Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: 7e0lgEpsVdSbIqWY7vL8S2Rzs1jjqJmXYnahsTewT0I=
Subject key identifier: 4E:00:88:73:F3:12:FE:CA:32:E3:D5:78:C8:27:4B:A2:A3:86:9D:CA
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019F9022F5799ECAF0E29EEBCC2089B75963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 18:00:37 +0000
Manifest this update: Thu 23 Jul 2026 18:00:37 +0000
Manifest next update: Fri 24 Jul 2026 18:00:37 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: WXItZRvD8LL05MG2MMAlX6FWaaHAOoEcIbOXEQpwKVE=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f5:79:9e:ca:f0:e2:9e:eb:cc:20:89:b7:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jul 23 18:00:37 2026 GMT
Not After : Jul 24 18:00:37 2026 GMT
Subject: CN=4e008873f312feca32e3d578c8274ba2a3869dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:f0:39:47:db:af:a4:0b:ea:d0:29:b4:b9:
fb:60:42:ba:47:ed:b1:cf:2b:e8:6f:99:ee:a6:22:
70:37:14:50:74:0f:6f:06:72:54:a4:8a:9b:b0:db:
e6:14:f3:70:cd:d3:66:b1:12:df:50:60:b5:5c:22:
1a:38:13:f7:e8:01:05:ed:a6:e9:1f:2b:86:33:e1:
ee:0e:dc:74:27:53:a9:af:89:3a:22:92:8e:f4:56:
ed:28:35:2b:ce:a0:5f:80:27:8d:7d:bc:9d:90:11:
ee:15:a3:48:78:ce:d8:b1:22:03:8a:99:2c:bd:9d:
9e:de:f2:a5:9d:aa:db:b3:4d:56:a1:66:e2:47:18:
52:4a:af:47:36:d0:b1:0f:e3:41:4e:c8:f6:94:62:
7a:76:c7:4b:ef:09:f2:2b:20:7e:6a:40:5b:92:c2:
9c:e3:5f:39:3f:97:1a:95:0d:23:2e:4a:65:91:b3:
9f:37:5b:eb:7a:99:5f:76:1d:8e:bf:43:86:df:93:
08:0d:8c:15:5d:55:73:56:c3:5e:76:6b:7f:6d:12:
89:85:9c:5c:90:68:05:46:85:82:90:41:8b:2b:e7:
ac:b2:d2:ea:3d:dc:fa:79:32:56:70:64:b3:5c:6a:
68:f4:ac:f7:48:1e:f4:de:fb:7b:ab:6c:01:26:e8:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:00:88:73:F3:12:FE:CA:32:E3:D5:78:C8:27:4B:A2:A3:86:9D:CA
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:04:fc:f2:73:9e:58:7c:30:90:1a:71:5d:52:20:fc:ec:42:
5d:18:37:fe:65:e1:84:95:44:e8:01:aa:a5:c8:dd:f6:a1:9c:
e5:9a:89:34:6e:74:36:5a:35:a0:dc:aa:97:41:43:a5:b5:47:
35:ea:9e:6c:d8:ff:4e:9e:a1:28:00:f0:5b:36:b6:5e:a2:d3:
c8:33:a2:8b:0a:d2:a7:6f:ba:2d:66:1b:6a:49:75:6a:06:20:
f9:a3:87:19:32:27:7e:42:0c:70:7b:a6:5b:b1:6d:53:b6:6c:
be:4d:f2:26:32:43:09:2d:a5:e0:33:4c:77:d1:87:56:b2:60:
d9:e8:4c:4e:d8:cb:0f:9c:2a:e5:0e:ba:58:69:63:fd:8b:dd:
1a:35:1d:0a:85:ca:e7:3c:4a:25:65:bd:85:df:9a:1c:9a:fc:
6c:d3:bd:b3:2f:94:c0:1b:fa:9b:26:da:f8:19:ea:51:95:27:
72:4f:cd:77:43:ae:c0:75:f2:07:b7:d6:42:18:63:13:d2:60:
32:c2:71:3d:4d:ed:b6:1b:89:c2:f7:62:24:b1:07:cf:21:25:
10:76:b4:c3:82:42:1d:b6:75:6a:0a:f1:25:f5:dc:89:b8:56:
c7:75:06:1e:88:13:f4:ec:40:26:39:ba:6a:c3:8e:bf:23:93:
c2:47:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:08 2026 by rpki-client