Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: oETfZhDif0VWF+fquDc9zmb3D3ejVGBRfXxm2+Zkpb0=
Subject key identifier: 8C:95:96:9B:86:BA:D3:DD:44:F9:E2:15:36:62:CF:F3:FC:5A:29:90
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 019D9A3EE3B183AFBAAC8E5C028E528F4CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 0821
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: 9HY0uXZ+iXFkCXbMiv/VwQbl2hnBXFKaWd634TxQAVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e3:b1:83:af:ba:ac:8e:5c:02:8e:52:8f:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=8c95969b86bad3dd44f9e2153662cff3fc5a2990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:c5:89:01:74:55:9f:2d:d5:5b:55:49:a8:
da:84:e0:ff:d6:56:63:d3:0d:ce:13:6e:26:0d:9d:
de:af:fc:de:70:05:3b:4c:f8:d8:45:ff:e5:cc:2a:
52:93:cd:5f:1a:d4:e7:e9:3c:1d:30:48:69:4b:65:
ec:ff:8a:56:f8:da:d1:21:1a:d3:bb:8a:f9:0f:ef:
b7:38:b2:3c:92:b4:e6:90:0b:7e:26:49:96:41:79:
45:8b:e3:89:91:c4:56:a3:79:91:48:89:1b:16:04:
ef:b3:be:14:21:e3:7d:70:3b:bb:dc:52:0f:27:c8:
f7:49:5d:bf:52:9e:57:fd:68:40:83:24:27:ef:95:
f7:12:0f:53:e7:9c:8c:4f:d3:b5:6a:26:4e:69:eb:
93:f8:cd:be:ef:ed:de:f1:30:19:55:4c:b0:24:b9:
67:72:81:20:ca:73:a5:1d:d6:76:b7:fa:af:01:b8:
e0:2c:16:d2:cd:55:3d:a3:48:21:a6:19:37:b0:5a:
56:bc:51:e1:f7:56:ac:7a:42:de:4f:cb:63:74:83:
b6:52:6b:cc:26:57:ca:d4:84:d4:73:78:ce:da:c2:
fd:be:d7:c6:e4:35:2d:bc:c0:8e:ac:12:d6:ad:60:
48:06:6e:eb:09:9b:3d:06:ce:ab:65:b0:77:02:2c:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:96:9B:86:BA:D3:DD:44:F9:E2:15:36:62:CF:F3:FC:5A:29:90
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:87:52:a1:f0:dd:28:f9:46:19:16:0a:e8:c1:45:21:be:87:
ca:31:b1:52:90:ad:4c:bb:88:c3:e2:55:ea:07:20:ff:4f:20:
89:12:0a:f3:c5:d4:71:dc:82:fd:1e:c5:c2:d4:65:06:71:00:
52:13:7c:29:e5:c2:1d:6e:cb:02:53:b0:a6:b9:56:69:bc:21:
e0:df:a0:aa:70:10:04:69:87:b9:ad:ff:bc:d6:51:4f:f4:c3:
6d:24:d3:d6:48:3a:27:1d:d2:9d:65:31:38:17:39:f0:73:4c:
b1:c9:a1:7e:fa:77:83:0e:4e:66:65:21:81:80:8e:3a:e4:df:
81:25:6e:9f:03:82:fe:e1:0a:8c:60:d1:34:b8:00:2a:29:98:
d5:02:df:ee:21:fd:91:2c:f6:03:c5:fb:a1:67:97:38:37:82:
f2:5b:09:1e:c8:ce:82:7b:03:9c:3b:26:51:95:04:e6:35:d2:
a9:90:0c:8d:86:63:85:a1:ab:56:e8:1f:35:7f:a6:78:86:ff:
47:3b:84:98:0b:79:70:8a:3b:e0:6c:dc:33:3a:8c:1b:e7:ff:
b5:b5:77:37:1d:d8:15:40:42:fb:9d:13:a3:5a:4c:11:02:ab:
7f:2a:2c:aa:d6:a8:31:06:6a:0a:0d:c5:11:22:81:8c:a1:cb:
da:71:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:13 2026 by rpki-client