Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: i1E+SMe8y+RpWGOfzi8R8WKNmXRhPOsMKcL+N6Lzzo4=
Subject key identifier: BA:58:A1:74:B7:50:D7:93:58:4D:FA:93:EA:D6:B0:82:EF:90:EF:36
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019D2884188E01E8899AAB6ECDB9A46FC8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 05:00:38 +0000
Manifest this update: Thu 26 Mar 2026 05:00:38 +0000
Manifest next update: Fri 27 Mar 2026 05:00:38 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: i2/QnH/CGjh4YwXiVZZY2ITAqJBObSIJTl/Nf5me1Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:18:8e:01:e8:89:9a:ab:6e:cd:b9:a4:6f:c8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Mar 26 05:00:38 2026 GMT
Not After : Mar 27 05:00:38 2026 GMT
Subject: CN=ba58a174b750d793584dfa93ead6b082ef90ef36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:bb:c5:9f:de:26:c0:cc:66:86:71:5a:ad:
79:14:f7:f2:d1:e5:6c:37:ce:70:b2:73:7f:1f:d5:
87:e1:37:cc:09:12:17:9f:f5:39:4c:68:7e:76:47:
09:3b:7a:8e:3f:2d:22:42:1e:d8:9d:13:96:c0:07:
f0:be:8b:83:f5:96:da:90:87:9e:9d:51:a9:22:f1:
5e:99:4b:25:94:01:bb:d5:ff:91:03:d8:d4:09:aa:
d5:a9:4f:2e:1a:68:b8:73:31:37:a6:09:bd:16:32:
bc:0d:e9:72:ca:52:8c:74:61:f7:4d:46:36:00:7b:
55:fb:35:b8:dc:77:fc:31:27:8d:a1:3b:2a:46:01:
3d:31:3b:c0:7c:1b:50:48:d5:f3:11:df:54:5b:65:
59:8d:ac:d1:d7:7f:d3:bb:c4:a6:d3:6e:8e:d3:6d:
04:29:ee:25:41:89:97:1b:60:66:ec:37:cb:5a:08:
e0:af:5e:a4:39:1d:d7:27:0a:bb:36:bb:58:33:37:
1e:d7:64:53:9d:e5:60:39:86:cd:d6:71:13:04:81:
46:68:1c:da:b8:aa:0e:f6:f3:9d:0b:20:8a:49:b9:
61:e1:63:c9:fe:47:ad:5d:7c:3a:0f:a5:61:90:26:
3d:48:4f:36:cc:f3:56:bd:62:6e:f5:50:5d:3c:3b:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:A1:74:B7:50:D7:93:58:4D:FA:93:EA:D6:B0:82:EF:90:EF:36
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:99:c3:02:1b:6a:43:95:a3:94:47:86:05:93:74:b1:07:dc:
b0:ef:f1:1d:41:89:d5:eb:d2:c3:cf:3b:ee:a1:98:ee:04:ae:
45:04:d0:1f:3d:cf:93:ae:2e:9d:ea:15:48:d9:c0:40:18:a6:
63:5e:bb:e0:78:1e:73:37:44:c0:52:e9:bd:90:7a:cd:1d:ec:
2d:45:23:f1:b2:33:5e:54:5a:f5:1d:67:0e:79:08:73:35:7c:
36:ea:c5:43:06:84:9c:1f:06:bd:a0:d9:92:07:2c:82:f1:66:
8c:18:60:94:5d:0d:fd:07:d5:7b:d5:bd:2b:63:69:77:2e:ef:
9f:f0:56:87:a7:31:19:6b:64:92:b1:7a:89:cd:cd:b6:98:ba:
b3:cb:91:27:d4:b3:84:5c:19:b1:b7:4b:02:60:4c:fc:6d:ab:
2f:18:f9:9a:f8:23:b2:8b:6b:47:07:81:72:85:38:5c:25:43:
e2:77:83:20:8c:44:3b:90:f1:34:8c:34:99:90:4e:e3:aa:80:
34:c7:ad:ed:5f:53:3a:3b:6a:14:ad:45:98:2c:3e:cb:7b:08:
5f:b1:7e:42:3e:ac:9f:c9:ac:1f:54:d5:24:67:33:35:1b:f2:
f9:8c:5e:08:9c:c7:68:30:b5:01:49:2b:7e:3a:91:ba:ed:13:
02:66:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:33 2026 by rpki-client