Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: H0FckZfrkyUQyMuMzXWZ6R89JfR7QlwQaQHr4RcZX/M=
Subject key identifier: 5E:CC:BB:26:D1:0D:9F:30:FD:A1:DF:EC:F5:E9:C6:BE:F6:39:3C:E9
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019FAD88A135753379356BF9FC8CF6850E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 19E3
Signing time: Wed 29 Jul 2026 11:00:40 +0000
Manifest this update: Wed 29 Jul 2026 11:00:40 +0000
Manifest next update: Thu 30 Jul 2026 11:00:40 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: KdoUFpO9miWKfQ02X11TPsbtTvxq4XsnA7KLzauEz5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:a1:35:75:33:79:35:6b:f9:fc:8c:f6:85:0e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jul 29 11:00:40 2026 GMT
Not After : Jul 30 11:00:40 2026 GMT
Subject: CN=5eccbb26d10d9f30fda1dfecf5e9c6bef6393ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:b7:db:e6:f7:89:54:f3:f8:3e:0e:bf:ed:
0b:56:e3:56:84:16:66:11:8b:1a:d0:fa:50:ae:58:
a9:c9:4a:ff:a8:ba:db:04:9c:3d:cd:3a:fa:cf:68:
fc:63:0f:ca:6c:5b:a6:07:84:43:7a:95:eb:3a:a4:
88:1b:9e:3b:0a:97:b2:7d:d5:04:b5:60:10:05:6e:
74:bf:03:b6:c4:be:bc:a9:08:f5:b5:e6:0b:a2:b6:
95:10:2c:21:8a:0c:df:84:14:80:3e:5a:3f:52:78:
07:d6:aa:3b:f3:b4:32:da:d4:fa:dd:85:a3:ca:e8:
28:34:0b:91:bc:3f:6d:b8:1a:28:17:8c:52:61:ac:
34:a8:72:0f:a5:8a:37:81:9f:cb:42:13:cc:30:e1:
c4:fc:83:99:fd:93:4d:83:4b:bb:a0:45:9c:f2:49:
4e:f2:53:6b:1f:f1:f0:15:76:9f:ba:36:49:9e:d8:
31:0e:2c:07:a7:e5:cb:60:6b:81:24:0f:3f:5c:ae:
2c:aa:ec:d4:89:a7:f1:03:2d:38:90:ce:4d:c7:d2:
03:01:4f:d0:4a:fc:4d:2a:39:6d:0e:3d:c8:e7:96:
72:28:7d:f2:72:a0:0c:13:a9:f8:fb:33:4a:cc:53:
fb:e3:a6:48:d9:23:6d:29:f8:21:f3:4f:c1:46:39:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:BB:26:D1:0D:9F:30:FD:A1:DF:EC:F5:E9:C6:BE:F6:39:3C:E9
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1c:96:e5:4e:09:70:90:25:6f:33:e2:d5:09:00:8e:a2:5b:
25:58:e2:54:3c:39:a3:2c:34:0a:c3:f5:78:b8:65:37:f0:be:
1a:21:61:bd:8b:11:74:12:60:1a:75:66:b2:dc:e7:92:13:77:
ee:ac:c9:6c:19:ac:18:bb:d8:27:d1:68:e3:3b:7e:3d:da:46:
4d:00:24:7c:dd:4c:be:5e:d8:e8:af:6a:67:5d:e9:df:66:f3:
aa:36:bb:04:5c:1e:f8:a6:b4:e0:9d:b0:dd:fa:fe:48:2a:e5:
80:80:e7:18:8e:10:e5:be:21:a3:96:f6:9b:2c:3b:84:74:08:
fb:6a:82:07:35:27:b1:80:e0:54:49:eb:b1:fe:09:97:1b:b2:
22:9e:a7:7a:c4:60:f0:1a:db:65:73:12:32:80:23:6f:e6:98:
50:d7:a6:b0:b1:f5:d2:e0:87:74:41:0a:ad:87:db:d6:ac:d0:
75:e2:d1:13:f4:ff:79:09:05:1d:0d:8e:3f:60:c3:61:36:a0:
fa:fe:2c:70:c5:f9:4f:a8:ff:a8:91:9b:a0:6e:14:8e:18:e9:
ee:71:0e:09:bc:ce:63:95:98:7e:fa:f0:64:3e:1f:0d:67:c8:
c1:29:ba:a6:ef:6d:2d:16:37:1c:86:e0:dd:c0:bf:1a:5c:5e:
65:03:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:59:03 2026 by rpki-client