Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: TSiIdAzx152RX4jis15ptbnhzgll9Y33T1UbalxgtwM=
Subject key identifier: 47:81:8F:CB:85:5F:85:76:78:6A:AA:E6:6F:63:AB:E3:9C:7B:1D:56
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 019F17C26C4856CE421C3B359A793A087A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 0D28
Signing time: Tue 30 Jun 2026 09:00:45 +0000
Manifest this update: Tue 30 Jun 2026 09:00:45 +0000
Manifest next update: Wed 01 Jul 2026 09:00:45 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: PRKlQbgm6wkHRsfnGW77jZ7qm5rjNew67WPfiG0Cm5o=)
2: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (hash: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:6c:48:56:ce:42:1c:3b:35:9a:79:3a:08:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jun 30 09:00:45 2026 GMT
Not After : Jul 1 09:00:45 2026 GMT
Subject: CN=47818fcb855f8576786aaae66f63abe39c7b1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:f4:65:1c:6b:ae:f7:d4:1b:45:86:e6:c0:
ac:4e:fa:cb:cb:3e:bf:33:2b:b0:4f:18:c1:34:1b:
99:68:99:5e:9d:10:44:fb:75:c1:b5:77:17:b1:0b:
9c:da:f5:7d:3a:50:70:93:4e:2c:2f:23:55:63:9c:
a8:14:c0:75:19:cf:24:fc:a6:87:1f:a2:81:0b:65:
7a:44:9d:ec:82:00:0f:7e:95:7c:c1:5d:67:61:98:
21:02:99:9b:2f:cf:2b:15:88:eb:3e:b1:3a:5c:dc:
24:4f:ea:bb:8b:53:17:01:37:e9:74:da:ad:d7:cc:
97:a0:bd:f2:4c:12:4e:44:e8:4d:a7:4b:df:41:d5:
4e:05:6c:6a:65:fe:6b:d9:1c:e2:c3:ff:9c:5e:4b:
a2:d8:04:59:06:67:60:6c:fb:2c:40:3e:7f:73:f4:
c6:20:ad:1a:21:44:24:bc:ab:63:32:e8:26:cb:63:
86:50:48:f2:7e:e3:c3:24:d5:05:d5:55:73:0e:17:
2f:91:d2:da:e5:84:7f:62:52:21:92:a0:33:50:94:
b7:d5:09:2c:b9:d3:7b:7e:b5:0d:45:1f:1c:a4:8d:
81:17:67:e2:db:bb:b2:eb:56:cd:dc:92:09:66:36:
66:be:ce:6e:c2:db:aa:f6:4d:1f:f0:30:f2:77:4f:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:8F:CB:85:5F:85:76:78:6A:AA:E6:6F:63:AB:E3:9C:7B:1D:56
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:f5:ec:88:61:d0:ce:1c:55:53:4e:1a:54:93:ee:e3:99:
03:df:4c:af:37:5c:f9:86:2e:39:75:6f:ea:2b:97:71:34:64:
75:c7:e6:50:fd:79:1b:2a:e0:62:2a:d7:98:7a:13:da:ec:e9:
f1:8b:95:3e:23:16:6a:fb:82:e1:cf:86:07:27:a1:72:b8:3c:
fb:ef:35:89:ee:9f:1a:7c:4c:b0:3f:a3:f5:c2:65:de:80:e9:
a4:7b:4b:1b:e1:b7:02:d5:37:a8:f0:8d:0e:dc:b4:b4:fc:19:
93:b9:72:06:fd:03:b7:13:51:2f:ff:a8:89:d0:47:ab:47:8c:
85:ea:eb:97:18:84:43:80:67:f8:55:06:ea:a9:98:9e:2a:8f:
d7:08:84:ba:dd:e0:4a:f5:0d:c0:4d:f3:46:98:37:f4:45:10:
2d:58:43:8c:ef:b4:f9:b1:6c:2d:7d:79:e7:94:70:49:c9:75:
e4:f5:f7:c9:f8:ec:57:b1:05:eb:92:4b:82:96:a2:4d:34:dd:
81:95:c9:2c:3e:c4:37:67:2b:5c:81:17:4c:be:3c:c2:91:be:
ba:d6:10:23:5a:34:df:f4:03:aa:82:d5:3e:18:df:c9:e7:da:
8d:7f:9d:4e:bf:f1:83:80:79:9c:97:08:cd:6e:81:a0:25:b1:
78:1b:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:25 2026 by rpki-client