Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: ydvD+JrQxjwEu+BxwncuMKW6LWrNHM13y4r7mw6DsyI=
Subject key identifier: 7E:C3:F2:30:B6:89:99:A6:35:DE:56:34:B8:E1:09:ED:D0:C6:E8:C4
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 019D382E4E91F0D7C29CC35089BBBE2972B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 111A
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 4F2ORWqTZlK91pGpzWCjI0lcsBZZ2gTh672z3hE8RSE=)
2: L_-Xb0Gx3YHqlx1tMQzx2NXADHY.roa (hash: 5dx2j75C/cFqrHYWYHYvkWEXYxWb1XkSbro/7cWI8AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4e:91:f0:d7:c2:9c:c3:50:89:bb:be:29:72:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=7ec3f230b68999a635de5634b8e109edd0c6e8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:3d:7d:a8:7e:03:41:88:59:ac:f5:74:a3:
7c:0f:85:fb:45:1a:2e:aa:f1:5f:44:37:cd:ea:9c:
01:74:d9:f4:2b:28:d7:4f:dc:7d:e2:d2:98:c1:92:
e4:b1:b4:cc:53:65:09:d3:40:43:b0:c1:38:dc:28:
d7:02:24:08:ca:43:d0:e4:d9:e2:ea:c2:51:5c:0c:
e2:a3:08:90:5d:73:cc:8f:78:a6:f9:9f:86:ae:19:
2d:43:fe:20:e7:2e:fc:ae:e6:db:a0:7c:1a:d9:d3:
6f:ad:cd:d1:f7:e6:b3:74:a1:17:6e:af:16:73:fd:
8b:09:78:92:bd:23:98:8a:65:c6:9d:f8:3a:d5:0b:
8b:e1:77:5c:84:0d:c0:66:b1:b0:67:47:0d:7b:e3:
6f:b2:08:30:34:84:70:55:94:38:34:c9:d1:16:9e:
60:83:1c:f1:fc:0b:39:21:43:f7:4c:f9:24:82:fc:
1c:af:82:ea:b6:70:86:88:7f:38:fa:31:6f:0d:5f:
02:81:49:1d:b3:2b:66:53:cb:9b:0a:b6:2a:10:93:
af:6b:1e:73:89:2d:89:fc:fc:10:22:3f:fe:39:da:
93:97:03:7c:99:dc:48:c0:f3:57:f6:b4:28:2e:35:
0a:8d:ac:87:a3:38:7d:54:b0:6a:1f:94:3a:6b:7f:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:F2:30:B6:89:99:A6:35:DE:56:34:B8:E1:09:ED:D0:C6:E8:C4
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ae:44:35:c3:48:b1:43:45:30:b9:8f:05:32:7a:b5:88:34:
3c:2c:c3:33:3e:99:7c:e4:b1:19:60:5f:01:36:cc:96:14:6c:
27:27:d9:d1:d9:d3:c1:95:33:f8:fb:9a:6b:4d:76:18:01:d4:
22:6f:e9:9e:80:ad:62:7e:72:f4:a1:3e:0e:bb:97:f3:0d:7a:
11:4b:8e:1c:4b:f6:77:f3:84:12:7e:a1:73:a7:f1:83:e0:61:
29:32:68:6c:9d:cf:c6:7a:d4:2d:8b:e5:fc:19:42:8f:c4:c2:
5d:20:04:5b:2f:ce:e3:b0:46:bc:fa:3c:27:6c:79:e1:51:1b:
57:ed:91:00:f4:25:a0:72:23:00:50:7d:7a:84:d3:69:f5:31:
1b:de:9f:13:73:c3:85:62:22:55:b7:eb:81:f8:77:e3:3c:8d:
d2:e1:87:6b:45:7f:50:1b:80:f4:af:1e:42:d7:ff:c9:5d:96:
88:ca:0f:52:fa:40:e6:4a:6a:b8:60:59:18:ac:99:a2:02:52:
74:e6:77:9c:e0:31:a1:f2:3a:ae:33:9a:01:86:1d:35:2a:fd:
bd:c0:30:8a:64:50:2a:ea:cb:b1:11:c9:17:02:fc:d8:07:9a:
cb:bb:c9:2a:b4:b3:02:bb:41:10:a5:56:78:95:5d:e4:43:9c:
84:7a:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:00 2026 by rpki-client