Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
File: 37htXnTBI0828hmwXXQ7s6Lir9o.mft (raw, json)
Hash identifier: 51/gBb3c/uRR+PV+7rdCFkYQ+6a7rMPvghaN9R51wFA=
Subject key identifier: 7F:4E:33:39:0B:3B:BF:57:B5:7E:76:16:ED:D3:0C:28:95:30:3F:C4
Authority key identifier: DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
Certificate issuer: /CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Certificate serial: 019E1E6C464BA7B4420AC589BA8E9BD77B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
Manifest number: 012A
Signing time: Tue 12 May 2026 23:01:12 +0000
Manifest this update: Tue 12 May 2026 23:01:12 +0000
Manifest next update: Wed 13 May 2026 23:01:12 +0000
Files and hashes: 1: 37htXnTBI0828hmwXXQ7s6Lir9o.crl (hash: dTM8bevo6fWRI1rIbXMW848bkVD5Jr6sOd/KUV8oI5s=)
2: pjVyRWgLsMdox-VVuZ-NaPLETvs.roa (hash: 9UbRxa/hD4Pj6lxQzvJSYegiW7ncLSeA+lrKDXMCizI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:46:4b:a7:b4:42:0a:c5:89:ba:8e:9b:d7:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Validity
Not Before: May 12 23:01:12 2026 GMT
Not After : May 13 23:01:12 2026 GMT
Subject: CN=7f4e33390b3bbf57b57e7616edd30c2895303fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:ff:97:27:c4:49:87:5b:5b:fa:d2:e2:13:
86:a0:2c:30:84:c5:e3:fe:9d:28:70:3e:10:4f:35:
3d:c4:8a:93:bb:2c:08:54:bc:8f:2e:37:80:66:a1:
3a:e1:08:f2:16:4f:62:97:fb:5f:8f:00:11:bf:f7:
0c:5d:68:f3:11:0a:32:2c:08:22:96:35:fb:c8:76:
84:5f:58:27:27:d6:ff:df:99:00:45:d2:dc:3b:f8:
f4:fd:d3:d1:30:be:b4:a9:7a:83:08:f5:f5:d5:11:
46:f5:6a:b8:02:c9:f7:5e:80:cc:65:45:49:e2:f6:
13:0a:4f:53:ea:40:ac:fc:db:da:c0:23:f4:5e:63:
55:99:11:b5:88:b8:74:fe:48:ac:ea:81:ac:c4:c3:
ae:6d:1b:8f:63:04:d2:00:01:2d:3d:80:fb:3b:18:
1d:3d:8a:29:09:b1:7a:e7:cc:9a:ae:ca:71:44:d5:
07:c9:4d:b1:9c:4f:2a:de:20:f6:9e:02:2c:a0:c0:
8b:9a:5c:ef:76:36:44:9b:2f:05:b8:15:8f:72:bc:
b3:6c:88:1b:67:ee:f3:36:25:8d:9e:df:60:e6:22:
a7:8e:a6:95:6e:f2:65:47:07:57:86:ed:70:64:d9:
49:d4:09:9a:aa:c4:21:3f:da:cb:fa:a1:c8:c8:27:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:33:39:0B:3B:BF:57:B5:7E:76:16:ED:D3:0C:28:95:30:3F:C4
X509v3 Authority Key Identifier:
keyid:DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:13:4f:fd:ad:6c:49:d3:93:cb:65:83:56:c7:b7:86:ae:4c:
f6:7f:71:30:fe:cd:67:ae:8f:88:dd:94:15:c5:cd:16:c9:d8:
d9:91:c8:7b:58:21:cf:5c:7a:a0:54:40:03:92:d9:b7:72:6c:
76:5f:60:3b:32:25:1e:dd:f2:94:fb:1a:35:7b:2e:62:8e:b1:
9c:65:f7:00:20:60:65:28:6e:93:42:98:3b:36:73:07:d7:f5:
d0:76:af:19:66:ef:75:c7:00:26:dc:57:c9:d5:75:af:39:78:
f9:69:31:75:94:a4:62:59:e2:68:18:97:ec:81:ed:65:c8:df:
40:f0:fa:24:c1:44:b5:af:1d:66:d0:3a:34:5f:2f:2d:61:7d:
52:95:3c:a4:98:b7:90:37:55:c2:0a:c0:4e:80:bc:01:a9:99:
4d:c8:e3:4d:46:ca:8a:98:76:5d:e4:f0:1d:9d:a7:85:40:92:
3f:72:5e:7b:fb:3e:08:e9:40:a4:1b:17:aa:a3:87:aa:f7:31:
75:24:dc:d1:9c:22:75:60:07:24:3f:ca:a4:22:e2:19:f9:7c:
f5:9b:25:92:e9:ad:8f:37:45:a2:0d:37:d4:8f:0a:87:cc:bd:
db:85:90:39:77:f1:a1:fa:c7:a5:60:e3:d8:01:73:ca:a7:21:
35:c2:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:14 2026 by rpki-client