Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: yFKJdizdD8OMr8/eBLkXGflaP6jcAbaIK20h/ixT00c=
Subject key identifier: F4:9E:3D:34:AA:AD:6F:4A:3A:C6:D2:86:4B:12:C5:F0:55:75:4E:89
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019FA1F291241881560CB5251608A6B124C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 19DD
Signing time: Mon 27 Jul 2026 05:00:56 +0000
Manifest this update: Mon 27 Jul 2026 05:00:56 +0000
Manifest next update: Tue 28 Jul 2026 05:00:56 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: 33FC06WuBSCbOXjApB7WeBToM0hb4ja3+eK/1dKV7Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:91:24:18:81:56:0c:b5:25:16:08:a6:b1:24:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jul 27 05:00:56 2026 GMT
Not After : Jul 28 05:00:56 2026 GMT
Subject: CN=f49e3d34aaad6f4a3ac6d2864b12c5f055754e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:05:5a:39:49:dc:2a:46:2f:cb:d3:21:09:
61:c5:f1:c2:a5:32:f7:90:79:e6:60:f8:fe:f1:7d:
fb:eb:73:28:3e:75:99:5d:a2:bd:b0:c8:55:29:a8:
23:1d:0f:ae:85:54:0e:8d:81:e6:1a:e9:90:ef:06:
c9:d5:4f:a6:fc:85:79:c0:54:e3:24:c2:99:73:87:
b8:bb:b7:6b:91:43:ec:51:fc:a3:71:71:18:e1:cf:
bd:14:d7:e7:20:bc:9b:13:16:6b:0d:9a:39:c3:c9:
a9:eb:dc:70:85:4e:39:02:27:4f:46:98:aa:cd:78:
83:c3:69:b4:24:93:10:1f:7c:64:43:bb:0e:25:dc:
8a:9b:9a:10:cf:fa:b6:dd:cc:e8:9c:8f:3b:a1:45:
81:dd:be:80:a6:5f:cb:75:60:99:db:68:e0:8f:0e:
e7:93:68:2a:3e:f8:26:1f:cf:a2:3f:92:37:5c:f4:
27:d0:29:0f:8f:29:72:8f:ca:42:dd:ba:07:0d:5a:
7c:d5:82:ae:ff:48:ca:64:7e:06:57:33:87:2d:ee:
62:c9:3c:0c:b4:02:35:ac:77:29:14:c1:19:b7:0e:
9d:dc:b7:64:60:4c:05:ba:a1:42:fe:6c:5a:ea:9a:
c6:3f:82:b7:e0:8c:42:2e:84:b7:e5:5c:22:86:8d:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:3D:34:AA:AD:6F:4A:3A:C6:D2:86:4B:12:C5:F0:55:75:4E:89
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6d:b7:05:3a:d4:a6:1e:5d:6d:e2:b9:31:0d:34:5c:fb:a8:
c6:14:c8:ff:b3:39:a6:0e:26:ce:45:d3:68:c3:9d:ed:57:49:
51:34:2b:ea:2d:e2:59:e5:be:4e:24:d7:86:00:a2:a0:9f:27:
97:a0:59:bb:4d:1a:7c:ea:08:26:9c:95:62:7f:9c:06:1e:23:
08:02:61:ff:9a:33:19:18:12:ef:46:cf:0d:76:28:2c:d9:94:
7a:59:f3:e6:e2:b3:05:66:a3:9c:09:20:9a:60:aa:d1:df:32:
e4:d9:54:93:fe:89:b8:b9:e0:09:77:1a:9d:28:74:bf:40:a5:
68:57:b1:1f:8c:15:e0:42:4a:66:12:13:76:2b:fb:44:25:f0:
18:2c:a6:b8:4e:69:bf:dd:13:95:79:00:2f:bf:d3:83:13:05:
59:de:b0:e2:e5:ea:e8:3b:17:6d:dc:6b:a0:09:79:15:8c:0c:
a9:c0:36:f9:63:68:7f:12:e9:83:f6:04:7e:1c:d2:f3:80:0a:
71:39:e9:ea:e3:2b:21:e7:eb:7b:fe:a4:91:4d:83:eb:32:df:
d9:a6:cb:5a:38:fc:28:b6:46:9a:bd:90:0f:77:64:bd:26:93:
37:66:3d:5d:29:70:9a:d7:7d:b4:8d:e7:bb:9f:3b:92:5a:41:
5d:95:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:48 2026 by rpki-client