
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
File: 40HGEPYYEikNrK1gvG0QHWPAjmU.mft (raw, json)
Hash identifier: X2z+5y/9/2OXRNV4B3cpZSuraCNJPPNju87FX6rUTl8=
Subject key identifier: 4C:99:49:70:05:C9:F5:A1:C2:EA:2E:C4:97:FF:F0:92:84:D7:F7:1D
Authority key identifier: E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
Certificate issuer: /CN=e341c610f61812290dacad60bc6d101d63c08e65
Certificate serial: 01A040BC77120391BB47652BBA9661320795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
Manifest number: 019B
Signing time: Thu 27 Aug 2026 01:01:28 +0000
Manifest this update: Thu 27 Aug 2026 01:01:28 +0000
Manifest next update: Fri 28 Aug 2026 01:01:28 +0000
Files and hashes: 1: 40HGEPYYEikNrK1gvG0QHWPAjmU.crl (hash: 7s1NZAfE3huq89SRskKTRgQPDu/khykZC8DcuN2BIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:77:12:03:91:bb:47:65:2b:ba:96:61:32:07:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e341c610f61812290dacad60bc6d101d63c08e65
Validity
Not Before: Aug 27 01:01:28 2026 GMT
Not After : Aug 28 01:01:28 2026 GMT
Subject: CN=4c99497005c9f5a1c2ea2ec497fff09284d7f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:4f:1a:96:c9:5d:a3:b2:cd:0a:8f:aa:56:
77:74:42:aa:37:b1:2f:67:30:a1:aa:bd:1c:17:64:
d9:bb:83:73:32:e3:eb:29:7e:b6:6b:cc:9f:94:e2:
6a:08:e3:bd:0d:79:c9:48:4b:cd:4d:9b:61:19:c5:
8c:cd:bb:17:d6:35:09:67:56:33:01:23:4f:b9:41:
1d:cf:ec:0d:32:d2:37:d2:25:b0:68:70:10:ea:25:
ba:d1:1c:7c:d3:c7:6f:b2:57:44:99:a5:a6:ef:45:
f8:b2:49:ac:8a:c5:83:55:3a:b6:53:f2:64:07:f4:
08:6c:93:a8:40:e4:f1:10:8b:13:d0:da:03:24:98:
e3:c0:49:20:ec:6d:78:e7:17:f0:c1:4b:f5:4b:ad:
91:4f:84:56:ea:3d:40:b4:d8:fa:68:82:e0:93:08:
b6:80:84:1c:03:b7:b5:77:88:fe:ca:18:54:75:23:
d5:ed:62:a5:ad:2e:58:82:e1:e5:f3:b9:d2:dc:5e:
f8:2a:ce:fa:f9:4e:b6:aa:9e:cb:f1:8c:04:fe:be:
ce:df:a2:e4:c8:66:30:01:3d:a4:7b:f4:1b:76:b4:
5c:09:b8:46:d9:17:72:c8:3a:e6:35:f2:00:d5:2b:
95:2c:6a:a4:d7:6d:c3:e5:e3:92:6d:63:c9:b1:39:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:49:70:05:C9:F5:A1:C2:EA:2E:C4:97:FF:F0:92:84:D7:F7:1D
X509v3 Authority Key Identifier:
keyid:E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3c:bd:42:47:9e:be:4e:15:1c:de:e6:1b:f0:8d:11:bd:14:
95:b3:44:ad:2c:12:0e:6c:3c:bd:f6:79:44:22:6e:83:92:d3:
33:6b:0a:50:5b:4f:06:b1:e0:ce:e1:91:2c:9a:a2:33:4e:e6:
52:44:38:59:80:a6:4c:62:26:08:b0:da:0b:78:63:cc:43:7e:
eb:96:09:7f:86:c2:bc:53:ac:ce:45:09:fe:03:c7:98:21:fd:
96:1c:13:60:1f:a6:41:bf:8c:dc:0b:e5:7c:80:37:91:42:27:
b2:a8:ef:29:38:97:d2:05:33:aa:57:de:1b:86:38:09:86:6e:
00:89:fc:f9:20:4d:42:35:83:40:08:b9:f7:57:61:93:1e:58:
e3:e4:4b:fb:e6:89:6c:7d:9f:96:57:0c:a2:76:e9:26:b9:b6:
65:3d:b3:03:d8:ac:6c:30:7a:ab:28:df:e1:66:98:65:28:5a:
09:1b:ee:41:e9:06:dd:ef:1c:8c:15:7e:00:62:0b:a1:4d:81:
9e:e5:1c:65:e3:99:75:9a:e5:73:4b:39:6d:3a:e1:ee:36:7c:
0e:80:b7:ff:bd:fe:25:a3:ac:d2:94:c7:b0:e5:ec:21:9c:80:
ca:cd:06:0f:5c:11:51:90:e7:97:ee:44:b1:1a:d4:fe:4b:86:
df:18:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:45 2026 by rpki-client