Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
File: 40HGEPYYEikNrK1gvG0QHWPAjmU.mft (raw, json)
Hash identifier: kY4nqBZYjfHYuYnbaJCuk4oI1dNPP2EzU7d9MDSH1lc=
Subject key identifier: 43:78:30:8C:98:38:19:37:3C:EF:F3:5B:15:4B:73:79:A7:6F:EA:65
Authority key identifier: E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
Certificate issuer: /CN=e341c610f61812290dacad60bc6d101d63c08e65
Certificate serial: 019D38664E0A510D926BA9AD85EC1CA08F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
Manifest number: 09
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: 40HGEPYYEikNrK1gvG0QHWPAjmU.crl (hash: nx+Q+zcSzl0gUKgrdckg1mDUz92PgZKWlhs4P17rW7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4e:0a:51:0d:92:6b:a9:ad:85:ec:1c:a0:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e341c610f61812290dacad60bc6d101d63c08e65
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=4378308c983819373ceff35b154b7379a76fea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:cc:0f:48:e0:40:d0:c1:41:0b:0f:c4:9e:
ec:ba:f2:54:ba:22:38:6e:bf:8e:71:73:6e:e5:75:
c7:a6:a1:fd:4c:64:3e:4a:96:74:0f:67:15:7e:07:
3e:70:ad:7d:a0:6e:7f:9d:1e:bb:5d:c5:c2:40:03:
21:ea:6c:9f:27:47:c9:68:1e:58:57:16:bd:9b:1c:
0d:a1:71:04:74:34:ad:a7:bc:98:03:96:92:9e:8d:
20:b2:90:b1:27:7c:bb:41:08:5c:b7:93:a5:fd:f8:
6e:e0:08:99:3f:ce:5c:b8:29:59:ff:fc:16:fb:ab:
3f:6c:30:03:ac:4e:29:7d:b1:60:79:77:78:01:2f:
02:b5:13:01:cd:bb:a4:dc:19:50:4d:26:61:56:fc:
ba:76:36:c2:e4:70:76:1d:81:59:9a:87:1f:b9:3d:
2c:0a:9d:e8:24:5c:f7:14:50:1f:bc:78:5e:db:ef:
62:1e:00:82:71:32:72:5d:25:12:fd:8b:92:e9:bd:
92:17:dc:bd:8f:6a:03:71:91:87:7f:c0:66:b8:77:
8a:75:19:2f:13:7c:15:de:ba:ee:90:1a:9b:e7:4c:
32:28:5d:53:8f:a2:66:0b:9d:b1:bc:d6:ae:48:bb:
3a:f8:6e:80:e9:65:64:25:f3:fd:0b:3c:b3:96:6f:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:30:8C:98:38:19:37:3C:EF:F3:5B:15:4B:73:79:A7:6F:EA:65
X509v3 Authority Key Identifier:
keyid:E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:39:f2:35:b4:40:25:31:47:b8:62:0a:ae:c4:16:97:bb:
b7:94:af:25:41:ff:06:fa:35:6a:75:ea:29:81:12:c1:8c:77:
4b:ec:32:82:0a:80:40:8b:04:b9:d3:ed:94:3a:be:5e:60:6b:
a0:50:d4:59:64:71:a8:09:0a:19:b1:10:e1:f1:30:23:6f:78:
e5:16:61:86:68:7b:c4:bd:43:e0:c6:74:5c:fd:a1:b7:06:2f:
f2:2a:8e:20:be:33:e8:4e:95:da:4b:b9:a2:c7:8d:3d:16:b2:
c5:70:fc:75:ed:8b:e6:68:70:7b:3b:7c:4f:00:28:0a:b1:26:
53:fa:cb:7e:d0:eb:39:30:c0:ea:f5:fa:c7:47:d3:fc:25:44:
8e:bc:1a:cc:6a:26:95:c8:b6:f1:8e:26:cd:ae:91:d9:30:f1:
11:af:aa:52:7c:60:e1:b8:67:f5:9b:5e:a2:fe:2b:e4:16:45:
79:a7:3d:07:56:5e:67:1b:62:08:c5:bb:a7:fb:89:8c:12:a5:
59:b7:10:76:b5:7a:bf:35:92:2f:18:fc:4d:06:eb:f6:0d:d4:
78:2f:c4:b4:e2:fc:cd:b6:af:b7:d7:7b:d8:01:c1:e5:cd:a6:
a6:cf:ce:08:bb:b1:42:6f:45:c1:30:e7:d3:0c:4a:c9:8c:c4:
6f:f7:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:06 2026 by rpki-client