Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: rf8pY7YUy3EUgxJhKmr3bzhQ7ACbOMCPhQsDapmSfSQ=
Subject key identifier: 7C:B7:E9:5C:4C:88:AF:F8:30:5E:FD:03:68:38:5D:34:11:90:BA:45
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 019CABD94245B07ADA582FB540079A311573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 0BE7
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: CclWJ8gR4GOhbaAb0GHNNS1u8TCnrVVV+ho2A08sNRg=)
2: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (hash: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:42:45:b0:7a:da:58:2f:b5:40:07:9a:31:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=7cb7e95c4c88aff8305efd0368385d341190ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:0d:1e:6d:3b:bd:ea:db:2f:99:46:8b:10:
6c:e8:ef:77:19:b3:9f:13:47:9f:7e:7c:48:54:e7:
30:a7:52:46:0e:8a:91:c2:42:db:5f:c1:f6:47:35:
81:c2:fa:1b:dd:f6:78:f0:6a:f7:f0:69:3e:ab:10:
d2:dd:f8:0c:90:42:3a:05:34:dd:b4:00:ca:e7:41:
4b:2a:35:55:61:de:70:df:04:e6:89:ae:1c:73:b7:
39:ac:48:a2:5c:53:aa:67:00:c8:a9:8f:81:8d:c5:
9f:37:02:a3:e5:69:35:b5:2d:df:30:e0:49:05:44:
b0:e5:47:5a:d1:c5:17:53:7c:56:f2:4a:a7:b6:a2:
7d:a3:9c:83:bf:63:19:e4:d4:ec:09:c9:c5:6b:9c:
bf:5b:05:f4:a1:ee:34:4b:db:cc:2f:01:99:b0:4f:
54:4a:f6:a8:cb:1c:9a:c2:24:94:0e:3e:6d:bb:56:
64:d5:6e:92:49:a9:85:74:75:85:fb:e5:09:f0:cc:
64:d0:50:30:fb:f6:a7:4a:5b:6a:4c:95:8e:16:bf:
3a:0d:a8:86:d3:03:9f:d0:95:a1:59:79:bf:d8:88:
2f:e6:22:a4:11:4d:bb:34:b0:c7:08:1b:49:83:30:
1b:a7:ce:15:83:15:82:b7:69:25:a4:b6:f7:92:53:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:E9:5C:4C:88:AF:F8:30:5E:FD:03:68:38:5D:34:11:90:BA:45
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:01:62:6c:f4:3d:d0:a3:44:68:b8:e6:53:08:ca:b7:b5:
67:d6:50:e3:18:ec:ce:c3:6e:76:a6:0a:ed:ee:2c:40:59:26:
6a:70:62:e7:63:15:4b:3c:2a:8e:b8:89:28:3a:dc:0d:8b:bb:
9f:09:b6:87:c9:40:99:d8:32:eb:8e:bb:30:38:36:a7:83:63:
0b:62:be:bb:c1:de:e9:69:ab:a7:df:60:eb:e3:95:de:dd:12:
4c:ce:fc:9f:f8:cc:f5:b1:c7:51:f5:c3:2d:5a:4c:0d:b6:fb:
77:3e:65:15:20:4c:ee:0c:6c:52:37:86:5d:71:41:b4:c7:4b:
9d:c6:4c:80:81:89:d1:f6:f5:c6:94:b0:af:c4:a9:a8:4d:b9:
3c:15:c8:3a:bd:76:7a:aa:5c:23:37:0f:46:7f:10:3d:f5:75:
db:ec:14:af:33:99:c9:ab:fd:33:cb:91:b1:1a:eb:f3:1b:45:
6b:d6:a8:7f:d6:02:ac:72:b1:80:e6:08:96:aa:63:b3:b8:c9:
19:b5:2b:b5:d5:87:a3:ca:b5:cb:e3:8d:72:73:f1:be:06:68:
a2:9c:e9:6a:7e:83:1c:fc:c2:fa:e8:0b:8a:f6:e4:86:3a:02:
f1:c1:5b:c5:74:6d:93:cd:70:cc:ed:c1:32:0f:93:7e:6a:29:
1a:ab:3c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2UJFsHraWC+1QAeaMRVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhkOTE0MDUwMmM5ZTAzNTMwNTE4OWJmNjU4MjM0ZGIx
NGY1NGMwHhcNMjYwMzAyMDAwMTA4WhcNMjYwMzAzMDAwMTA4WjAzMTEwLwYDVQQD
Eyg3Y2I3ZTk1YzRjODhhZmY4MzA1ZWZkMDM2ODM4NWQzNDExOTBiYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9oNHm07verbL5lGixBs6O93GbOf
E0effnxIVOcwp1JGDoqRwkLbX8H2RzWBwvob3fZ48Gr38Gk+qxDS3fgMkEI6BTTd
tADK50FLKjVVYd5w3wTmia4cc7c5rEiiXFOqZwDIqY+BjcWfNwKj5Wk1tS3fMOBJ
BUSw5Uda0cUXU3xW8kqntqJ9o5yDv2MZ5NTsCcnFa5y/WwX0oe40S9vMLwGZsE9U
SvaoyxyawiSUDj5tu1Zk1W6SSamFdHWF++UJ8Mxk0FAw+/anSltqTJWOFr86DaiG
0wOf0JWhWXm/2Igv5iKkEU27NLDHCBtJgzAbp84VgxWCt2klpLb3klNJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy36VxMiK/4MF79A2g4XTQRkLpFMB8GA1UdIwQY
MBaAFN+42RQFAsngNTBRib9lgjTbFPVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgt
NDFlNzNjMWViYWUxLzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgtNDFlNzNjMWViYWUx
LzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba0BYmz0
PdCjRGi45lMIyre1Z9ZQ4xjszsNudqYK7e4sQFkmanBi52MVSzwqjriJKDrcDYu7
nwm2h8lAmdgy6467MDg2p4NjC2K+u8He6Wmrp99g6+OV3t0STM78n/jM9bHHUfXD
LVpMDbb7dz5lFSBM7gxsUjeGXXFBtMdLncZMgIGJ0fb1xpSwr8SpqE25PBXIOr12
eqpcIzcPRn8QPfV12+wUrzOZyav9M8uRsRrr8xtFa9aof9YCrHKxgOYIlqpjs7jJ
GbUrtdWHo8q1y+ONcnPxvgZoopzpan6DHPzC+ugLivbkhjoC8cFbxXRtk81wzO3B
Mg+TfmopGqs8RQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:28 2026 by rpki-client