Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
File: 40HGEPYYEikNrK1gvG0QHWPAjmU.mft (raw, json)
Hash identifier: 0CXPadcJYYq4pKcE4hbCPbhjBpOm5pCK25+8pgqb2Uc=
Subject key identifier: 86:F2:7D:2B:FA:9B:20:6D:E8:F6:56:EA:AA:FB:8C:20:9B:08:AB:88
Authority key identifier: E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
Certificate issuer: /CN=e341c610f61812290dacad60bc6d101d63c08e65
Certificate serial: 01A103C9975D1968FFDB18FF6960E7B1E30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
Manifest number: 0200
Signing time: Sat 03 Oct 2026 22:01:45 +0000
Manifest this update: Sat 03 Oct 2026 22:01:45 +0000
Manifest next update: Sun 04 Oct 2026 22:01:45 +0000
Files and hashes: 1: 40HGEPYYEikNrK1gvG0QHWPAjmU.crl (hash: Fxx+1Ubv8e1KtY1LezLkBDEoe3kQ9Hsc5bv5fLkJ78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:97:5d:19:68:ff:db:18:ff:69:60:e7:b1:e3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e341c610f61812290dacad60bc6d101d63c08e65
Validity
Not Before: Oct 3 22:01:45 2026 GMT
Not After : Oct 4 22:01:45 2026 GMT
Subject: CN=86f27d2bfa9b206de8f656eaaafb8c209b08ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:5b:94:54:b6:f8:2c:56:6c:c2:ce:55:50:
30:0b:a5:39:01:44:5a:0a:8f:a2:61:79:4d:bd:3f:
33:82:e9:5f:c0:9d:88:a9:f0:cf:13:ba:aa:7c:1e:
df:ef:23:12:d1:5f:d0:f3:54:16:e3:6f:0d:d8:f6:
21:87:06:95:c3:31:3c:d6:87:a8:45:6c:fb:5f:d8:
93:3d:c9:52:0c:72:1d:f8:63:9f:ee:b0:71:74:0d:
c7:79:51:2f:d9:03:9f:4d:2c:93:ff:a7:b3:18:e6:
6d:45:48:45:bc:a2:dd:64:6a:00:29:16:ae:3b:37:
f6:2d:3d:ab:0e:1f:5a:f5:ff:28:f3:8a:a3:f8:74:
09:e8:d1:80:82:16:9a:dc:ef:0d:76:e6:db:ab:48:
c8:a4:d6:04:ce:07:53:5f:a5:da:a9:e3:07:a4:78:
12:c8:0a:35:8f:6c:ff:90:15:9a:4b:0b:73:33:4d:
f0:75:3d:4c:a5:ac:c7:a3:70:d8:35:9f:47:e6:a8:
bd:ee:55:15:f9:b8:58:31:e8:42:e3:1c:b2:2a:6b:
16:2a:29:04:ab:ca:93:10:e3:ff:75:78:f7:d0:4d:
46:d6:d5:1b:41:c9:b1:53:bd:0f:bd:ec:f7:84:b9:
62:73:1f:05:ab:dc:69:86:18:b3:56:30:48:02:99:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:7D:2B:FA:9B:20:6D:E8:F6:56:EA:AA:FB:8C:20:9B:08:AB:88
X509v3 Authority Key Identifier:
keyid:E3:41:C6:10:F6:18:12:29:0D:AC:AD:60:BC:6D:10:1D:63:C0:8E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40HGEPYYEikNrK1gvG0QHWPAjmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d63ee0-57a4-4598-90ed-feb73cd3d185/1/40HGEPYYEikNrK1gvG0QHWPAjmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:56:a1:56:67:1f:6f:1a:0b:40:1f:ed:8f:ba:6d:e0:f1:
00:45:72:be:ec:0d:fd:40:d6:35:3a:c9:30:a3:46:ed:4f:7a:
3c:ff:e2:94:9b:39:d5:af:f4:4b:47:76:94:1b:17:3a:f7:3b:
0f:f1:6e:b1:21:7c:5a:46:97:d7:59:f0:02:1d:72:4c:d0:54:
89:e4:c1:61:db:ef:21:39:0c:bf:b9:5c:b6:5d:68:2a:9d:81:
94:18:f6:3c:4b:26:a5:07:5e:9e:f8:aa:4c:6f:14:1e:60:39:
b9:02:a8:76:7b:78:8d:05:2d:8b:01:e3:88:27:a5:a8:12:a7:
1d:9b:7a:79:c6:73:ce:a7:17:95:0c:5f:ca:24:d6:9a:e9:8d:
ba:79:60:f9:80:9a:f8:3b:35:17:45:51:5f:38:d9:d3:64:0e:
36:d5:f9:a7:70:af:65:9b:07:19:19:2c:66:0c:c3:4c:f0:a5:
f6:71:0a:04:96:11:b0:71:61:8d:96:b4:49:f5:a8:e4:8d:ed:
a4:67:49:3b:39:22:6e:5d:72:f9:00:53:dd:15:4a:af:00:f3:
77:75:fc:1f:da:b0:dc:13:ac:66:d7:1b:e0:96:c8:3a:6f:0e:
3b:54:90:cb:fb:d7:02:70:8b:18:78:72:48:c7:1b:51:be:1e:
83:ca:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:22:55 2026 by rpki-client