Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: YqafeBPCeCxdya3PWok5hR6syMhg0IxmBzwornSb3LE=
Subject key identifier: 89:03:6A:7B:1A:57:70:84:1C:1A:0E:6C:DC:C2:7C:D4:72:AB:F6:68
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019CACEBFA7C78095B709311C51A508E3908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1855
Signing time: Mon 02 Mar 2026 05:01:12 +0000
Manifest this update: Mon 02 Mar 2026 05:01:12 +0000
Manifest next update: Tue 03 Mar 2026 05:01:12 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: xWsvhvhmeiPky4Iup0NZJ31jrelRdOhc1lPR2U+yzJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:fa:7c:78:09:5b:70:93:11:c5:1a:50:8e:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Mar 2 05:01:12 2026 GMT
Not After : Mar 3 05:01:12 2026 GMT
Subject: CN=89036a7b1a5770841c1a0e6cdcc27cd472abf668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:ea:a1:0a:2b:ae:42:70:9a:8a:9d:00:b4:
73:7a:c1:6a:00:ea:1e:c5:80:5d:2b:84:ea:3d:9f:
3f:73:c3:c2:44:49:6a:e5:db:d3:ef:86:52:db:ab:
b6:cc:6a:9c:75:a2:cd:03:df:e6:5c:aa:90:ed:c5:
45:83:fc:09:44:24:e3:c7:a8:04:83:fc:d5:3c:1c:
90:7a:f3:a5:c9:f8:6c:30:d5:f1:82:d0:2f:5f:06:
b8:50:a0:5c:bc:dc:c3:0e:eb:48:15:c5:fd:de:f5:
6b:2d:4b:47:36:bb:4a:c2:27:8c:f4:05:26:ac:6f:
41:7b:ab:47:e3:9c:45:89:5c:9f:9e:01:a2:e3:c5:
ad:7e:86:08:b7:07:3f:e2:7c:fa:ab:ba:4a:2f:35:
94:06:a3:17:e8:db:5f:f3:b7:82:4f:8d:dd:69:51:
3e:6e:45:24:69:a3:9d:1d:a5:6d:07:eb:d5:cf:3b:
a1:1a:8e:d9:e4:00:e0:35:08:6b:39:78:5a:46:d1:
85:b5:7d:49:0e:63:f4:3a:db:73:ba:63:4f:fd:f0:
4d:a8:5d:90:6a:fa:b4:e8:ef:3e:9b:17:3f:44:0b:
cb:3d:0c:51:bd:92:07:15:f1:92:a4:8a:31:41:50:
7e:10:ab:ee:8b:df:07:3f:cc:fc:7f:86:05:52:af:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:6A:7B:1A:57:70:84:1C:1A:0E:6C:DC:C2:7C:D4:72:AB:F6:68
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6c:99:51:fb:42:18:c9:54:6a:8c:06:9a:ad:16:cd:51:a1:
86:af:34:36:aa:b2:18:43:dd:e1:ee:90:33:60:28:99:ba:a0:
c5:cf:c2:61:42:7e:21:83:5e:bc:0a:16:d4:b9:83:4c:19:93:
17:6f:3d:06:7e:79:cb:49:fa:fa:e2:b4:e5:09:2f:be:00:9a:
26:6c:0f:d2:49:43:97:e8:28:c0:13:7e:96:be:9a:ad:d7:d6:
8a:28:05:4b:7d:7f:91:3b:e5:39:25:85:16:39:ed:d2:d5:73:
dc:62:63:9d:3f:f2:62:75:a2:31:49:5b:86:20:61:8d:e1:77:
15:a4:64:dc:4d:21:a6:7c:b5:84:23:6e:8a:f4:8c:f7:71:5c:
30:bb:36:4a:59:91:8c:a2:2d:48:8d:b7:9b:b6:7a:a2:d3:9c:
ec:8e:f9:2e:e8:45:51:59:3b:2c:74:89:05:e5:ae:46:21:6c:
d4:58:57:1b:ad:dd:77:37:44:8f:63:cc:73:7b:06:c4:08:08:
7e:6e:1c:be:19:d2:0c:c1:f8:ae:85:79:07:49:0f:ca:f5:ac:
9b:19:e6:80:bc:7f:9a:89:b3:78:d6:48:a3:92:bc:c9:2f:29:
e5:13:53:9c:a1:90:49:7d:04:de:46:85:78:00:b0:72:8f:3e:
41:a9:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:50 2026 by rpki-client