Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
File: 37L5jV2TMMKCX8ikvqWOWitKvvM.mft (raw, json)
Hash identifier: YwSR6rjAh+GvwF0LGw3jwnDAp3m/9NAQ+K/N4A1hB4I=
Subject key identifier: CB:7D:F9:4B:C8:EB:07:6C:3E:03:F5:DF:53:DA:23:03:63:1E:01:2D
Authority key identifier: DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
Certificate issuer: /CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Certificate serial: 01A0BD9D9668D76AB3018BE943E1522B220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
Manifest number: 011A
Signing time: Sun 20 Sep 2026 07:00:16 +0000
Manifest this update: Sun 20 Sep 2026 07:00:16 +0000
Manifest next update: Mon 21 Sep 2026 07:00:16 +0000
Files and hashes: 1: 37L5jV2TMMKCX8ikvqWOWitKvvM.crl (hash: lGGSyZppbOmWTXZLDTbCoK5ALIzSikYPzAMoec/Tqe8=)
2: ORzFbjO5Nia0kcigCY2OWktPzNg.roa (hash: H6lUS3aRzmCFN45+2w1+AEQR77kkwodYeALKmKNgXVM=)
3: _aahlkyboV8i3HTyR4FJOxLSMv4.asa (hash: dD7N2xKq7irXsIrhG/fQS/8UXa6cF4atm0nL0eK5Z0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:96:68:d7:6a:b3:01:8b:e9:43:e1:52:2b:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb2f98d5d9330c2825fc8a4bea58e5a2b4abef3
Validity
Not Before: Sep 20 07:00:16 2026 GMT
Not After : Sep 21 07:00:16 2026 GMT
Subject: CN=cb7df94bc8eb076c3e03f5df53da2303631e012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:b7:eb:57:de:7e:b0:a5:b9:ed:a5:43:f9:
bb:bb:48:41:8b:12:8b:16:ce:4c:72:53:b4:fe:9c:
e6:60:12:fc:95:b2:0e:69:6e:fc:96:f5:60:c5:78:
90:b4:2f:47:85:d4:6c:e8:3b:73:49:4d:b3:7a:5e:
27:8f:4f:f2:13:20:dc:98:b7:2c:9c:83:58:f0:f4:
32:19:7e:94:40:b5:04:b2:38:2d:31:e1:d5:0f:51:
da:e9:14:4d:1f:eb:82:4f:e0:70:86:51:a6:cd:33:
09:0d:ad:b3:9a:89:8e:19:b9:6e:c5:68:01:ad:1d:
d5:68:da:0d:56:59:ff:70:1c:e3:48:3c:de:cf:e7:
d2:84:22:b4:53:50:24:c1:e9:49:b4:ca:ce:5f:e8:
dc:d9:d5:de:59:a0:ff:3d:90:b7:bd:c2:6f:a3:90:
71:3b:a1:b9:8a:a4:39:67:7a:84:75:df:94:4c:ec:
67:22:df:8c:32:fe:f4:a5:dc:d5:c3:a8:06:5d:43:
16:90:05:db:cc:1a:ac:12:e4:3f:8b:eb:50:c9:a4:
b9:e8:47:3c:b4:45:7a:56:a7:bc:53:16:65:85:c9:
47:2e:1b:cb:a4:9b:9d:a1:0d:ae:7f:21:e9:92:6a:
82:f6:0f:fd:8e:b8:b6:4a:6b:d4:69:72:4d:17:66:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:F9:4B:C8:EB:07:6C:3E:03:F5:DF:53:DA:23:03:63:1E:01:2D
X509v3 Authority Key Identifier:
keyid:DF:B2:F9:8D:5D:93:30:C2:82:5F:C8:A4:BE:A5:8E:5A:2B:4A:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37L5jV2TMMKCX8ikvqWOWitKvvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0e05d6-c651-4c13-a3d7-d0b6979477e0/1/37L5jV2TMMKCX8ikvqWOWitKvvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:71:f8:48:42:ad:7a:d6:9d:16:11:eb:ef:c6:10:9e:76:0b:
65:e0:fc:0d:46:6d:72:f8:32:eb:2c:a1:8e:0f:38:ac:4c:3a:
64:9d:ac:f1:83:9a:52:63:66:da:ec:d1:7f:da:83:56:6c:02:
dc:b7:38:82:bf:93:42:84:d9:48:8f:fb:94:e6:25:bf:0b:19:
e2:9f:2a:57:73:86:6c:19:74:b0:98:13:42:a6:6e:59:51:bb:
91:b2:67:00:f6:bc:c5:35:2a:05:e4:3a:8c:a3:04:a8:8d:a6:
6c:9d:c8:45:98:f9:fe:13:17:a1:aa:f9:b9:ef:08:5f:bc:5c:
e7:89:91:ab:71:74:64:a8:28:20:b2:a6:36:ef:0b:d9:a2:c3:
e9:ef:f7:66:b3:58:42:95:0d:2a:d3:3d:2d:4b:7a:05:e6:7b:
19:68:49:7b:c9:78:ac:34:4b:47:e5:d9:c7:16:8f:12:7f:55:
a5:12:68:2c:c8:b5:21:4e:dc:3c:80:87:b8:91:64:37:ab:c8:
25:1f:06:9d:25:c7:bd:a7:d2:11:a3:a3:94:a5:c0:85:16:6d:
de:5e:f4:80:ac:a7:dc:71:51:82:d3:d0:20:72:04:a0:f9:67:
a8:9d:2d:fd:41:41:01:94:fa:f7:40:63:0c:b7:34:a9:15:29:
14:b3:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:49:53 2026 by rpki-client