
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File: g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier: TEFi4P10CBrSLFKp9AXIucAV0R/Kn6A/m0bFQr5evCM=
Subject key identifier: B4:77:A8:3A:31:A5:4C:CC:D7:A9:17:9F:B5:56:C1:90:7C:0E:68:02
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 019F93927866F33DEE7DDCFC6A70D0F19AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number: 0B3A
Signing time: Fri 24 Jul 2026 10:01:17 +0000
Manifest this update: Fri 24 Jul 2026 10:01:17 +0000
Manifest next update: Sat 25 Jul 2026 10:01:17 +0000
Files and hashes: 1: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: 60WEH3E1lp9u+cVP7dd7qss3G9QQkFhjTo6mlFzF7Ec=)
2: s4KA3DwYrQJUsZJrjPBP7stbDkA.roa (hash: C4D/As4F5fcHYHPJJ6R95R5HyZ/76PW92tetLSNxy3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:78:66:f3:3d:ee:7d:dc:fc:6a:70:d0:f1:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: Jul 24 10:01:17 2026 GMT
Not After : Jul 25 10:01:17 2026 GMT
Subject: CN=b477a83a31a54cccd7a9179fb556c1907c0e6802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:85:e5:63:5e:1b:c3:da:61:f0:a4:53:db:
da:5f:77:16:76:6e:87:9b:3c:34:c3:0f:b1:b5:49:
78:a5:6d:5e:3b:61:ed:ed:d9:00:28:f0:73:ae:21:
45:4b:af:f6:cb:1f:a1:36:74:44:a9:ce:bc:9b:1a:
ae:b3:9b:c0:13:14:3f:42:62:89:66:9d:f2:9b:27:
47:62:d4:ac:27:fe:ab:08:cd:e4:e8:3a:58:95:ea:
59:4c:4e:65:4b:34:e3:fc:a8:fa:1e:5c:a5:31:06:
1e:b4:29:6f:b3:aa:2e:c8:4b:bd:cb:1d:b3:65:11:
2a:e0:1c:e7:00:6a:59:02:fe:5f:31:5d:3e:b3:c6:
2b:89:dd:cd:d7:c6:ce:a5:c9:ab:78:3f:fc:19:6c:
15:87:e5:c8:24:ad:4c:13:d8:b8:69:62:02:7e:0d:
c7:7a:c4:3b:2e:f5:50:2b:1a:56:f7:38:9a:75:76:
d7:c7:f0:36:8c:ef:e9:6c:94:66:8d:a8:43:4d:b5:
8a:77:55:11:59:78:f9:bd:54:be:de:2b:58:2d:ef:
5c:db:ea:0c:51:7d:82:42:46:98:45:cb:f8:13:ea:
48:ef:5f:34:12:3c:39:2e:bb:e2:eb:74:c5:47:e4:
d7:9b:be:35:0d:6a:db:1b:c9:51:ec:2c:33:13:32:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:A8:3A:31:A5:4C:CC:D7:A9:17:9F:B5:56:C1:90:7C:0E:68:02
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:cd:a4:83:3d:32:d8:b2:2c:3f:db:5d:c9:72:43:36:29:
94:59:db:f9:b0:73:ce:0a:87:91:01:00:3d:d0:d9:b8:5f:7d:
48:03:99:8d:e0:22:8c:40:2e:da:dc:3e:24:ec:c6:8c:4f:6b:
52:7d:b6:df:63:c5:f9:48:cb:4c:bf:27:77:80:5e:e0:30:19:
28:ce:c4:64:69:75:45:a3:0c:28:17:a6:84:55:69:f2:1c:24:
90:47:e2:e3:07:d2:65:3b:f5:17:6b:81:22:89:fa:95:98:e6:
6c:d1:6f:bb:93:49:23:66:95:79:7a:9b:e7:b0:b6:12:f0:0b:
44:4a:e2:92:48:b4:a7:83:15:cd:b4:03:5b:6d:f3:79:8b:43:
d3:ee:23:78:be:ff:88:8d:b0:0f:d0:b3:08:b9:dc:4d:58:db:
f5:b6:f7:f3:32:97:45:19:2e:70:2e:dc:a3:53:f3:c4:35:04:
b4:3e:bd:a2:c1:4b:75:a6:63:03:f7:27:be:e0:ce:f6:15:9f:
64:37:5b:ff:29:09:f4:ce:aa:72:bc:17:a8:a8:71:cd:f9:5a:
f9:8d:c8:d6:30:7b:dc:4f:63:ef:d7:14:76:22:aa:f1:62:91:
46:0f:20:45:85:06:1c:9a:25:3b:62:bf:fc:2f:b5:2f:8a:bc:
65:fc:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:14 2026 by rpki-client