Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: nD0B5ykY92pKVqTb8Q+64DvL31yefWYCiy3CjEQ9Ios=
Subject key identifier: 4A:D6:6A:99:0E:89:AD:DE:F8:F1:98:CE:6A:17:81:68:B4:E2:46:B8
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 01A0CF6CB68876FE2634A7D171C3D0921471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 1379
Signing time: Wed 23 Sep 2026 18:00:03 +0000
Manifest this update: Wed 23 Sep 2026 18:00:03 +0000
Manifest next update: Thu 24 Sep 2026 18:00:03 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: cSzId5id3tk3quWuXKakGGSmdJCsVKEAyS3KTfGsmV4=)
2: _nu4AgdKyCMg5x3LfQVMwvf9JfE.roa (hash: wZ+QOk95biZDKWTdOhLdR/nTi12VXBXYcUjUw39y42Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:b6:88:76:fe:26:34:a7:d1:71:c3:d0:92:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Sep 23 18:00:03 2026 GMT
Not After : Sep 24 18:00:03 2026 GMT
Subject: CN=4ad66a990e89addef8f198ce6a178168b4e246b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:ed:1a:95:e1:76:d5:8b:50:90:f5:65:02:
35:fe:82:9c:c3:ec:82:22:70:e8:4f:e1:06:40:d9:
6d:f6:fa:a4:81:25:65:86:e4:8f:26:61:4b:2e:0f:
35:a8:dd:4a:df:04:2c:40:2d:c9:12:64:e8:d2:a6:
c4:67:04:2f:13:26:4d:4e:a6:83:53:7a:39:6a:81:
65:0f:49:f6:93:34:69:f2:3a:d0:6b:62:c8:94:cc:
b6:17:92:8e:17:31:e0:25:e3:32:ab:29:23:04:67:
46:7b:17:36:05:79:5c:7a:d2:c8:a6:7d:c0:9b:3c:
af:9c:e0:b8:f1:8e:97:34:05:44:df:b1:dd:68:03:
83:2d:ef:32:98:11:06:52:a1:42:d0:79:71:fa:52:
ef:05:dc:91:86:6e:70:be:f9:19:ac:a4:b3:ae:d8:
8f:eb:3d:e6:a7:02:5d:cd:ca:e0:30:a7:25:fc:4d:
ba:e5:7c:d5:09:5c:78:5f:74:79:f7:7b:e1:3f:0e:
cc:af:bf:9e:ce:a2:03:6a:b7:cd:8d:3c:12:91:d3:
24:11:a2:63:4b:d9:6a:d4:4d:ff:50:e7:49:19:20:
a0:83:eb:c1:4f:ee:dd:dd:f1:7d:6d:85:e8:ea:1f:
ca:36:ee:56:aa:e0:bf:c6:0b:bd:9f:c8:31:1e:9b:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:6A:99:0E:89:AD:DE:F8:F1:98:CE:6A:17:81:68:B4:E2:46:B8
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:7a:be:3f:c7:02:2f:47:44:5c:12:a4:ae:c0:f8:87:dd:
e8:2d:f9:dc:af:5f:61:2e:4d:03:44:94:58:3d:2d:ad:95:ef:
8f:38:ae:cf:4e:a0:86:99:ab:48:49:a1:d3:0d:58:d6:41:b3:
32:77:0f:0c:4e:60:1d:2e:d0:b2:80:f1:77:a4:44:82:59:b3:
ac:1b:68:50:ec:03:cb:4d:fd:a8:74:ed:0c:b9:42:12:c1:78:
cc:db:83:0f:f0:1d:68:b0:04:87:e6:ce:b0:a2:95:2b:90:29:
53:34:46:c5:6e:93:70:70:38:7d:35:86:75:4c:db:a9:3f:0c:
26:d2:87:df:c1:78:b4:ac:86:bc:15:ea:59:0a:ef:27:c3:f4:
1a:5c:6a:b0:62:68:50:6b:58:f5:ad:95:49:12:dc:44:18:e5:
1f:77:c4:f0:1a:00:ff:ff:de:20:6f:48:a1:5b:4e:3a:a3:1e:
3a:4c:a6:e4:3b:57:98:9a:d8:c5:f4:e7:3d:2e:fd:b5:bc:8d:
4c:82:35:cd:71:82:dc:86:fa:bd:3c:60:b1:7c:dc:cb:36:06:
ed:44:13:6a:b8:c7:1d:ac:dc:74:2f:2e:af:b5:9d:af:16:54:
9d:ca:eb:2d:22:d2:6c:e2:57:fc:51:d6:c6:ea:f0:fd:ee:37:
a0:63:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:37 2026 by rpki-client