Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: hEom4wwdzqlBGmBtmjfJx5bOvEmRWgL2StYwBV6Ypig=
Subject key identifier: 8F:2C:FD:68:17:10:EF:8D:B6:42:D5:6D:74:48:24:7F:FE:1E:BA:0C
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 01A17EF3E085A513CD5C52809886CD0F2BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1AD6
Signing time: Tue 27 Oct 2026 20:01:14 +0000
Manifest this update: Tue 27 Oct 2026 20:01:14 +0000
Manifest next update: Wed 28 Oct 2026 20:01:14 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: cYVP+Y3y16YQuDTsIODXIVFbasdgpX/qlaVLKkLPjGM=)
3: SXZDSUmyZKq6tD_19hMcohlN_gg.roa (hash: V6szuhAf/76RIYlrWQb7gbsXupUF54mJ8u6NpvUbtYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:e0:85:a5:13:cd:5c:52:80:98:86:cd:0f:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Oct 27 20:01:14 2026 GMT
Not After : Oct 28 20:01:14 2026 GMT
Subject: CN=8f2cfd681710ef8db642d56d7448247ffe1eba0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:8c:09:e0:fd:a1:31:a8:2f:2a:92:d4:79:
15:79:39:b3:88:44:33:3f:ed:91:33:3e:9a:b4:fe:
d5:80:91:e4:0b:2d:dc:76:36:44:16:fe:57:5d:6a:
60:de:c7:0b:b3:4f:5b:29:20:60:04:bf:78:b9:a6:
f8:f9:18:91:98:af:49:f1:9c:fd:c3:b4:07:e9:49:
67:4a:31:ad:c0:f6:67:09:7b:05:19:ee:36:11:55:
7b:db:e0:ae:5e:ad:d3:6b:0e:fc:28:d6:00:a0:93:
19:f6:8a:9f:84:dc:93:46:4b:75:ac:20:34:ff:28:
5d:06:1c:34:d2:f4:85:54:c2:0c:1d:80:ac:ec:0e:
40:bd:c2:60:d3:14:2d:d6:2a:7f:0c:4f:e5:02:58:
53:83:ed:b9:7c:f0:29:e2:37:38:50:60:f7:4f:89:
47:a6:2f:d9:bc:b1:b0:d2:c3:ef:0e:cb:59:86:b7:
21:c7:db:a9:08:2a:6d:f7:c3:4b:fd:66:64:19:1f:
9e:77:9b:69:f9:4a:70:df:96:ba:52:66:d7:b5:64:
df:c9:31:24:2f:fa:52:81:a5:a5:1f:a6:5d:fa:d6:
58:e5:18:a3:11:c3:ec:db:ee:82:53:cf:e2:78:b5:
4f:2f:f3:b7:aa:72:8e:8c:18:64:a0:23:f1:27:23:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:FD:68:17:10:EF:8D:B6:42:D5:6D:74:48:24:7F:FE:1E:BA:0C
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:d0:cc:67:1c:fa:3a:70:69:f1:de:62:1e:06:10:9d:a3:
57:e7:aa:87:df:7e:cf:66:d8:a5:18:6b:dc:c9:4b:f1:bc:bd:
d7:80:0c:ff:18:07:84:2b:3f:90:ee:3e:ac:55:9c:a6:13:8c:
40:60:9e:06:57:20:9d:0f:4c:cb:9d:95:d5:06:2d:a7:16:c3:
9a:23:53:d2:c9:1b:12:b2:7b:69:4c:a4:d6:ff:bc:1e:6e:e6:
b3:6d:a1:f1:70:cb:fd:1b:12:09:75:02:36:a7:15:7b:af:87:
98:02:7b:85:da:f4:64:47:44:a7:eb:45:ed:15:cd:10:b8:05:
32:94:37:02:a2:88:08:75:0e:fb:ff:92:5c:ac:8f:7f:40:68:
67:30:8c:97:3d:bc:59:b1:06:01:25:d7:90:b6:4f:9a:0b:c8:
8f:d2:64:5f:2c:63:09:d1:ed:72:9c:68:b1:cf:9d:88:7f:cb:
66:4a:46:46:e1:94:43:6f:03:77:48:7c:2d:82:a1:91:ec:7d:
7a:70:f4:97:5a:81:28:6e:7f:4d:f8:c7:ec:41:e6:87:42:c1:
c4:73:08:a6:3b:c7:4c:12:04:50:71:30:9a:58:45:f0:d2:df:
8f:0d:14:5a:a0:74:b6:6d:be:72:51:e0:5f:7f:f6:7a:8c:82:
5d:ec:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:32:47 2026 by rpki-client