Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: KWHmSw/Fui7gkPXxnIdvYYrcY+r6q1yscSRyz+S/33U=
Subject key identifier: 8C:A6:AD:2E:DE:D6:24:BC:44:D7:97:68:10:93:CA:0B:2B:D2:AE:72
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 019F18D6932591CB7C54150327D4371C43A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 14:02:23 +0000
Manifest this update: Tue 30 Jun 2026 14:02:23 +0000
Manifest next update: Wed 01 Jul 2026 14:02:23 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: yQT0v11GG3xG1FM7ddZq89zzKaj90D2UIT5r1+eIrX8=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:93:25:91:cb:7c:54:15:03:27:d4:37:1c:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jun 30 14:02:23 2026 GMT
Not After : Jul 1 14:02:23 2026 GMT
Subject: CN=8ca6ad2eded624bc44d797681093ca0b2bd2ae72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:f5:0f:ea:10:00:e0:53:f3:c6:56:4b:a0:
36:32:cf:da:fc:be:ac:c6:e7:94:4a:ff:2e:0b:64:
50:aa:48:a8:36:a7:c2:dd:f0:be:12:99:2d:ce:94:
38:86:e2:4b:67:ae:08:c9:a0:c3:66:1c:07:9c:11:
91:74:02:82:01:68:63:2c:3f:56:2e:7a:cc:8d:7e:
6e:89:08:b8:e7:4b:de:68:c3:45:e0:25:20:e3:e2:
e1:e1:70:b1:07:13:a4:85:18:5c:34:b2:2c:5d:20:
f3:b8:6b:89:20:59:8b:2d:55:01:b6:8f:a0:af:ac:
e0:b2:92:7c:b1:78:f5:8a:2e:bc:2a:6f:0e:d4:6d:
cf:5d:f0:ba:83:78:69:b0:5c:6b:0b:86:64:19:63:
5b:a6:2a:e1:f9:e9:5b:4d:d8:da:e4:4f:39:c8:fd:
0f:83:70:c6:cd:41:87:6f:63:1d:ea:63:57:b9:39:
01:e1:43:ba:9f:04:e3:e1:1a:f8:9d:37:2a:3a:17:
84:0f:00:7e:33:78:fb:0e:e3:1b:df:4a:d3:50:77:
2c:07:24:3a:31:21:44:31:dd:58:bf:f0:9b:95:73:
ae:2e:99:cb:15:8c:e5:8a:19:db:6c:4d:94:24:7b:
29:98:19:1c:5c:e8:49:0d:ee:ba:00:ec:a0:dd:70:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:AD:2E:DE:D6:24:BC:44:D7:97:68:10:93:CA:0B:2B:D2:AE:72
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:10:6b:9f:12:6f:59:db:a5:b1:fc:b0:32:24:a3:4e:eb:
30:3b:40:6a:a3:92:b8:85:37:f9:0c:38:11:52:88:2d:7f:91:
6e:bd:83:4f:1f:fc:c6:f8:f0:82:f1:4e:70:d8:94:18:f3:86:
bc:5b:1b:fe:ba:90:3f:4f:50:39:01:ed:43:02:31:f0:8f:ae:
11:0f:98:6d:b5:0b:28:82:32:eb:fb:19:28:7a:9a:36:ef:bd:
19:41:65:a7:1a:54:3e:4c:76:08:e5:50:4b:e6:2f:fd:25:0f:
70:ef:56:5e:1a:62:30:f5:e0:6e:f5:50:bc:5f:fd:cc:d2:d9:
7f:d7:36:9b:f5:05:1d:a5:a2:ab:3e:8f:12:ee:a8:3f:17:1b:
88:90:2b:20:4b:ed:4a:a5:02:9e:9f:39:66:c1:bf:b1:d1:bf:
19:34:f2:04:10:50:8f:90:6c:9f:63:4a:13:54:c5:71:1e:72:
fc:5e:f4:8d:ae:c8:cc:ee:aa:9c:17:7e:63:2e:73:98:ae:ea:
77:70:e2:52:89:2c:95:ea:57:ad:27:9e:63:26:75:c9:0c:c3:
ad:69:6c:c9:2d:30:97:6e:8c:e2:c5:dd:24:ef:71:2e:d2:d6:
24:43:f2:d1:8a:12:43:f0:de:aa:76:db:f6:87:7f:cc:5c:b1:
34:20:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:26 2026 by rpki-client