Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: McOVbAhMhWwonAPFiqmAECfWvqitIO95D084lPxcxpc=
Subject key identifier: 3C:74:43:65:0D:42:5F:5B:5F:ED:32:D7:FB:B1:DC:17:FF:DB:23:F0
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019F946E2B4655245C124E11A2B4621F53E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 14:01:15 +0000
Manifest this update: Fri 24 Jul 2026 14:01:15 +0000
Manifest next update: Sat 25 Jul 2026 14:01:15 +0000
Files and hashes: 1: 6CiY0Gg8_bFGdQjcm-wVQtfe6kc.roa (hash: sD1PbKPCeuPVip6bnVk4WhECRkOBXjXrooEs1zCxK/4=)
2: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=)
3: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: cGAw6SeJuq6enGxd5xfT1a5arOWmayhmtCBSApVu6cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:2b:46:55:24:5c:12:4e:11:a2:b4:62:1f:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jul 24 14:01:15 2026 GMT
Not After : Jul 25 14:01:15 2026 GMT
Subject: CN=3c7443650d425f5b5fed32d7fbb1dc17ffdb23f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:ce:80:fc:f7:d2:9d:95:b1:6d:e0:8b:3e:
91:82:50:f3:3d:c0:92:61:85:b5:73:a3:44:18:01:
6d:7e:78:98:3c:4c:ec:18:46:6a:74:2d:a2:12:56:
15:ea:4f:04:92:b1:0e:d3:86:8a:f2:10:7d:f2:ea:
b3:4b:1a:cc:6e:31:a7:16:12:e5:01:d2:59:88:40:
4b:be:8e:8f:a1:07:13:a8:7f:d6:85:0e:f2:28:e4:
08:a8:14:a4:89:8f:26:c8:7a:e4:bf:1c:2b:13:48:
57:9d:a1:e1:e9:8f:45:e2:63:86:b7:4e:45:c5:cb:
f6:a5:a2:80:dd:ac:53:5a:13:83:c9:ac:13:79:c9:
63:cd:a6:95:6e:71:5e:7e:ff:24:9c:98:4e:a6:fa:
fe:bb:e8:2d:85:94:a8:2f:4e:a8:ef:9a:dc:18:7f:
e6:c7:0b:ec:d3:2a:40:8b:be:1f:94:62:3e:01:8a:
a0:80:21:57:0f:0d:d5:37:c2:40:63:e4:05:a8:98:
08:68:be:3d:27:b9:46:10:2f:be:1a:1e:33:e4:57:
52:f5:a1:24:25:b7:bb:f2:19:76:c4:e4:d0:96:4e:
63:d8:71:3d:ae:f7:6a:fb:ef:64:e9:2f:9c:66:04:
d1:e4:0c:27:1d:50:7b:ed:5e:35:02:e9:4d:73:45:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:43:65:0D:42:5F:5B:5F:ED:32:D7:FB:B1:DC:17:FF:DB:23:F0
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5a:fb:24:df:c6:39:d1:f5:3d:74:8d:f5:2c:09:c0:f4:b2:
02:88:c4:54:af:db:fe:ff:78:2d:d5:02:45:b1:80:fe:ad:99:
29:7e:70:cd:7a:ef:cc:ca:46:9b:b9:aa:50:19:61:35:8e:46:
3b:2e:85:72:01:1a:2b:ea:83:51:04:55:79:42:81:a0:04:7f:
5b:6e:b8:38:4c:f0:95:7f:82:b8:86:b8:b9:b4:4d:90:e0:5d:
66:d8:0c:78:c5:49:43:d6:48:85:88:fa:78:22:64:0e:16:d5:
b7:b4:f2:ad:8c:c2:c2:cd:f8:6d:56:05:51:22:fb:f0:1f:1a:
3a:28:a4:c8:7c:04:c8:33:05:01:c5:df:53:72:5f:2f:61:d6:
aa:2b:a8:ef:2a:6c:77:e2:ed:f4:5d:df:67:86:2a:3e:bc:b8:
92:78:51:d7:2a:27:66:52:72:1e:6c:55:f8:f5:71:15:e6:20:
2a:8d:dc:54:0e:a9:e4:da:81:a5:e8:6d:f1:a8:29:fe:fe:63:
2b:7c:15:3c:57:ba:e5:a5:7b:31:1e:52:03:bc:68:5b:d4:54:
7d:75:94:44:53:a2:68:a8:9f:c4:73:81:03:7b:d4:39:75:e1:
53:6d:7e:88:52:ea:68:d4:4a:cd:16:d9:8e:7c:99:09:e4:97:
28:6e:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:10 2026 by rpki-client