Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: zDvgHDE4hPx11rOvJujfROXYjRq7084OVfdz1zKRjLE=
Subject key identifier: C3:2E:3C:15:FE:21:14:2F:6B:58:10:B5:0E:65:2C:31:CA:38:DA:44
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019FAB9ABC11EBF6EF291B8D1152A0C20E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 19E2
Signing time: Wed 29 Jul 2026 02:01:12 +0000
Manifest this update: Wed 29 Jul 2026 02:01:12 +0000
Manifest next update: Thu 30 Jul 2026 02:01:12 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: oIjb198POVvbLO+7JKPgLLAZuGb2MmPdiSQxbcTtDxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:bc:11:eb:f6:ef:29:1b:8d:11:52:a0:c2:0e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jul 29 02:01:12 2026 GMT
Not After : Jul 30 02:01:12 2026 GMT
Subject: CN=c32e3c15fe21142f6b5810b50e652c31ca38da44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:f4:02:3d:94:c7:cd:96:f4:5d:c4:22:78:
7c:71:57:27:8d:bc:02:b5:10:51:8b:06:d6:74:e8:
2c:d0:c9:5e:11:60:06:04:5e:4a:22:61:74:75:65:
08:26:2c:ef:07:bf:d9:9f:4d:6b:22:f4:2c:99:b9:
35:1b:f2:92:fe:b9:2b:2b:59:49:ee:aa:a5:f5:41:
8d:16:ef:42:21:3a:32:03:95:ab:98:c5:8a:e2:d0:
99:f2:20:bf:cb:fa:9d:7c:63:60:f4:a9:94:6f:42:
d7:6a:5f:ee:83:f9:12:3d:42:b8:84:00:ce:1f:16:
94:cc:57:e2:b9:98:ae:e7:29:a6:1a:79:ec:64:4d:
13:47:e8:07:e7:8d:40:a5:6f:37:b1:8f:79:47:0c:
74:26:82:73:b7:19:0c:8c:e5:96:03:66:66:9d:93:
41:5a:1f:f4:25:67:5a:3f:6f:8c:f7:df:3e:b6:b3:
81:0a:02:00:84:ac:76:67:e0:b7:65:e9:ad:30:a8:
63:b9:a5:4b:2d:0e:d7:5f:4e:c9:1b:cc:b6:13:17:
94:67:fe:40:7b:6a:21:35:25:c3:b3:af:31:cf:9a:
e9:74:7b:78:16:26:a1:46:d1:b7:15:a1:1a:82:0d:
39:26:a9:f3:ff:53:67:2e:34:60:17:0f:91:7a:34:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:3C:15:FE:21:14:2F:6B:58:10:B5:0E:65:2C:31:CA:38:DA:44
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:38:dd:da:9b:02:98:71:65:d4:b5:fb:5a:e5:2a:ea:2b:
84:ee:ec:82:dc:c6:8b:72:31:34:72:3b:79:39:8d:d8:cc:c5:
02:5f:04:89:de:bf:f0:59:21:5b:c0:95:f4:7a:30:57:69:4b:
89:9f:71:48:0e:aa:7b:71:0e:08:66:83:34:17:dd:57:fc:ce:
f2:e3:6d:83:07:8c:33:71:47:a1:de:fd:7b:62:05:df:de:52:
b7:21:ee:63:5d:74:c8:c7:94:9e:9c:5d:7c:cf:30:24:2e:42:
9c:77:39:30:52:90:57:62:b4:83:91:81:c1:f9:9f:b2:de:c4:
38:a7:41:f5:98:68:c4:0f:43:13:b9:5d:7a:04:c1:84:cb:03:
0e:df:ce:57:54:0e:3a:ea:8f:56:9d:66:85:6b:60:88:03:94:
a8:33:bd:f5:16:c1:ed:82:15:8f:c9:88:0d:b1:fd:09:0f:5a:
f8:78:04:cd:0e:bf:d9:c1:b9:ca:e8:01:f3:bb:90:ed:c2:ce:
d9:16:a5:95:3d:ab:a0:c6:07:42:d1:c2:7f:4e:a2:66:77:26:
6a:06:c2:fc:64:87:5c:e3:1e:9b:59:21:88:f5:7d:b8:27:ce:
92:90:d9:47:79:0b:65:9f:3f:b2:a0:c4:9a:e4:f0:d3:c5:23:
98:26:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:13 2026 by rpki-client