Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: zo/FyhKswa2ne38v8PtV+9zndyYSEato6sQ7aGhjOrc=
Subject key identifier: E6:26:26:C3:1D:77:28:A1:4F:AA:89:5C:89:CA:CC:E9:75:CC:70:15
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019CE8C9645BC31E54AE3839C52E47AA8469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1874
Signing time: Fri 13 Mar 2026 20:00:38 +0000
Manifest this update: Fri 13 Mar 2026 20:00:38 +0000
Manifest next update: Sat 14 Mar 2026 20:00:38 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: omGIbr+8+sA8UtoycZssRoArAqVJapsyuN/hH6NqhqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:c9:64:5b:c3:1e:54:ae:38:39:c5:2e:47:aa:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Mar 13 20:00:38 2026 GMT
Not After : Mar 14 20:00:38 2026 GMT
Subject: CN=e62626c31d7728a14faa895c89cacce975cc7015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:6c:26:2b:79:88:ac:c5:aa:56:79:d4:9c:
d0:60:37:da:c9:84:0b:da:7b:d6:83:e6:f6:c7:df:
a4:df:2d:43:22:16:4e:49:ed:b1:26:a4:87:0d:6b:
68:ea:45:a3:eb:9a:b2:66:36:f2:83:29:f4:1f:0e:
6b:1e:b4:d4:40:a0:a5:ed:6d:34:d6:f2:cb:0c:62:
06:53:3f:34:a7:d4:ca:72:bb:7a:97:a4:a6:d0:c7:
9f:3e:e2:e5:26:9a:13:0c:05:1c:c1:59:ae:f6:10:
e2:c9:e5:48:ed:69:ce:92:14:7c:e5:29:e8:17:a3:
25:8b:f1:79:03:30:c0:82:b5:17:ae:54:08:c9:ef:
61:a1:1a:f3:e8:cd:a5:49:33:c9:ee:59:ce:e1:f7:
6e:b1:6f:93:cc:19:32:8c:cf:a3:b9:62:34:53:e7:
ef:bf:80:0f:b5:48:90:97:9a:7e:5a:cb:ef:70:6c:
95:46:33:fb:27:54:59:72:6d:05:7d:85:b8:6f:96:
e3:6d:a9:2b:c4:23:1b:64:41:0a:2c:63:7e:9d:5d:
6b:09:c5:5d:36:ca:ac:80:17:4c:be:99:75:6e:59:
cc:17:34:2f:57:58:a6:e5:b1:6e:9b:46:28:f9:4d:
12:32:ba:26:7d:80:a9:7a:b7:a1:11:c9:c7:cd:3f:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:26:C3:1D:77:28:A1:4F:AA:89:5C:89:CA:CC:E9:75:CC:70:15
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:73:85:5a:83:b1:e5:66:48:78:e0:e3:25:4b:15:d8:55:91:
0a:ea:47:df:b9:80:b3:b0:5d:ba:6f:a9:ed:c6:ad:dc:53:30:
cb:ea:ba:91:79:ce:9f:43:e5:79:80:e4:79:c9:20:a1:99:f0:
09:86:8a:d9:f2:43:f6:23:a4:09:e4:9e:06:59:aa:f2:08:b2:
cf:f4:b5:be:52:31:cd:5b:33:94:b0:fc:46:31:ce:a3:05:36:
57:db:f8:21:44:aa:0e:56:2f:52:fb:70:c5:79:49:bc:19:bc:
42:1e:f5:a0:34:cb:ef:03:73:1d:8b:a7:62:fe:8f:dd:fb:07:
3e:a7:3a:98:6a:56:b8:32:6b:6f:62:a9:38:6d:9d:67:4d:7f:
7f:6b:89:1a:15:04:d9:84:30:4f:36:e3:65:11:9f:cb:b7:d3:
0b:d8:1e:2b:c8:d8:fb:fc:f3:c7:98:63:a1:0d:99:ca:a2:02:
d4:f1:5f:cf:7d:f9:64:f4:11:ca:76:48:a7:82:8e:06:a0:17:
3a:b0:0d:6d:32:5d:9a:c4:1c:7f:61:95:cb:0b:e7:c5:b9:9f:
1d:e6:e2:0c:a2:33:26:27:59:64:23:fb:b1:07:2c:5d:c3:13:
f0:ca:18:3c:b1:e3:c5:f4:fa:a6:9f:9f:0e:34:28:a7:b9:8c:
de:b0:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:51:53 2026 by rpki-client