Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: LqKtwOZGS88Jubos5LN8JNQbfOfwZm3B5QZnZ9Qus3M=
Subject key identifier: 12:98:DC:12:8A:99:6E:4B:54:C2:53:96:58:1E:27:3A:F4:2F:B0:D6
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 019D26966BB0EEC4845827FD4830F69F3BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:25 +0000
Manifest this update: Wed 25 Mar 2026 20:01:25 +0000
Manifest next update: Thu 26 Mar 2026 20:01:25 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: WTLQTbUr8TujYL1ARL9zQw9kinOq97xAUJHyBJ/UCh0=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6b:b0:ee:c4:84:58:27:fd:48:30:f6:9f:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Mar 25 20:01:25 2026 GMT
Not After : Mar 26 20:01:25 2026 GMT
Subject: CN=1298dc128a996e4b54c25396581e273af42fb0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:57:77:a7:f8:96:73:8e:2d:94:e0:10:5d:
07:d2:82:6e:31:12:46:3a:a9:28:42:19:ed:8a:30:
6b:e2:00:53:78:32:23:c2:ae:bc:35:60:7c:1e:2b:
b0:5a:c1:a9:b0:40:fb:d1:8f:4e:85:cb:27:23:3c:
8c:3a:f3:05:81:70:57:34:7c:be:65:8f:5b:5a:41:
88:aa:72:a9:b6:d8:9a:5c:2e:04:a7:6b:ef:89:e2:
ea:6a:a1:99:97:24:da:66:cd:bf:4d:2e:09:29:73:
fa:3e:29:3f:03:77:1a:fa:6f:35:da:55:ba:dd:ce:
06:99:dd:0f:1b:21:00:5a:5b:11:b0:13:c9:43:5b:
d7:67:5c:d4:ca:5d:c4:ac:a0:d3:e1:0f:be:01:0f:
e0:64:9a:7c:aa:1b:b9:76:65:b6:5a:f8:f8:5b:5d:
5d:0c:3c:8e:95:40:47:62:bb:5e:89:73:57:00:0c:
d1:cc:32:e8:10:bd:97:c7:5b:1b:4c:e4:62:e2:30:
5c:ee:00:1f:84:59:dd:dc:5f:80:c3:19:59:a6:9f:
3f:82:67:a7:26:18:c0:12:95:85:75:7c:61:6c:fe:
9d:6d:81:2c:b6:72:db:68:a9:8f:98:c6:b0:4b:7c:
66:73:ba:c9:5c:4e:77:25:4c:1c:24:9f:56:29:6d:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:98:DC:12:8A:99:6E:4B:54:C2:53:96:58:1E:27:3A:F4:2F:B0:D6
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ff:da:d6:8e:55:a7:77:b7:06:c6:1e:f3:4c:8a:dc:80:99:
71:04:50:8a:c3:c4:c3:17:bf:5f:6c:6a:48:88:d0:bb:15:da:
51:e0:17:01:ce:25:78:81:7a:94:1e:f8:da:90:ad:65:2f:40:
78:5d:13:64:92:35:49:55:1e:29:2d:5a:89:3e:79:64:57:50:
98:3b:24:c4:71:b4:19:5a:31:68:c7:8c:21:ec:f2:70:f9:ee:
4f:16:71:a9:f1:52:6e:36:37:ef:6f:e3:23:fe:aa:af:ed:1b:
12:62:48:c4:aa:ab:98:64:89:af:a6:4f:c0:23:b8:1b:51:f5:
06:fc:83:11:8a:25:aa:fe:ae:e2:12:0d:bb:c6:60:3b:3a:e1:
e6:12:ed:87:be:1b:8a:be:8d:43:1e:94:29:fa:22:47:53:eb:
88:44:14:0f:26:a4:c9:c3:9a:4b:b3:cc:43:20:45:0d:a1:ee:
d5:a2:eb:7e:fd:50:77:5d:d5:ac:11:2d:8d:ef:e8:c6:ad:31:
ab:6b:ef:a8:9e:6f:f5:58:56:1f:92:cb:fa:c1:28:2e:b1:0e:
a1:73:01:e7:82:31:98:80:80:20:a6:94:4f:d5:5d:b4:5e:2f:
05:56:24:4a:37:c9:3f:79:14:4e:60:3c:a8:18:5b:ee:90:d7:
8f:b8:35:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmuw7sSEWCf9SDD2nzvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh
OWJhODkwHhcNMjYwMzI1MjAwMTI1WhcNMjYwMzI2MjAwMTI1WjAzMTEwLwYDVQQD
EygxMjk4ZGMxMjhhOTk2ZTRiNTRjMjUzOTY1ODFlMjczYWY0MmZiMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoJXd6f4lnOOLZTgEF0H0oJuMRJG
OqkoQhntijBr4gBTeDIjwq68NWB8HiuwWsGpsED70Y9OhcsnIzyMOvMFgXBXNHy+
ZY9bWkGIqnKpttiaXC4Ep2vvieLqaqGZlyTaZs2/TS4JKXP6Pik/A3ca+m812lW6
3c4Gmd0PGyEAWlsRsBPJQ1vXZ1zUyl3ErKDT4Q++AQ/gZJp8qhu5dmW2Wvj4W11d
DDyOlUBHYrteiXNXAAzRzDLoEL2Xx1sbTORi4jBc7gAfhFnd3F+AwxlZpp8/gmen
JhjAEpWFdXxhbP6dbYEstnLbaKmPmMawS3xmc7rJXE53JUwcJJ9WKW0tTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKY3BKKmW5LVMJTllgeJzr0L7DWMB8GA1UdIwQY
MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt
NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0
LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk//a1o5V
p3e3BsYe80yK3ICZcQRQisPEwxe/X2xqSIjQuxXaUeAXAc4leIF6lB742pCtZS9A
eF0TZJI1SVUeKS1aiT55ZFdQmDskxHG0GVoxaMeMIezycPnuTxZxqfFSbjY372/j
I/6qr+0bEmJIxKqrmGSJr6ZPwCO4G1H1BvyDEYolqv6u4hINu8ZgOzrh5hLth74b
ir6NQx6UKfoiR1PriEQUDyakycOaS7PMQyBFDaHu1aLrfv1Qd13VrBEtje/oxq0x
q2vvqJ5v9VhWH5LL+sEoLrEOoXMB54IxmICAIKaUT9VdtF4vBVYkSjfJP3kUTmA8
qBhb7pDXj7g1AQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:54 2026 by rpki-client