Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: 6RYPwo3WvgJRgR5uZrMpqroR+8C6koPJI5oEYgQTawk=
Subject key identifier: D0:2B:D4:12:A3:50:28:8F:A2:65:E0:31:D4:8E:C9:A6:C4:87:E8:22
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019FA9AC6A183F5A4DEF35D8FD09E3FB9092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 12E0
Signing time: Tue 28 Jul 2026 17:01:16 +0000
Manifest this update: Tue 28 Jul 2026 17:01:16 +0000
Manifest next update: Wed 29 Jul 2026 17:01:16 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: GkxB55Ov1B2hIdZbwFvW99LDpw8b8Hni67XSBgoAWmk=)
2: FhwS6oj1IU2dmxLLYCr_Dh9nNPg.roa (hash: gw4ySzsoHkhiHwNr6SgUSv5IRZbxDqYLsZYznQCEK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:6a:18:3f:5a:4d:ef:35:d8:fd:09:e3:fb:90:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jul 28 17:01:16 2026 GMT
Not After : Jul 29 17:01:16 2026 GMT
Subject: CN=d02bd412a350288fa265e031d48ec9a6c487e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:9c:4b:ad:6b:8e:c7:4d:ff:b9:59:6f:52:
25:24:58:fc:91:1d:1a:19:f8:75:d8:22:04:03:dc:
5d:f1:03:b6:52:c8:ac:5b:9b:df:43:11:1d:54:db:
6c:5d:15:46:49:0c:dc:9a:30:99:17:e6:8b:b9:f0:
43:6d:40:74:94:8b:82:7d:df:6d:76:32:3c:65:d4:
b6:fe:19:7e:7b:90:24:47:e7:e5:59:a4:1b:59:e9:
28:d2:e8:fe:32:18:03:80:75:62:f5:25:20:eb:29:
2e:94:68:0f:5d:0d:f2:db:79:2b:a3:39:91:63:0c:
73:48:db:cb:40:37:bc:a8:71:1e:81:07:14:98:77:
1b:e6:f3:78:7d:6d:cc:5e:6a:ce:8f:92:65:12:7b:
71:60:f9:9e:82:1c:ce:87:ec:4a:2b:f6:80:30:41:
5d:d3:81:a7:2a:cb:f1:0b:ab:81:74:78:dd:05:9f:
22:9b:f7:a0:ae:38:60:81:c8:8f:9e:a6:2e:9c:04:
da:ad:da:19:cf:b9:7d:cb:81:0f:c3:3c:6e:3c:f6:
a0:fa:48:84:54:71:3d:21:b6:ee:7e:ca:ca:97:0f:
da:38:a8:4f:47:b9:8d:c4:61:d5:af:7e:e2:54:48:
3a:e7:f4:7f:82:71:e4:fe:75:0a:df:f4:2d:5c:3d:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:D4:12:A3:50:28:8F:A2:65:E0:31:D4:8E:C9:A6:C4:87:E8:22
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:7e:5d:11:82:ec:89:82:66:ae:0b:50:ea:5c:cc:5a:07:
23:c3:ca:65:45:37:1d:6d:3a:2e:f9:d4:33:5a:25:3e:f6:15:
fc:7e:11:a8:c9:b7:db:da:62:14:02:11:82:66:df:8c:40:98:
89:5d:cd:b1:a2:ab:06:80:2a:09:57:0d:e5:af:7c:37:5e:22:
28:43:52:6d:c1:b7:20:f6:09:99:20:19:d9:bd:c9:33:bb:ed:
55:0f:ee:62:68:a1:6d:6f:76:b8:3a:f1:c1:8f:08:5d:0f:7c:
e2:60:59:47:3a:1d:19:fa:e1:d1:49:01:f3:c9:11:22:c2:fe:
db:de:d7:e8:c0:07:93:a8:71:35:e7:db:16:e9:bc:5a:65:a3:
71:8e:ef:8c:09:f0:bc:64:e3:75:d2:70:fc:19:e4:34:7f:5a:
7c:fc:5c:29:ca:e0:00:61:dd:15:69:d6:cd:0a:8b:c2:ec:a6:
ec:6e:f0:d4:fc:c3:a6:50:4a:f2:04:32:c1:3b:ac:29:5a:f2:
a1:a0:da:95:23:17:13:25:ac:9d:d5:50:9f:58:48:9f:7b:92:
61:61:a7:90:8c:3e:ed:b7:69:95:c2:3d:46:7d:e4:05:a0:32:
3d:6d:b5:47:9f:59:ab:b9:b2:0a:51:ed:be:41:eb:65:af:04:
f7:32:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:54 2026 by rpki-client