Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
File: 37htXnTBI0828hmwXXQ7s6Lir9o.mft (raw, json)
Hash identifier: DRll1+GIIROpPY3zOSL7iXWidUHEdBk+ZrarWHeXsoM=
Subject key identifier: 0B:ED:CF:A9:52:32:C4:5D:BA:9E:3B:59:59:37:3F:77:15:8B:80:92
Authority key identifier: DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
Certificate issuer: /CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Certificate serial: 019D2B17BEF58F351D8B2259C3F5DCCF202A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
Manifest number: AC
Signing time: Thu 26 Mar 2026 17:01:09 +0000
Manifest this update: Thu 26 Mar 2026 17:01:09 +0000
Manifest next update: Fri 27 Mar 2026 17:01:09 +0000
Files and hashes: 1: 37htXnTBI0828hmwXXQ7s6Lir9o.crl (hash: E+AvKBLZ0OYqEU4P2PJ3X3lar5sn4WVl8FCOcwEQxc0=)
2: pjVyRWgLsMdox-VVuZ-NaPLETvs.roa (hash: 9UbRxa/hD4Pj6lxQzvJSYegiW7ncLSeA+lrKDXMCizI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:be:f5:8f:35:1d:8b:22:59:c3:f5:dc:cf:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Validity
Not Before: Mar 26 17:01:09 2026 GMT
Not After : Mar 27 17:01:09 2026 GMT
Subject: CN=0bedcfa95232c45dba9e3b5959373f77158b8092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:a8:49:af:87:fb:f2:b1:d8:4b:ce:9c:3b:
41:11:a9:97:fb:6b:22:82:f6:ff:52:3e:a6:24:b1:
b9:9a:49:c8:ac:8d:36:8b:24:4a:27:8b:eb:95:7f:
40:f8:bc:8d:54:2e:94:60:ea:b5:f1:9c:cc:ed:e9:
98:16:dc:c5:af:aa:cd:f7:73:8c:9a:76:9d:9d:04:
e5:86:98:62:89:c0:d2:36:64:3e:f7:dc:df:f4:cd:
aa:0c:62:30:8d:5f:53:0c:85:28:89:5c:8b:a1:be:
0e:39:ee:50:6f:63:c8:7a:11:b6:a5:63:42:95:d2:
c9:df:e1:95:50:b7:3e:71:46:e3:33:98:4c:a2:e5:
94:3e:04:d9:fe:d8:f9:a4:8d:db:df:36:8e:89:29:
b9:ca:eb:e2:f7:0b:41:91:bb:e8:ef:55:3a:d7:20:
11:81:48:db:84:44:5a:b7:a2:ff:8c:9a:6d:04:4a:
72:64:cf:94:ea:54:c0:80:f9:d3:be:8d:03:4d:ec:
d9:27:d2:37:c3:b3:f5:27:b1:25:6c:46:4d:2c:44:
38:86:36:54:6d:2b:e4:31:00:71:7c:71:28:78:fd:
84:38:33:af:0c:3e:c2:75:18:a0:b8:4e:84:0a:6a:
cb:65:ed:d0:80:1a:6c:40:9b:34:52:0b:7a:51:cf:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:CF:A9:52:32:C4:5D:BA:9E:3B:59:59:37:3F:77:15:8B:80:92
X509v3 Authority Key Identifier:
keyid:DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7e:5b:bc:5c:54:d9:91:09:51:89:30:31:01:d3:76:15:0d:
15:fc:7f:2f:29:11:22:31:22:21:ee:24:91:37:bd:8d:f3:12:
57:8c:b3:55:9f:f0:4f:19:91:8b:83:aa:fd:0a:1d:6b:0b:bf:
f6:25:f5:8c:9a:1f:2b:3d:45:9b:41:47:7a:25:36:6b:01:6a:
1d:1f:7b:13:de:1f:40:00:ab:d1:ba:e3:42:ac:db:5d:95:92:
fd:d9:d6:53:3b:1e:bc:56:59:a9:7b:72:68:c4:01:a2:91:b3:
7c:0d:84:c6:be:fd:54:76:5d:82:d3:4b:a5:ca:ed:76:a0:e1:
f2:bf:7f:09:fc:db:4f:cc:9d:58:f0:23:10:fa:60:ac:82:03:
9d:5f:cb:b1:6a:91:e9:3e:36:22:84:45:75:d8:6e:b3:3e:3d:
0e:d3:8c:e1:e3:ba:e0:15:90:2d:e3:34:5b:76:12:d5:0c:e7:
69:81:0f:77:de:cb:5b:78:47:60:29:d7:a2:35:0d:14:e1:cd:
dd:08:f5:f2:ca:4f:e6:70:25:fa:99:3b:b7:89:a8:05:a6:bf:
eb:f3:dd:0e:e4:31:90:f8:78:2f:ca:a9:4a:4e:56:31:f2:83:
3a:8f:98:67:28:6c:b4:d8:a3:6a:a1:b9:11:2a:0e:80:6a:6c:
ae:ad:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:13 2026 by rpki-client