Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: RgshXyH9uWqAeRpU7zoPOlQpvhkfFee64ERH8vVk84Y=
Subject key identifier: C7:2F:3C:1D:21:31:1F:2F:93:BA:CC:0D:FD:E8:90:AC:2A:B1:58:AE
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 01A114BCB348EC4D678193CEEE6F7C3D93F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 1A8E
Signing time: Wed 07 Oct 2026 05:01:13 +0000
Manifest this update: Wed 07 Oct 2026 05:01:13 +0000
Manifest next update: Thu 08 Oct 2026 05:01:13 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: P1B6VUTn4+gpjKLTM8PsG0tNu5PUb7o9EQEmziwJ8l0=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bc:b3:48:ec:4d:67:81:93:ce:ee:6f:7c:3d:93:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Oct 7 05:01:13 2026 GMT
Not After : Oct 8 05:01:13 2026 GMT
Subject: CN=c72f3c1d21311f2f93bacc0dfde890ac2ab158ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:1e:0e:10:60:5d:17:f1:11:b4:76:7c:26:
9a:56:5e:38:28:c9:1d:97:c7:d5:90:cc:56:38:ff:
d0:08:29:fe:66:d4:34:93:18:93:8d:53:0f:14:d2:
a0:1c:08:5b:7a:3e:61:ed:d2:60:94:9b:0c:ad:55:
39:d8:49:7a:bf:75:77:ab:b9:88:4c:31:3b:7a:b4:
0f:54:0f:a8:24:b9:68:40:4a:8f:46:7d:a7:8c:25:
03:1d:12:03:9a:35:31:26:1e:85:54:75:13:4b:4f:
04:1f:fd:c0:4b:05:19:6e:d7:ec:86:c5:d5:ee:8d:
46:bd:7e:ab:a3:38:22:8e:ee:91:83:d7:26:85:db:
7e:fc:6c:5c:c7:64:2a:c9:1e:79:cf:45:98:62:2c:
2a:3f:d5:d7:c2:c4:68:da:59:e2:66:e6:59:81:d9:
63:6d:19:28:9b:e3:cc:fa:07:e2:36:4e:fb:26:9f:
1d:3a:aa:90:75:d9:c9:d9:77:9b:4e:ee:f3:54:61:
2e:d9:15:13:a1:2d:76:c0:0b:a8:84:7d:a4:ff:a7:
a1:b6:f9:d1:c4:5c:db:95:0d:fb:19:25:e2:df:2e:
8e:cb:60:08:83:4d:d4:07:c1:b3:7f:33:bf:10:bd:
ce:76:76:23:9f:a4:68:08:e0:31:63:75:99:f2:1c:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:3C:1D:21:31:1F:2F:93:BA:CC:0D:FD:E8:90:AC:2A:B1:58:AE
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:6c:92:8a:1d:e1:24:f5:55:c6:00:e0:1e:41:df:6c:de:
86:c1:10:56:59:73:16:68:22:85:04:ca:ce:03:f1:24:29:e4:
53:e6:eb:62:57:1d:b5:04:e1:a9:25:da:d4:e3:0a:a2:cf:f3:
93:6d:f9:86:fb:26:c8:a6:a0:08:b2:f4:6c:e6:eb:5e:c2:92:
fc:70:11:8d:54:03:3c:02:4a:3c:7a:39:cf:20:fe:1c:fc:b5:
9c:c0:92:49:47:0b:7c:a4:70:46:4b:27:85:1e:72:49:a6:e3:
af:3b:9b:ed:0f:92:93:52:59:77:58:83:ce:b9:fa:43:d6:38:
70:d6:4c:c1:02:5f:51:db:e1:8c:80:38:79:fc:ab:69:47:46:
c9:7b:a8:fb:79:89:e7:13:9a:f6:e5:57:24:2e:9f:d1:40:da:
13:9d:09:26:c9:26:ad:2f:c9:1c:ee:f3:80:f1:5f:e7:43:56:
b9:60:c5:5e:b2:de:d4:ad:6b:6d:6d:66:ca:5b:61:25:64:60:
83:47:4e:bb:13:8c:7a:d7:13:75:0e:06:a1:66:bf:44:89:07:
43:50:88:5d:18:00:ac:08:1a:7a:09:19:a9:7c:b2:f2:14:73:
e6:f1:5a:14:93:b3:86:60:15:16:2b:18:48:c7:50:41:e9:7b:
3b:d6:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:22 2026 by rpki-client