7b:51:9e:37:15:d9:e3:ce:38:95:a5:2e:be:92:ee:6d:e8:29:
b4:22:1a:0d:54:8a:11:50:40:8f:33:08:7c:70:79:2c:96:70:
13:2f:b0:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wghkZlVPKRFmstJfP9EAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk
MThiNWMwHhcNMjYwMzI5MTgwMTI3WhcNMjYwMzMwMTgwMTI3WjAzMTEwLwYDVQQD
EyhhNmFhZDMwOGQyZGM0Y2ViOTJmMjhjOWI1MGY4MTM1N2QwZDNhNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrndFudaxJk/B+4uv8iMgO9CDYjv
o0yVxaM55iyDzA4dQHGKxXtIBE5DBsrbfqzYhTPzzLrPPTO6ie63wgERlGPYrlrZ
XSqAqZGOYfx0WRUSu5ddxFlixH9z6Q0iZVr0YMd62XWiFij9Z+IkvpDf2f+4Nlyf
90eblOUAyqKSRTCnR8LWYYJ6BTomiHMw0iqzKYlQyVHj8ZgMK4VKqi49+jgBHfpk
k9glX9waHnPwsB4EgeUwmsdpc9vj2qw/PdPL4iLXK0kBKjTDK22TLyr1i9By1g33
MbQQuBVpzMSi/pRsU9Bp8hx2DYa4fm+TqP0RgYR80e8Z2gWkFt21CP6NawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaq0wjS3EzrkvKMm1D4E1fQ06Y4MB8GA1UdIwQY
MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt
OWI3OTk3NDgxZjcyLzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy
LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgxpNYCt
q+dUwkt+yjAVPoXwzR4EOwUrM2P6RVkVK13z4B5Kr4cs0oTFsS9u6Sb7GWn23wT3
mR3vb2B4lYy6C2WqNbNnXMv3c4E9sRhpSjW2WukBZ37LQ97pMW1Tq1CcEAwiHe0n
mcoUIQilqoO9+fwvaMXIORe/b4Ee2FMvDZ+qnM0DIR6ewZL4nCwb6+DAPyHqz4r6
CQWt8dwVZtKaoVQGInbA6cz9qWtIuk4ZS1cq01n8a/6pMe5tTh+kmtA/7YsPzkxw
cmGYA6NJMQxHHDV6pdvBQsEYe1GeNxXZ4844laUuvpLubegptCIaDVSKEVBAjzMI
fHB5LJZwEy+wgg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:04 2026 by rpki-client