
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: ywcBBt87qnJsE73AWAe6ZL/L8yQs4u2ZneMr7EEmvcw=
Subject key identifier: D7:6E:56:DA:F3:97:B4:65:A1:22:97:D3:95:96:00:70:C8:F6:E5:7E
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 019D37F74E95DEDE5CD9E6A8E190F776E255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:47 +0000
Manifest this update: Sun 29 Mar 2026 05:00:47 +0000
Manifest next update: Mon 30 Mar 2026 05:00:47 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: dMn2uFQ+rB8gMSzhVhUAzW5JmMt7NdebGfuEcuzbD2w=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4e:95:de:de:5c:d9:e6:a8:e1:90:f7:76:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Mar 29 05:00:47 2026 GMT
Not After : Mar 30 05:00:47 2026 GMT
Subject: CN=d76e56daf397b465a12297d395960070c8f6e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:c9:67:79:ba:31:76:36:97:25:35:0a:83:
26:1d:c3:f6:a9:ff:f4:19:37:07:73:5b:82:84:3b:
33:8c:24:6e:8a:80:b1:18:6a:7f:66:f7:35:ac:b3:
14:f8:9d:ef:9f:10:46:c8:e5:f6:71:66:9f:40:ef:
4c:61:97:38:20:ac:02:67:e0:62:d8:fa:dc:a9:99:
fc:ca:f7:c7:ef:84:8b:84:8d:0e:5e:7b:c0:17:ee:
d1:6a:11:fc:2d:31:d7:b5:92:1e:31:fd:cc:65:55:
44:11:1a:1b:c0:59:aa:eb:18:ab:51:9a:bf:a8:0a:
b1:61:95:4e:62:6d:8a:76:e5:d2:7f:21:57:8d:ae:
23:07:17:e3:7c:d3:00:56:1e:42:f7:a2:69:9d:bd:
a3:fe:bf:1e:c1:a7:66:5a:c9:cf:b8:bd:03:a5:0a:
d1:08:9f:c3:97:c2:6c:fd:14:62:1e:17:e8:81:4a:
89:7a:18:57:60:e7:56:d1:d6:5b:7f:e6:85:93:93:
43:1a:51:17:95:e4:85:5e:b6:5f:e9:41:36:44:f0:
7a:43:6c:90:14:60:ec:ba:02:ce:2d:57:7d:05:41:
91:ea:e3:d0:54:bc:a1:b5:c1:68:e5:e1:ca:81:3b:
cc:b8:00:dc:7f:12:01:85:a4:36:1d:b3:8c:ad:bf:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:56:DA:F3:97:B4:65:A1:22:97:D3:95:96:00:70:C8:F6:E5:7E
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d4:06:3e:f8:8d:05:c4:4c:b3:50:4a:35:ed:56:53:08:b5:
cd:24:1e:d2:ad:df:75:40:29:6f:29:0b:3d:a0:3f:f3:f3:3c:
50:5b:b2:4b:c7:7b:d9:b1:ec:9a:4d:7c:41:20:c1:9c:22:23:
f2:ef:3c:82:93:71:ab:45:8f:58:7f:f3:94:11:ac:b7:68:e9:
e5:4a:40:d4:1a:3e:f0:b5:41:50:6e:97:98:11:bd:c3:72:38:
3a:6c:c6:87:87:b4:df:d0:fb:2d:99:a0:7d:3f:05:4c:05:b5:
7a:ad:d0:35:1e:72:8c:c0:f4:e9:e7:8b:42:1a:d2:36:95:a1:
ed:da:9b:5c:ab:51:5c:04:1a:58:93:3e:9d:3a:68:95:65:39:
df:96:fa:b7:35:70:de:34:18:1a:99:8f:ed:da:2b:c8:f9:8c:
e3:b9:01:c8:66:9d:42:2b:ee:52:65:cd:04:71:58:87:13:eb:
31:57:4e:4f:e3:2b:67:74:a6:82:b5:63:2a:90:ca:ea:21:2d:
d1:df:88:3a:3b:1d:aa:2a:82:ef:88:c6:05:ad:30:f1:6a:9a:
00:13:f1:8d:14:31:58:c5:fe:a3:d5:29:c1:ca:30:3d:50:9a:
33:31:4f:d8:0c:54:12:62:b9:f1:6f:79:dc:c2:bd:b5:f2:c8:
a6:92:44:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03906V3t5c2eao4ZD3duJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh
OWJhODkwHhcNMjYwMzI5MDUwMDQ3WhcNMjYwMzMwMDUwMDQ3WjAzMTEwLwYDVQQD
EyhkNzZlNTZkYWYzOTdiNDY1YTEyMjk3ZDM5NTk2MDA3MGM4ZjZlNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCvJZ3m6MXY2lyU1CoMmHcP2qf/0
GTcHc1uChDszjCRuioCxGGp/Zvc1rLMU+J3vnxBGyOX2cWafQO9MYZc4IKwCZ+Bi
2PrcqZn8yvfH74SLhI0OXnvAF+7RahH8LTHXtZIeMf3MZVVEERobwFmq6xirUZq/
qAqxYZVOYm2KduXSfyFXja4jBxfjfNMAVh5C96Jpnb2j/r8ewadmWsnPuL0DpQrR
CJ/Dl8Js/RRiHhfogUqJehhXYOdW0dZbf+aFk5NDGlEXleSFXrZf6UE2RPB6Q2yQ
FGDsugLOLVd9BUGR6uPQVLyhtcFo5eHKgTvMuADcfxIBhaQ2HbOMrb/YVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNduVtrzl7RloSKX05WWAHDI9uV+MB8GA1UdIwQY
MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt
NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0
LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANQGPviN
BcRMs1BKNe1WUwi1zSQe0q3fdUApbykLPaA/8/M8UFuyS8d72bHsmk18QSDBnCIj
8u88gpNxq0WPWH/zlBGst2jp5UpA1Bo+8LVBUG6XmBG9w3I4OmzGh4e039D7LZmg
fT8FTAW1eq3QNR5yjMD06eeLQhrSNpWh7dqbXKtRXAQaWJM+nTpolWU535b6tzVw
3jQYGpmP7doryPmM47kByGadQivuUmXNBHFYhxPrMVdOT+MrZ3SmgrVjKpDK6iEt
0d+IOjsdqiqC74jGBa0w8WqaABPxjRQxWMX+o9UpwcowPVCaMzFP2AxUEmK58W95
3MK9tfLIppJEaQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:36 2026 by rpki-client