Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier: UYBH+8EWeE8/uzQPAhJpT/o4wq0guGqBEE+hgNxn2JU=
Subject key identifier: 40:AF:00:5B:A4:32:32:BC:3A:B8:29:15:A6:32:1C:18:50:C3:3F:A5
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 019F90907AE4D8C6FDE0BCF99948C8F481B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 20:00:15 +0000
Manifest this update: Thu 23 Jul 2026 20:00:15 +0000
Manifest next update: Fri 24 Jul 2026 20:00:15 +0000
Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: tXsjmURdusqMsO/Q9ECcvalJru11RKT4XQakKJzM1kw=)
2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:7a:e4:d8:c6:fd:e0:bc:f9:99:48:c8:f4:81:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jul 23 20:00:15 2026 GMT
Not After : Jul 24 20:00:15 2026 GMT
Subject: CN=40af005ba43232bc3ab82915a6321c1850c33fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:68:50:70:51:0d:b1:3d:13:e5:55:33:ca:
e1:7a:10:f8:6b:50:3b:85:94:ec:dc:e8:20:9b:3d:
14:36:32:c8:44:68:b1:1d:82:31:62:de:48:3c:97:
a0:40:56:15:dd:c2:8a:cd:9b:75:9d:7b:06:08:5c:
6f:ab:91:91:2a:3b:a8:6e:54:14:83:67:81:a1:8c:
92:0a:5d:d2:8d:c4:98:99:93:66:28:fb:c8:bf:34:
ec:6e:78:e0:bd:e7:31:2b:fe:53:c0:ed:7c:b6:16:
97:68:0e:9f:11:b0:25:bc:e0:53:8e:ed:c4:6c:5c:
c4:f2:d7:f2:18:b3:ab:ec:88:2d:1e:04:0e:a1:13:
39:bf:d4:f3:d3:98:5b:b4:b3:3d:e9:35:39:b5:a7:
e2:d3:98:77:36:d7:42:e5:f6:ff:43:13:5b:b6:d3:
47:f0:46:0e:0c:44:59:92:c5:1c:c9:73:98:21:aa:
b4:45:5c:c3:02:a6:fb:a1:e7:6e:28:67:33:7a:67:
21:68:a2:5b:49:d5:89:2d:2d:f1:33:06:90:64:20:
2e:68:1c:ff:22:c8:5d:2c:2c:53:53:64:2b:52:4c:
bf:27:eb:62:98:db:90:7a:5a:a7:11:3c:3e:c6:f5:
a8:99:d3:38:7c:14:91:68:fe:aa:86:c0:af:0d:62:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:00:5B:A4:32:32:BC:3A:B8:29:15:A6:32:1C:18:50:C3:3F:A5
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:f8:b2:23:eb:0b:59:90:b8:85:80:61:d6:11:3d:43:ca:
88:b7:fd:c3:b9:fb:b9:60:43:62:94:df:98:d8:de:e2:34:af:
62:fb:2b:da:2b:9c:1f:cb:75:58:73:a7:13:32:df:fd:06:68:
9e:60:e0:a2:3a:2b:06:ba:ef:ae:d7:6e:56:13:23:e6:fb:f6:
f2:de:ca:1f:1a:ef:bf:7b:9e:d0:11:80:33:d2:6a:42:8c:42:
06:7b:65:e3:7d:98:68:50:1d:c1:9f:a1:65:04:6c:36:12:23:
6b:25:ce:97:60:5a:7c:da:79:a3:a6:85:99:4f:77:a3:a4:fc:
a8:44:10:47:00:ab:77:2e:18:b2:ff:89:42:2b:8c:ce:56:4a:
a2:8e:9a:ef:a9:ca:f4:51:c0:82:97:42:f0:fe:df:f1:ca:e1:
ba:e0:cd:31:97:64:02:70:26:d3:1f:2a:91:93:1f:89:25:3c:
5d:9e:36:f1:2e:c4:cd:6d:fd:16:53:c7:71:3b:92:f4:4e:d0:
95:93:2e:24:cb:ac:ab:10:18:b8:46:86:06:64:f6:79:51:b0:
90:a7:5d:cd:04:ec:7e:15:2b:03:85:28:5a:1d:e4:c4:65:d9:
49:b4:1a:47:70:d0:8b:d2:89:73:fa:cf:82:8e:6d:c0:ad:18:
a7:1f:a6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:26 2026 by rpki-client