Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
File: 37L5jV2TMMKCX8ikvqWOWitKvvM.mft (raw, json)
Hash identifier: vjfnxTfcg+nAGrcx62xZ2GLuvMxzY13IRjrHio0JtZw=
Subject key identifier: 24:6C:78:F2:1E:C0:B4:67:36:5C:88:7C:B9:3D:A9:0B:DE:D4:40:BD
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Certificate issuer: /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial: 01A0D2DEFC6D36E29F7887985827B3A8C176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
Manifest number: 0125
Signing time: Thu 24 Sep 2026 10:03:43 +0000
Manifest this update: Thu 24 Sep 2026 10:03:43 +0000
Manifest next update: Fri 25 Sep 2026 10:03:43 +0000
Files and hashes: 1: 37L5jV2TMMKCX8ikvqWOWitKvvM.crl (hash: kEshLAxs3Bkl7QVNavUnfL65rw5itFhKxwXYuaYHtcE=)
2: ORzFbjO5Nia0kcigCY2OWktPzNg.roa (hash: H6lUS3aRzmCFN45+2w1+AEQR77kkwodYeALKmKNgXVM=)
3: _aahlkyboV8i3HTyR4FJOxLSMv4.asa (hash: dD7N2xKq7irXsIrhG/fQS/8UXa6cF4atm0nL0eK5Z0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:fc:6d:36:e2:9f:78:87:98:58:27:b3:a8:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Validity
Not Before: Sep 24 10:03:43 2026 GMT
Not After : Sep 25 10:03:43 2026 GMT
Subject: CN=246c78f21ec0b467365c887cb93da90bded440bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:7a:ec:14:31:7a:90:1d:e9:cf:c9:e0:1c:
0d:c6:93:d0:81:8d:77:cd:2a:d5:8b:d9:0d:4e:92:
22:75:4e:8b:76:1c:c4:28:4d:ee:e8:c8:2c:6a:a2:
c3:80:06:67:12:d5:98:cf:a9:f4:79:cc:12:ce:5c:
11:74:7e:49:79:02:09:24:77:6b:f3:44:88:7e:d3:
14:a4:f1:68:64:09:50:e1:58:c2:b7:c6:08:e4:76:
8a:b2:8b:5b:c8:a7:d8:f6:08:6d:6a:d7:fd:d3:7e:
8d:e3:3f:9f:af:7c:1a:ab:8d:45:01:a7:9d:7f:f5:
d7:17:e2:73:a5:f5:8b:01:38:4f:57:3d:0a:fa:c6:
c3:d6:c5:bc:7c:55:0c:31:a4:88:2e:5a:02:09:3f:
30:e1:ab:fe:5a:0d:50:a5:78:00:28:cd:73:3e:b2:
ff:38:2a:28:c1:7c:92:80:69:c2:ef:d3:26:94:ad:
16:9d:24:e8:fa:2c:a0:7e:69:1c:7d:87:e1:63:96:
d2:f7:85:75:1b:c5:1b:f9:bc:b8:f6:00:fe:5d:bb:
0d:7b:17:2c:8b:d8:db:8b:6d:b6:b2:cb:fc:98:f9:
1c:6b:81:6d:bb:12:af:f8:75:ba:92:88:65:51:76:
ca:15:0b:b3:62:90:84:0d:fc:55:7b:87:28:1f:04:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:78:F2:1E:C0:B4:67:36:5C:88:7C:B9:3D:A9:0B:DE:D4:40:BD
X509v3 Authority Key Identifier:
keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:13:a6:6f:5d:af:c2:89:17:18:a2:75:af:89:7e:1e:56:4e:
9e:a2:04:72:41:b8:23:e2:f8:8e:24:b8:28:91:3f:b7:04:98:
73:13:9e:5c:4a:eb:5d:f5:ed:86:80:cb:ad:fe:96:d5:be:75:
87:23:12:e9:7f:ec:58:7f:d4:7d:ab:54:09:61:1c:ac:bb:8a:
0a:a3:27:f3:c8:52:39:47:35:7d:06:64:44:77:8c:4a:27:63:
ce:21:81:27:c4:20:18:9c:7b:cd:3d:8b:94:f3:9e:a5:cf:f1:
fb:82:0d:a4:0e:3b:bb:a3:f7:3f:c5:34:7c:15:cb:4f:9e:59:
ad:46:c5:9c:bc:37:f3:89:04:ad:34:d7:47:1e:3a:77:e4:6a:
59:99:18:80:29:99:7c:dd:5e:60:db:22:54:73:92:69:7a:22:
e9:fa:44:35:11:7b:a4:ec:7b:6a:dd:c2:f6:94:13:6b:81:7e:
17:0b:3f:64:b4:23:4b:a7:a6:39:c1:04:8e:50:45:2d:c0:76:
26:19:9e:88:6a:58:f9:c3:e2:d3:74:5e:34:68:ed:e2:8c:e8:
51:bf:22:58:c6:a7:04:53:57:74:e6:97:6f:cf:d1:23:be:29:
71:61:4c:2b:8d:b2:a3:3a:40:8a:b0:72:c2:f2:3e:c9:a4:84:
1f:13:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:51:22 2026 by rpki-client