Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: upyPtRfh0gu6MF2tVMYnJemK15165Ww/KVy0iOSv+Bs=
Subject key identifier: F0:A3:81:C9:1E:7D:17:56:9B:90:19:6A:FC:A1:D8:E3:71:FA:86:D9
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 019CAAC649E4E42A18E82E2C88C2E81D0E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 07A5
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: teKleHRwesKH3tBhEbhF7fWwk4SDKUukDCxtSNkjfsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:49:e4:e4:2a:18:e8:2e:2c:88:c2:e8:1d:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=f0a381c91e7d17569b90196afca1d8e371fa86d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:11:5f:64:3e:b4:95:e2:cb:dd:c4:53:31:
a7:fb:5d:8a:f1:29:ec:91:5b:fa:83:b7:0b:1b:c3:
1b:8d:cb:18:ff:81:de:46:76:f9:a4:cd:82:35:98:
c9:ac:fe:9d:86:a4:3f:78:2c:e0:bb:ec:95:b7:6f:
2f:a9:ae:9a:fc:9b:68:5c:82:f6:3f:f3:53:0b:19:
49:3a:4d:93:35:08:1b:9e:60:19:55:4d:08:ad:d1:
b0:6f:75:e9:62:f2:ab:df:10:5b:44:fe:6a:ba:2b:
36:17:97:f6:b9:ac:20:6e:be:06:44:2a:32:94:21:
5a:c9:1e:4f:e7:7d:e2:ce:26:fd:df:8f:3e:58:ba:
f7:ec:e2:99:a4:a7:25:a5:54:0a:d3:ee:05:be:1a:
89:7c:ab:e5:89:42:03:6b:22:28:5c:0c:58:28:27:
09:1a:97:47:a4:55:dd:a9:f8:c4:bc:46:e6:25:87:
69:e8:e2:07:8f:9f:5a:17:69:fe:21:3c:9b:b4:26:
10:4a:4d:cc:34:7c:4a:7f:e7:01:48:c8:3d:47:7e:
11:7f:28:2a:59:88:8f:9d:d4:b1:51:1b:6a:31:49:
22:0d:d7:86:7c:a7:2c:e0:81:16:30:e7:77:e4:e4:
f9:f5:f6:84:7f:cc:35:c4:6e:5b:6b:31:5a:bf:c0:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:81:C9:1E:7D:17:56:9B:90:19:6A:FC:A1:D8:E3:71:FA:86:D9
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:65:84:85:fe:34:41:86:ef:00:48:a2:22:dc:aa:45:04:
16:3e:eb:9e:2d:a2:ae:82:cd:31:95:47:68:d1:ac:0f:80:2c:
8f:19:b7:c7:73:d0:c6:15:b1:5d:10:ea:d6:3a:3d:43:c0:d4:
1c:a5:51:63:19:e9:7a:7b:1a:04:8c:c4:ce:45:a5:fa:e2:80:
0d:a3:71:ef:5c:24:45:fc:d0:a1:9f:35:c2:9e:2d:cb:1d:15:
85:9e:bd:61:68:32:e0:f8:57:10:44:30:a6:a6:a8:36:bb:74:
0c:46:56:05:a9:e4:06:d0:e7:f4:6a:f5:78:c0:9f:6e:fe:72:
77:d4:fc:02:e6:61:cf:2b:c3:cd:81:41:80:cd:2f:06:04:b3:
c6:96:06:fd:da:b9:23:94:16:f3:c1:5f:a6:c4:2c:3a:d4:79:
64:b9:92:ea:62:0c:e3:4b:c9:62:a1:bb:b9:e2:77:06:11:19:
87:af:9f:1a:1b:a6:d7:ba:97:77:0f:03:25:f5:4d:a2:a5:5b:
4d:4e:38:d4:79:37:8f:73:a1:c3:67:74:09:04:da:17:6f:f0:
b3:75:3e:29:7c:dc:7d:95:e2:29:58:6f:0a:1b:b4:23:3a:ba:
f8:f4:dd:bd:49:75:8d:19:63:09:48:54:a3:1d:1d:04:4e:c7:
5c:91:2d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:23 2026 by rpki-client