Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: Zh7mFnvhDBl/1qORPlJKvKRCNVIn98hXJMZ5PD2yPro=
Subject key identifier: DD:B1:15:B8:CB:BA:21:FC:FC:90:ED:40:CB:64:5D:A8:07:60:14:C3
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019E1D5978F789C2DF9C23AD0D88BC2CBB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 18:01:03 +0000
Manifest this update: Tue 12 May 2026 18:01:03 +0000
Manifest next update: Wed 13 May 2026 18:01:03 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: sqxrAk2hngE255+gSRikwpw1+7pry/lFrAxfjGDOaiA=)
2: kGE94C9BvEAQkbxYV-NajyFErRQ.roa (hash: +pic/FN6redbOgSewE+hp04FbkYh24EDIPAZdmJ+99s=)
3: wctakh6MbZAQ9a6QFbIr94pHwkI.roa (hash: lYT29eFvKjLzub83kniNeffCXgKNHrPpMwyvMGS+Fao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:78:f7:89:c2:df:9c:23:ad:0d:88:bc:2c:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: May 12 18:01:03 2026 GMT
Not After : May 13 18:01:03 2026 GMT
Subject: CN=ddb115b8cbba21fcfc90ed40cb645da8076014c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:c0:2e:6e:b4:2b:f2:fc:b4:bb:41:d0:17:
75:fd:70:88:a2:35:ef:d6:ec:6a:82:e8:5f:80:73:
7b:68:8a:2b:2e:e2:2f:02:39:be:49:63:0f:2a:ac:
e7:cb:05:72:e5:b3:1e:fd:b1:87:bb:c8:9f:6b:74:
e3:09:15:9b:0c:9a:d5:a7:25:25:90:29:0c:1c:79:
ba:30:c5:15:86:0c:5e:d9:4a:bd:40:ca:1a:95:b8:
fa:3e:a7:a8:bf:6a:00:ec:3e:c7:c9:81:7b:fd:81:
43:72:b4:81:ca:3b:bd:20:eb:66:75:53:4c:51:4a:
3b:3e:93:62:99:30:e4:92:23:7b:64:f8:be:36:60:
ce:2e:ee:ed:ae:f4:81:e9:5f:64:d1:31:dd:73:23:
30:29:b4:b5:26:6a:38:4c:73:09:0e:a5:bd:59:5f:
14:14:6f:4e:c4:3e:7e:99:d2:ee:4d:aa:12:e4:fb:
54:34:6f:e0:4f:17:02:bd:e7:9d:3e:67:1f:2b:37:
13:45:84:55:14:e7:2e:1d:6d:93:a8:cb:3f:e8:54:
e4:cd:5f:4c:08:d8:ce:70:78:73:19:17:e9:de:a0:
00:b3:79:b7:e6:4c:e3:97:f7:3f:17:5f:8b:a8:a7:
de:39:39:9e:df:8c:b1:eb:9a:88:37:b5:eb:72:b5:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:15:B8:CB:BA:21:FC:FC:90:ED:40:CB:64:5D:A8:07:60:14:C3
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3b:61:e7:33:80:a2:42:d7:75:0f:56:30:bb:bb:bb:df:70:
88:d4:e6:c1:e9:d1:72:31:f9:26:69:bb:8c:d8:80:52:1d:10:
79:37:e9:57:b2:70:2f:5f:f1:fc:6b:2a:37:11:b8:f0:7f:34:
81:da:77:c7:0f:35:7d:bc:6b:3d:ce:f8:31:96:32:74:b2:38:
ee:d8:77:da:50:f3:8b:77:9a:ef:f2:9a:19:c2:70:ff:70:a4:
9e:ca:66:cb:5b:36:83:ef:b7:10:28:0d:dd:79:17:04:09:5b:
e9:63:55:00:b5:b7:ee:b7:81:25:f3:08:25:61:57:32:84:00:
a7:4a:95:80:37:6b:63:45:c8:03:32:20:0a:3d:ff:52:f8:6f:
5a:23:d2:dd:41:45:f9:ab:ef:1d:d7:a6:0b:ef:76:36:ad:ea:
67:3f:ae:14:b2:4a:c8:96:b0:8f:65:5c:86:3f:de:c8:38:33:
e4:7f:8b:e2:b7:ef:67:59:36:82:8e:fe:c8:94:41:33:56:b5:
d3:41:62:e4:0c:22:f7:92:aa:a3:09:fe:42:2d:fe:18:3d:21:
57:f0:d4:08:46:6b:2e:90:93:de:94:18:f9:46:57:d9:c4:13:
2b:05:9c:08:55:05:95:31:64:b3:67:62:30:9a:e0:87:c3:48:
92:2b:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:21 2026 by rpki-client