Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c4bf87-19bb-42e2-8c6d-bd4f2d6d86f3/1/AS40rL0KVWN9qIICBu4zUNH4jYM.mft
File: AS40rL0KVWN9qIICBu4zUNH4jYM.mft (raw, json)
Hash identifier: NPJdNo5eGC9yQA9wFCNaxsF16Lqk8yHAQ8q9RLxWn0s=
Subject key identifier: 90:69:6E:79:67:70:A0:45:98:F2:A7:DA:F3:D5:3D:12:C0:3E:22:07
Authority key identifier: 01:2E:34:AC:BD:0A:55:63:7D:A8:82:02:06:EE:33:50:D1:F8:8D:83
Certificate issuer: /CN=012e34acbd0a55637da8820206ee3350d1f88d83
Certificate serial: 01A0CBC7898D15A064C1216785FC60AF4404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AS40rL0KVWN9qIICBu4zUNH4jYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4bf87-19bb-42e2-8c6d-bd4f2d6d86f3/1/AS40rL0KVWN9qIICBu4zUNH4jYM.mft
Manifest number: 0153
Signing time: Wed 23 Sep 2026 01:00:46 +0000
Manifest this update: Wed 23 Sep 2026 01:00:46 +0000
Manifest next update: Thu 24 Sep 2026 01:00:46 +0000
Files and hashes: 1: AS40rL0KVWN9qIICBu4zUNH4jYM.crl (hash: avMmOrBqzFOvSmqDKFsCgoe1+hMSN/ptZpPNieNJXLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4bf87-19bb-42e2-8c6d-bd4f2d6d86f3/1/AS40rL0KVWN9qIICBu4zUNH4jYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4bf87-19bb-42e2-8c6d-bd4f2d6d86f3/1/AS40rL0KVWN9qIICBu4zUNH4jYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AS40rL0KVWN9qIICBu4zUNH4jYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:89:8d:15:a0:64:c1:21:67:85:fc:60:af:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012e34acbd0a55637da8820206ee3350d1f88d83
Validity
Not Before: Sep 23 01:00:46 2026 GMT
Not After : Sep 24 01:00:46 2026 GMT
Subject: CN=90696e796770a04598f2a7daf3d53d12c03e2207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:f7:67:09:d7:73:1c:20:ad:67:9e:3d:3c:
7a:ab:7a:f7:f9:bb:c1:e2:41:d0:61:2f:10:75:e8:
9f:c1:d9:c9:51:54:e7:41:66:58:26:0b:12:de:2c:
c0:69:52:19:e9:d0:78:77:d9:1a:26:09:8d:8b:a0:
fe:41:60:89:26:bc:5a:b6:a6:79:5e:c3:1f:37:b3:
df:07:21:12:d5:f3:fe:57:c1:5d:ea:b7:c1:77:b7:
1b:87:ce:74:08:d8:4c:fb:e9:ea:b1:e6:31:e7:e1:
44:2e:d5:6e:73:ea:68:16:b9:c2:55:e1:c2:c8:27:
82:87:b5:6f:d0:7b:11:d2:87:4d:7e:62:51:0f:28:
63:d5:73:31:b4:6a:b9:db:4f:77:64:12:27:34:7b:
01:6e:9e:82:a0:8d:d7:8c:b2:4e:c9:da:86:4f:dc:
eb:69:fa:c5:24:34:b8:ea:18:da:98:df:80:64:0c:
1c:88:67:3f:b4:a9:74:bf:02:bd:e3:95:ae:c3:b6:
ae:40:8a:42:5b:85:a8:2e:83:ec:a1:c7:b3:4c:5f:
3d:31:94:40:97:4d:73:09:d5:8b:d8:73:aa:cb:6d:
5f:de:e7:27:e7:22:39:3c:70:af:28:d8:23:49:b1:
42:77:43:b4:e2:99:e3:06:39:a8:70:b9:cd:b0:fe:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:6E:79:67:70:A0:45:98:F2:A7:DA:F3:D5:3D:12:C0:3E:22:07
X509v3 Authority Key Identifier:
keyid:01:2E:34:AC:BD:0A:55:63:7D:A8:82:02:06:EE:33:50:D1:F8:8D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AS40rL0KVWN9qIICBu4zUNH4jYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4bf87-19bb-42e2-8c6d-bd4f2d6d86f3/1/AS40rL0KVWN9qIICBu4zUNH4jYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4bf87-19bb-42e2-8c6d-bd4f2d6d86f3/1/AS40rL0KVWN9qIICBu4zUNH4jYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ce:9e:bb:3a:e7:79:0d:1e:5c:52:3a:6c:35:68:a9:59:74:
a4:b0:b0:e9:b3:b5:b2:c8:6a:37:a9:e2:99:93:de:73:fb:b0:
93:b8:0b:4d:65:9e:c5:3b:55:42:ef:50:f4:06:b5:d6:3f:cd:
de:2d:59:51:ba:6c:d5:03:9c:8a:f1:fd:f5:09:13:9a:88:6f:
90:b0:70:19:43:ec:d9:ac:5a:ea:04:c9:3e:4f:0f:2f:34:17:
4c:bf:71:c1:33:77:b9:da:30:57:0a:8f:5e:94:88:df:69:4a:
52:cb:30:75:04:36:23:4d:1b:9f:47:51:7a:dd:33:bf:22:bb:
89:21:2f:bd:df:ec:e6:e4:24:bd:c9:22:d2:c1:69:1e:6c:85:
8b:6f:85:1c:e4:3d:78:c6:f6:26:cf:f0:ae:fb:23:9f:c2:a0:
7f:ad:00:ab:d1:ee:f7:14:65:30:31:f1:36:66:a8:24:d3:a2:
66:5a:f8:fc:6f:be:05:05:87:3f:c5:e7:0d:3f:81:2d:45:d0:
4f:e2:17:e5:cf:44:36:40:6a:85:c8:52:56:cf:1a:01:ad:22:
b2:53:19:6a:4a:5d:f0:fc:79:97:7d:e1:66:2a:45:bb:66:51:
7c:d2:d7:ce:a1:74:b8:ed:4a:d5:25:00:fd:ec:3a:62:17:3a:
5b:f3:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:56:26 2026 by rpki-client