Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: v4kwBd4Kz/4jJscvYKYP3R7ZKoALsT7/nQdoQh73OXY=
Subject key identifier: 5D:18:2F:76:34:02:4D:F3:5A:17:17:6B:F7:C7:A3:19:1C:D4:EE:D3
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 019D265F1265DC276240E9C17246308F939B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 07E5
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: JbfmZqWYO16WRHq7moItl9dsI7rQzyptjbjo2zoWWog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:12:65:dc:27:62:40:e9:c1:72:46:30:8f:93:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=5d182f7634024df35a17176bf7c7a3191cd4eed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:38:d3:00:72:da:24:4b:44:c6:5c:1a:a8:
f8:6e:e3:ee:a1:38:d3:98:02:8d:51:fc:e7:7d:a9:
70:22:0b:72:e5:b6:5c:0f:76:2f:bd:f6:be:be:97:
c9:06:63:87:13:e6:06:c4:cf:99:6a:13:ca:0f:9c:
ff:58:0f:7c:29:25:0c:c8:04:98:91:87:64:34:b1:
1f:eb:28:03:92:90:a0:e2:d6:31:c4:4b:f0:1e:8a:
28:fc:6c:62:e9:e8:8d:56:cd:3b:64:fe:76:07:6b:
30:dd:5a:62:d1:ae:37:42:71:2c:c9:90:e2:aa:06:
3a:9b:eb:87:4e:0f:5d:fe:59:9e:33:7f:c5:a2:bd:
2f:9d:3b:ba:67:c2:4e:b5:1d:70:09:48:90:01:ed:
17:48:ba:35:c5:20:3b:9a:a0:a9:c5:62:61:5f:5c:
3e:47:69:57:bb:22:60:b8:b4:0c:29:b5:ed:f7:d6:
dd:e7:43:52:5c:17:0a:0d:1a:04:6f:4b:09:22:05:
ea:0b:6d:a7:4c:23:cf:02:ad:e2:92:ff:ee:f2:c2:
3d:71:dd:b6:d9:57:91:29:55:e8:bd:a4:ac:f6:cf:
4a:a9:7d:5c:e5:d3:fe:79:52:bb:62:d5:2e:ad:cf:
62:2d:f0:02:ca:09:c0:08:00:2f:11:7b:69:25:a5:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:2F:76:34:02:4D:F3:5A:17:17:6B:F7:C7:A3:19:1C:D4:EE:D3
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:98:92:8f:f1:02:2d:3c:aa:fb:a6:63:85:31:0a:7d:a7:9c:
68:92:6d:72:49:eb:cb:11:59:8d:34:68:2f:36:86:52:29:0b:
fc:23:db:ce:0d:8d:70:c0:e2:ef:c8:d8:f7:2a:27:c3:35:2d:
43:ef:c4:a6:6d:d5:82:ca:b9:12:b3:17:b6:73:5a:14:b8:40:
ca:3c:19:5a:fe:35:10:b1:ed:40:3d:ec:4d:e0:cf:19:5f:a2:
02:d6:31:93:a5:bd:2d:cf:9d:d3:c8:31:9b:98:63:8c:96:a9:
a7:31:40:c6:55:be:c4:82:66:6c:7b:4a:d4:e3:c4:34:26:6e:
ae:2a:8b:f6:9b:1e:c1:cc:87:ed:ed:46:c0:f2:f2:38:33:82:
af:58:f6:57:77:b1:7a:10:48:28:e9:4b:46:91:fe:61:42:9d:
e7:6d:3e:15:cb:62:8b:94:02:42:f4:c8:70:24:47:c9:37:56:
7f:5c:64:6e:ec:c9:81:b0:5f:ed:9a:30:83:02:f9:1b:f8:f4:
17:6e:6b:67:39:ba:21:26:7d:c7:8f:20:0a:ac:8a:86:32:31:
50:4c:7a:6b:d8:05:ca:88:7a:f4:f1:66:95:54:57:2d:6a:18:
d4:41:e5:ca:dd:85:0b:bc:a7:60:dc:1e:5b:96:89:76:38:36:
22:4b:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:33 2026 by rpki-client