Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: ezS6Szvn2llOv1Mgchk7+qQWcbvtnZuQ8duflBRrL9s=
Subject key identifier: 72:F2:59:B0:65:F8:FD:2F:29:73:60:C7:4D:4C:DE:94:DC:C4:66:37
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019D2771C41816321015ABD780FDF069C6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:00 +0000
Manifest this update: Thu 26 Mar 2026 00:01:00 +0000
Manifest next update: Fri 27 Mar 2026 00:01:00 +0000
Files and hashes: 1: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: FT4ivjBoOGUxJJPZqd8+XDdxTjN3OFGg846C8EgM8vc=)
2: aQAtN8hisUl-Fr4KbF-LGPKAj8s.roa (hash: mLF2Kf7anYzulE7sB7wSf5Xv7XVNp9u3/BFnkY4aoaI=)
3: gQRcEiSOK1BvYtVOwMak5cgqArQ.roa (hash: epUHVlTyTlnB2yqzWN4cM7frnCSziUUq2Htq1QzVhaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c4:18:16:32:10:15:ab:d7:80:fd:f0:69:c6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Mar 26 00:01:00 2026 GMT
Not After : Mar 27 00:01:00 2026 GMT
Subject: CN=72f259b065f8fd2f297360c74d4cde94dcc46637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:9d:37:fe:4d:72:d1:22:ac:38:15:a6:cf:
99:9e:37:b3:df:37:bc:ff:6c:ee:65:cb:0d:f2:fd:
b1:18:8c:fa:46:88:6f:f0:07:73:a9:18:ad:a0:e8:
2f:ab:07:ce:1c:e0:f9:0c:c1:23:02:5e:19:69:ab:
54:1b:9f:1a:73:e6:fe:f5:ab:b5:11:0a:1d:9f:92:
21:73:f1:e0:03:59:d7:64:7d:6c:f4:f8:52:78:83:
5c:38:df:cf:dd:8a:8c:a4:46:98:75:1c:07:c9:0b:
3d:85:c4:0e:2f:55:0c:48:aa:ef:40:a9:68:b6:4d:
64:73:b3:a1:6b:b0:e1:b8:4f:75:b3:de:a3:a4:49:
70:ec:2a:34:7a:e3:d0:73:27:2e:16:48:f2:e8:76:
60:d2:03:e8:b1:13:ac:2f:43:af:e8:98:90:b2:4d:
10:72:df:ad:e2:6e:14:ff:f8:7c:a5:fb:a2:c9:69:
ef:ee:c7:8e:ab:33:b7:28:33:89:b3:7c:07:d0:1c:
2d:c8:8c:8c:c4:9e:0f:e1:91:50:2b:9c:88:18:df:
54:98:3f:20:0d:32:b6:62:e2:57:26:e0:b8:23:b3:
25:a6:99:5f:e8:74:68:92:5e:79:1b:7a:5b:9f:ef:
25:ec:52:ce:c0:83:b5:25:76:13:a4:c7:ec:32:80:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:59:B0:65:F8:FD:2F:29:73:60:C7:4D:4C:DE:94:DC:C4:66:37
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ba:51:c9:9e:e0:27:8d:85:13:16:f8:02:bd:88:69:02:4f:
65:c7:71:d5:e6:14:48:f7:e2:dd:2f:2c:2d:25:b5:ef:81:a1:
ad:27:92:3c:d9:27:81:b4:10:ac:e7:cd:6e:ef:e4:a0:8e:4a:
4a:ec:a1:77:51:d8:be:f4:dd:6b:d6:15:f2:0b:23:b7:76:cd:
8a:29:78:19:af:95:ab:73:4e:72:83:25:8a:b7:db:b1:67:3d:
cc:e7:75:87:f6:e8:31:af:29:89:ff:20:2a:e1:b2:2f:b0:f3:
f3:d4:b9:36:87:1d:46:35:30:90:d2:09:b5:00:6f:cf:11:92:
90:3c:67:6d:6d:ad:79:ed:b4:45:f1:36:f4:87:9b:34:df:33:
0a:f7:6b:6d:e3:b1:6d:d9:94:63:44:e4:e4:2f:a7:2b:d3:49:
24:92:a4:f5:98:b9:f7:c1:82:c8:a2:52:f5:ce:34:50:b2:a8:
a1:df:1d:80:26:4b:a4:62:95:5d:a0:5c:99:9d:99:44:50:8e:
76:0e:f4:ef:1f:b5:56:60:85:86:85:97:9e:a0:6f:45:1d:70:
3f:ad:c0:b0:f6:9f:c7:72:9e:0f:ae:30:06:a4:52:ab:38:ab:
b7:a6:2d:b3:ce:36:3d:38:75:a1:4d:0d:86:39:83:42:d0:b7:
f1:01:ba:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nccQYFjIQFavXgP3wacbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk
MThiNWMwHhcNMjYwMzI2MDAwMTAwWhcNMjYwMzI3MDAwMTAwWjAzMTEwLwYDVQQD
Eyg3MmYyNTliMDY1ZjhmZDJmMjk3MzYwYzc0ZDRjZGU5NGRjYzQ2NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDedN/5NctEirDgVps+Znjez3ze8
/2zuZcsN8v2xGIz6Rohv8AdzqRitoOgvqwfOHOD5DMEjAl4ZaatUG58ac+b+9au1
EQodn5Ihc/HgA1nXZH1s9PhSeINcON/P3YqMpEaYdRwHyQs9hcQOL1UMSKrvQKlo
tk1kc7Oha7DhuE91s96jpElw7Co0euPQcycuFkjy6HZg0gPosROsL0Ov6JiQsk0Q
ct+t4m4U//h8pfuiyWnv7seOqzO3KDOJs3wH0BwtyIyMxJ4P4ZFQK5yIGN9UmD8g
DTK2YuJXJuC4I7Mlpplf6HRokl55G3pbn+8l7FLOwIO1JXYTpMfsMoDcGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLyWbBl+P0vKXNgx01M3pTcxGY3MB8GA1UdIwQY
MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt
OWI3OTk3NDgxZjcyLzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy
LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarpRyZ7g
J42FExb4Ar2IaQJPZcdx1eYUSPfi3S8sLSW174GhrSeSPNkngbQQrOfNbu/koI5K
Suyhd1HYvvTda9YV8gsjt3bNiil4Ga+Vq3NOcoMlirfbsWc9zOd1h/boMa8pif8g
KuGyL7Dz89S5NocdRjUwkNIJtQBvzxGSkDxnbW2tee20RfE29IebNN8zCvdrbeOx
bdmUY0Tk5C+nK9NJJJKk9Zi598GCyKJS9c40ULKood8dgCZLpGKVXaBcmZ2ZRFCO
dg707x+1VmCFhoWXnqBvRR1wP63AsPafx3KeD64wBqRSqzirt6Yts842PTh1oU0N
hjmDQtC38QG6kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:52 2026 by rpki-client