Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier: pQiL7UfeIa9/20LJodR9wN6XoJXtJ7DzRcf6sPLx0H8=
Subject key identifier: 95:3A:71:57:05:D0:75:82:17:2D:94:4E:E7:9D:7F:92:3F:FC:12:23
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 019CAB345954FCE5A31465A8969C074A0C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: 28aRdczFMy_NGN1l2BbHpUWcrsw.roa (hash: bMy6fvXop3dbRIfN9XbRZ3EVtlEMOV2r+B3tLBXy9NY=)
2: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: 4dycbDUun6N7lF6oEjYdf8O9AqGkDlLAOZ4k4aiHnhA=)
3: GsSJK2WMglrPgjnIUlUN6J5KRT4.roa (hash: UXgOBaxQJIWBvmn7laZX7AqFV1FM6ImsbsA9AanhVOw=)
4: UONacHTOKV6tfdjsDjhmW727_2Q.roa (hash: ydhSQx8wYrCZQamEIIKw85WTZPbrar6HXueA28NPho4=)
5: jaGFsM0UBl8DRADBm27ud6fxPc4.roa (hash: B/rg1ki5B0ZrfcN/NiwVQUlyMUumL+prN8/wqDje5I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:59:54:fc:e5:a3:14:65:a8:96:9c:07:4a:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=953a715705d07582172d944ee79d7f923ffc1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:3b:b7:43:35:0c:d9:08:75:53:56:3b:0e:
68:ee:8a:ed:07:23:fd:0e:3e:a1:53:ae:36:a5:de:
d1:00:5d:79:23:ef:ce:70:5a:c3:c3:89:5f:e6:65:
b4:4b:75:6b:ad:ce:8f:68:4b:83:4a:f4:1b:39:4f:
59:cb:a1:f7:67:7f:f7:94:a9:55:58:1b:3f:6c:23:
35:c4:21:da:79:66:a2:6b:22:75:76:41:6f:1e:3a:
79:02:6f:36:8c:c3:68:a7:74:8f:5e:ab:91:b9:e0:
3e:f2:a8:27:55:40:3e:a0:73:63:d9:fd:54:8c:d6:
71:08:bd:53:a8:87:d0:86:13:52:4d:39:58:07:f0:
45:06:c8:33:6d:7c:ca:c2:76:08:0e:29:a5:60:34:
dc:bc:0c:37:8b:ed:47:70:5c:76:b4:2e:1f:6e:e9:
33:cb:6e:dd:c2:4f:fb:dc:5b:74:5f:b4:c7:3c:6d:
9c:d6:2b:c0:46:8c:a3:71:0c:51:72:3e:db:6a:4f:
f7:75:77:bf:01:8b:de:3b:68:c0:4b:b2:76:2f:91:
44:b1:00:9f:f8:8f:c9:96:af:76:dc:21:04:31:9e:
c5:2a:46:90:0b:b4:11:b2:9b:e4:d2:2f:f4:14:a8:
d9:18:18:10:c6:92:9f:d3:06:d2:fe:8d:86:2c:8d:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3A:71:57:05:D0:75:82:17:2D:94:4E:E7:9D:7F:92:3F:FC:12:23
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:4a:7f:47:39:88:88:80:dd:fd:fd:b8:58:10:67:29:89:
c1:0d:c0:7c:89:a7:be:79:72:62:06:09:07:cc:8e:99:0b:42:
64:78:65:1e:5b:96:a6:32:ae:0e:ed:45:84:03:b6:d5:89:7e:
da:21:e2:10:b4:84:7f:d8:bd:89:77:37:ad:bc:b4:17:81:95:
a9:fa:58:88:c2:11:a3:0f:f0:88:9d:5a:c6:d7:8b:60:71:c8:
0d:75:32:cc:53:1c:85:2c:1c:55:64:1c:3f:6a:36:d5:58:49:
0c:13:38:e8:64:f4:75:cf:be:d7:99:34:15:c2:71:02:ea:45:
11:d1:b5:d6:a7:b3:ad:fc:47:7b:fb:5e:21:26:61:06:26:61:
43:9a:9c:6e:12:23:84:39:66:e5:c1:1a:3e:a8:7b:2f:21:4e:
2d:35:5c:ec:60:a3:6a:6b:9d:41:51:7e:07:e2:ea:ef:22:5b:
c2:48:9f:bd:71:be:03:38:1a:23:0d:b0:eb:18:cc:1d:4f:db:
66:ea:0e:87:44:d9:da:1e:8c:3c:f6:bf:1e:82:c2:3f:51:e7:
bf:a4:d8:46:63:ba:86:9e:a6:79:62:4c:3d:92:9b:04:50:66:
ab:43:d0:f7:2d:c5:5c:ac:db:5c:d1:b9:55:49:10:8e:9e:db:
34:51:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:58 2026 by rpki-client