Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: ryHnFqIpt/4l/7XnqOk8RSg/dTQlJk/+bKUzlnHQ2+E=
Subject key identifier: 45:37:16:49:18:D7:3F:08:73:32:85:F2:F6:DC:B9:69:DE:C0:52:8E
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019E1FB5AFE35C158DC8BFD2F15DAF867C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1915
Signing time: Wed 13 May 2026 05:01:01 +0000
Manifest this update: Wed 13 May 2026 05:01:01 +0000
Manifest next update: Thu 14 May 2026 05:01:01 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: uDXfsaJM5yZwK+4mw6WFbVzW64/m3O9hoEuO33c+wAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:af:e3:5c:15:8d:c8:bf:d2:f1:5d:af:86:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: May 13 05:01:01 2026 GMT
Not After : May 14 05:01:01 2026 GMT
Subject: CN=4537164918d73f08733285f2f6dcb969dec0528e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:98:ef:b6:b1:6f:08:d5:95:74:e9:90:dc:
80:35:db:c5:d5:81:9c:23:7b:28:15:6f:67:34:31:
2e:c1:aa:6e:00:e9:19:8e:40:75:50:b4:17:9b:27:
09:2b:b0:77:35:e1:6b:75:a0:82:b8:15:25:a9:fd:
e0:7d:2b:7a:5d:35:01:82:e7:a1:bc:d4:b7:74:74:
89:4c:e3:82:4a:50:b4:f9:77:f6:8a:e8:7b:5b:cf:
d8:0e:09:76:88:5a:13:2a:48:f6:db:ed:e2:00:62:
b9:c2:40:7d:51:71:04:d1:46:2f:f4:e0:7a:99:30:
b8:5a:fd:2c:4a:d0:a6:dc:f4:d5:95:86:d9:a4:d1:
b2:fd:fc:98:85:f0:c2:af:47:fc:c2:f9:78:08:d4:
4f:b4:ce:9e:d4:7a:6b:46:85:27:e0:4a:1d:42:b4:
2b:2f:97:f7:80:75:8b:24:7e:2c:b2:f8:90:46:5e:
c2:a0:c1:59:30:97:19:82:57:d1:2f:34:e8:2c:35:
8c:a4:a9:79:6f:40:70:bc:16:53:a9:73:bf:31:16:
11:dc:11:af:77:23:05:7a:d3:26:f5:7c:f8:f7:eb:
52:9e:cc:b6:ec:62:4d:a6:52:ad:a8:88:83:8b:aa:
83:80:26:76:05:c9:40:32:2a:1c:77:c4:0a:4d:6c:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:16:49:18:D7:3F:08:73:32:85:F2:F6:DC:B9:69:DE:C0:52:8E
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:82:06:8f:1d:02:cf:8f:1c:5a:e9:fc:4c:93:d4:c1:de:bb:
54:1d:49:7b:d3:f2:dd:0e:09:d1:f7:e1:e8:de:1a:0c:5a:4e:
45:4e:94:be:fb:23:8d:18:cb:94:23:43:8f:d2:ca:3f:7b:bc:
35:d4:e4:14:27:10:8b:e5:37:32:bf:b9:19:00:80:b0:19:3a:
58:5f:12:ad:0e:8e:56:05:8e:c5:7f:c9:f5:03:2d:92:5a:2e:
53:42:f0:f9:ee:d4:f7:8d:bd:7b:22:80:8e:dc:9c:d6:24:50:
67:7d:61:78:d5:37:ae:19:60:29:63:43:02:ff:0e:84:df:dc:
a9:42:49:d9:5e:0e:8f:08:00:e2:c2:eb:00:92:6f:44:4f:f9:
09:a7:23:f6:e6:60:c0:08:e1:08:ef:c7:01:fe:77:ca:8f:f1:
f6:3a:bc:06:68:31:1f:39:b8:c2:22:22:b9:df:20:b5:71:13:
b0:f1:73:33:31:88:90:f5:ea:b2:65:e1:79:05:3d:09:13:af:
6e:91:90:18:b0:1f:76:7d:fc:ef:4b:c6:db:35:e2:da:aa:3d:
ea:41:46:bb:d5:46:8d:a4:aa:54:1f:33:56:10:9d:70:d6:1f:
8e:f6:e7:4e:d1:1d:2b:7e:21:56:6b:13:5f:c3:eb:29:49:6b:
5d:5b:20:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fta/jXBWNyL/S8V2vhnxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl
NDQ1MTkwHhcNMjYwNTEzMDUwMTAxWhcNMjYwNTE0MDUwMTAxWjAzMTEwLwYDVQQD
Eyg0NTM3MTY0OTE4ZDczZjA4NzMzMjg1ZjJmNmRjYjk2OWRlYzA1MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM+Y77axbwjVlXTpkNyANdvF1YGc
I3soFW9nNDEuwapuAOkZjkB1ULQXmycJK7B3NeFrdaCCuBUlqf3gfSt6XTUBgueh
vNS3dHSJTOOCSlC0+Xf2iuh7W8/YDgl2iFoTKkj22+3iAGK5wkB9UXEE0UYv9OB6
mTC4Wv0sStCm3PTVlYbZpNGy/fyYhfDCr0f8wvl4CNRPtM6e1HprRoUn4EodQrQr
L5f3gHWLJH4ssviQRl7CoMFZMJcZglfRLzToLDWMpKl5b0BwvBZTqXO/MRYR3BGv
dyMFetMm9Xz49+tSnsy27GJNplKtqIiDi6qDgCZ2BclAMiocd8QKTWzIcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEU3FkkY1z8IczKF8vbcuWnewFKOMB8GA1UdIwQY
MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt
OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli
LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYIGjx0C
z48cWun8TJPUwd67VB1Je9Py3Q4J0ffh6N4aDFpORU6UvvsjjRjLlCNDj9LKP3u8
NdTkFCcQi+U3Mr+5GQCAsBk6WF8SrQ6OVgWOxX/J9QMtklouU0Lw+e7U9429eyKA
jtyc1iRQZ31heNU3rhlgKWNDAv8OhN/cqUJJ2V4OjwgA4sLrAJJvRE/5Cacj9uZg
wAjhCO/HAf53yo/x9jq8BmgxHzm4wiIiud8gtXETsPFzMzGIkPXqsmXheQU9CROv
bpGQGLAfdn3870vG2zXi2qo96kFGu9VGjaSqVB8zVhCdcNYfjvbnTtEdK34hVmsT
X8PrKUlrXVsgEA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:34:40 2026 by rpki-client