
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: nVOTQqTPYwLcKhOzbCES/FNLxdAQxUZve/n95helac8=
Subject key identifier: D3:55:E3:DC:97:DE:27:1C:12:C3:34:C2:CE:25:86:82:A1:11:38:2D
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019D269651602BBB7D6373CF2DBDC79F6022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 1193
Signing time: Wed 25 Mar 2026 20:01:18 +0000
Manifest this update: Wed 25 Mar 2026 20:01:18 +0000
Manifest next update: Thu 26 Mar 2026 20:01:18 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: 8QyLMosfHBtbbXDCnRMAWHl0ffb64tEYfk4Uathdofc=)
2: FhwS6oj1IU2dmxLLYCr_Dh9nNPg.roa (hash: gw4ySzsoHkhiHwNr6SgUSv5IRZbxDqYLsZYznQCEK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:51:60:2b:bb:7d:63:73:cf:2d:bd:c7:9f:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Mar 25 20:01:18 2026 GMT
Not After : Mar 26 20:01:18 2026 GMT
Subject: CN=d355e3dc97de271c12c334c2ce258682a111382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:d5:67:38:3b:31:6f:91:95:2a:29:ce:b2:
fb:6e:3d:16:da:cc:63:c7:bb:04:72:35:dc:74:b1:
00:95:db:2b:b0:89:71:3b:1f:13:97:e3:e4:d6:4a:
cb:86:ad:57:9c:20:f5:c4:d4:12:d9:e3:08:f7:49:
51:60:1f:4e:4b:9c:67:79:62:5a:32:ae:cb:1d:ab:
1d:f5:16:5d:38:68:44:d4:1d:4c:11:94:84:5c:f8:
bb:f7:a2:1b:73:36:8d:9f:ee:c1:9b:a3:f6:8a:d7:
49:9c:52:8e:3b:0d:2d:2d:a7:8e:37:8a:0a:81:0f:
3d:77:29:6e:2f:5e:1d:dd:33:58:6e:82:bb:79:c8:
15:4e:96:8c:3f:66:22:94:33:7c:a9:6c:76:5f:00:
87:d9:58:1b:88:97:f7:f5:e5:ef:e9:aa:d3:96:bd:
25:de:09:c9:fb:d3:ac:0b:cc:b4:eb:2d:1b:9b:76:
91:bd:0a:78:b9:57:72:ca:b0:bd:19:16:1a:1e:1f:
65:03:65:db:a8:ad:f5:bd:bd:a6:f0:52:cb:c0:45:
ee:71:db:ff:4a:ae:ad:31:7d:e9:53:c9:8c:0a:32:
18:1b:96:d2:5d:e6:88:1e:3d:8c:cf:da:2a:41:b0:
8b:ef:52:9e:a6:bd:de:2a:a2:f8:d6:e9:30:1f:91:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:E3:DC:97:DE:27:1C:12:C3:34:C2:CE:25:86:82:A1:11:38:2D
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:37:ce:15:bf:9b:02:15:a4:f9:8c:14:53:63:1e:2e:ac:
b7:40:01:69:3d:b6:23:77:e9:b3:6a:62:47:f1:14:3b:c0:68:
4e:03:b9:27:99:b0:8c:0d:fb:fd:b5:56:9b:8c:73:3f:56:3c:
f1:ff:eb:6b:dc:9b:ed:ca:97:ac:93:d1:15:da:67:f6:64:8e:
5a:8a:25:8c:b7:45:9a:62:af:cc:9f:f7:23:b8:c2:73:95:5c:
b8:4c:e2:17:c8:e3:da:3d:29:bf:4a:ce:76:4a:8a:80:46:ae:
27:9f:10:54:13:c1:64:91:f4:5e:aa:db:ff:81:d8:5a:70:7d:
f1:56:3f:37:61:f0:f1:7d:d5:d6:8e:97:3b:d4:59:71:f2:b1:
a6:1a:22:f3:be:fb:00:59:ab:e6:e1:65:f2:e9:1d:96:51:fc:
9d:7b:ab:7a:88:ae:03:10:ff:36:63:50:4a:5d:5a:3d:8c:11:
fa:b4:a8:7c:c0:a2:64:9a:3b:be:9f:62:92:d8:82:c5:6d:56:
12:89:c3:71:97:42:d8:5e:82:3c:73:9b:c6:55:3f:46:00:80:
74:8e:6c:52:49:d0:ee:04:8f:1f:f1:82:15:d0:43:d2:d3:8f:
fe:20:37:61:db:92:08:1a:8c:01:b9:38:35:9c:08:52:f6:36:
7b:f1:d5:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllFgK7t9Y3PPLb3Hn2AiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjFmNmUwMDE1M2E0OTE4NjExYjE0YjZiMDNmNjgxMmVk
ODhhNDMwHhcNMjYwMzI1MjAwMTE4WhcNMjYwMzI2MjAwMTE4WjAzMTEwLwYDVQQD
EyhkMzU1ZTNkYzk3ZGUyNzFjMTJjMzM0YzJjZTI1ODY4MmExMTEzODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IjVZzg7MW+RlSopzrL7bj0W2sxj
x7sEcjXcdLEAldsrsIlxOx8Tl+Pk1krLhq1XnCD1xNQS2eMI90lRYB9OS5xneWJa
Mq7LHasd9RZdOGhE1B1MEZSEXPi796IbczaNn+7Bm6P2itdJnFKOOw0tLaeON4oK
gQ89dyluL14d3TNYboK7ecgVTpaMP2YilDN8qWx2XwCH2VgbiJf39eXv6arTlr0l
3gnJ+9OsC8y06y0bm3aRvQp4uVdyyrC9GRYaHh9lA2XbqK31vb2m8FLLwEXucdv/
Sq6tMX3pU8mMCjIYG5bSXeaIHj2Mz9oqQbCL71Kepr3eKqL41ukwH5GS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNV49yX3iccEsM0ws4lhoKhETgtMB8GA1UdIwQY
MBaAFN+x9uABU6SRhhGxS2sD9oEu2IpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEt
ODEwNjI3ZmIyNjcxLzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEtODEwNjI3ZmIyNjcx
LzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFI43zhW/
mwIVpPmMFFNjHi6st0ABaT22I3fps2piR/EUO8BoTgO5J5mwjA37/bVWm4xzP1Y8
8f/ra9yb7cqXrJPRFdpn9mSOWooljLdFmmKvzJ/3I7jCc5VcuEziF8jj2j0pv0rO
dkqKgEauJ58QVBPBZJH0Xqrb/4HYWnB98VY/N2Hw8X3V1o6XO9RZcfKxphoi8777
AFmr5uFl8ukdllH8nXureoiuAxD/NmNQSl1aPYwR+rSofMCiZJo7vp9iktiCxW1W
EonDcZdC2F6CPHObxlU/RgCAdI5sUknQ7gSPH/GCFdBD0tOP/iA3YduSCBqMAbk4
NZwIUvY2e/HVYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:29 2026 by rpki-client