Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
File: 37L5jV2TMMKCX8ikvqWOWitKvvM.mft (raw, json)
Hash identifier: 5ZJEvs5LUtCiqXBGi51VFQFfhT8ehSIISFGoN+a+BMk=
Subject key identifier: 8D:7C:98:F8:29:24:80:38:CF:A1:55:A2:30:92:13:7F:2F:FC:9C:4A
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Certificate issuer: /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial: 019FA78714F89240F04C3741BACCE94B6B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
Manifest number: 8A
Signing time: Tue 28 Jul 2026 07:01:15 +0000
Manifest this update: Tue 28 Jul 2026 07:01:15 +0000
Manifest next update: Wed 29 Jul 2026 07:01:15 +0000
Files and hashes: 1: 37L5jV2TMMKCX8ikvqWOWitKvvM.crl (hash: n1oo0G+EjE6EYzNNMLjFIN8ngM80RSCHfu6VREOGFc4=)
2: ORzFbjO5Nia0kcigCY2OWktPzNg.roa (hash: H6lUS3aRzmCFN45+2w1+AEQR77kkwodYeALKmKNgXVM=)
3: _aahlkyboV8i3HTyR4FJOxLSMv4.asa (hash: dD7N2xKq7irXsIrhG/fQS/8UXa6cF4atm0nL0eK5Z0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:87:14:f8:92:40:f0:4c:37:41:ba:cc:e9:4b:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Validity
Not Before: Jul 28 07:01:15 2026 GMT
Not After : Jul 29 07:01:15 2026 GMT
Subject: CN=8d7c98f829248038cfa155a23092137f2ffc9c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:d1:3d:23:d9:0a:45:6e:90:61:a7:ae:bb:
9d:c1:30:b6:e2:bb:10:ea:4a:87:bf:ba:15:87:af:
42:b5:5d:a6:4a:d7:7a:8e:c6:69:c6:0e:d8:99:68:
f2:21:cf:64:b5:d7:6b:6a:cc:c4:e8:8a:41:9e:f3:
f7:a5:ef:ff:18:3a:ef:1f:28:a9:17:38:8b:d4:4f:
6c:d0:28:e3:ce:83:6c:08:77:d9:ec:34:51:e9:cc:
5b:9d:3d:e3:99:a7:a5:06:01:7b:d7:5f:05:24:8f:
e3:2e:8b:b2:7a:6c:11:06:de:51:d8:43:f0:b4:20:
ef:a6:37:51:6d:a7:40:48:d1:6e:41:b4:00:a3:f0:
03:bc:a1:8a:95:40:87:5d:1c:a0:4a:5c:a2:2e:2a:
10:56:98:93:7f:5a:95:4c:95:d6:d7:fb:a4:8d:c8:
14:85:62:f0:df:23:45:2e:f1:5a:ef:7c:20:4c:99:
40:f6:a2:d7:94:4d:fa:dd:40:35:ee:a8:74:a2:33:
fc:e6:3f:59:be:6c:1a:92:ff:1e:15:da:c0:86:ba:
c2:46:86:35:ff:1b:84:e3:f1:60:f8:13:33:1c:61:
6e:59:0f:fe:3e:82:ba:f9:a7:66:b6:de:07:a9:1f:
e4:88:e8:3a:29:5f:be:f1:b0:a9:82:da:9c:ed:aa:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:98:F8:29:24:80:38:CF:A1:55:A2:30:92:13:7F:2F:FC:9C:4A
X509v3 Authority Key Identifier:
keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:dd:df:87:a8:88:cb:e1:f9:35:d0:da:ad:fd:bb:84:a0:46:
1d:74:ac:c2:b0:51:4d:2a:9d:a1:87:c4:a6:d8:cb:ac:d5:83:
80:dd:60:ee:5e:03:8d:4d:a0:29:bd:03:b7:f1:8b:68:be:7e:
75:bd:3b:95:54:15:a3:64:c5:4a:dc:01:bd:f0:40:0a:1c:be:
18:22:be:09:39:e9:ca:64:11:e4:53:b7:9a:b9:71:3d:39:0a:
bc:fc:1c:ca:02:f8:3d:c5:8b:28:79:bb:bd:c4:8d:f1:65:60:
93:f9:72:5a:3c:0f:af:6d:29:8f:1c:b1:1c:b7:95:0f:72:3a:
4d:e1:ce:35:df:64:0f:55:8f:e2:af:a5:2f:27:ae:65:ef:d5:
fa:b6:c6:56:8d:18:1f:7b:67:05:c8:df:ec:d0:f9:b1:76:37:
92:93:27:e1:e8:79:4a:ee:c6:a3:88:54:5a:d6:ac:ec:7b:d3:
b9:e5:11:77:27:2e:44:d9:d6:2e:94:8e:f7:34:54:24:1d:35:
24:41:f4:1b:7a:6a:dc:fa:6d:bb:18:77:d8:5c:be:39:83:4d:
e5:88:3a:0d:bb:4a:14:cb:c3:87:9a:76:9a:ef:72:90:4c:70:
12:d8:fc:bc:15:8c:0e:b8:5b:3e:35:56:2b:5b:ca:08:9b:05:
4d:40:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:55 2026 by rpki-client