Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
File: R37BXKT5JNlmlnVFEk9lUxDSyXM.mft (raw, json)
Hash identifier: FjIDD2F69IxsbYjnUklYu676NNVYwKiWX3D6t6fZEbc=
Subject key identifier: C2:50:69:EC:8E:DB:65:D1:CA:03:12:2E:4A:A6:95:31:5E:08:3A:1A
Authority key identifier: 47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Certificate issuer: /CN=477ec15ca4f924d966967545124f655310d2c973
Certificate serial: 019D37C0B9867BFA9853DB59E14410A27A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
Manifest number: 07EE
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: R37BXKT5JNlmlnVFEk9lUxDSyXM.crl (hash: 7AZVWTmko2o/4fDdH6w/WbLKYsxUQyQW+o2NwzKuzfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b9:86:7b:fa:98:53:db:59:e1:44:10:a2:7a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477ec15ca4f924d966967545124f655310d2c973
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=c25069ec8edb65d1ca03122e4aa695315e083a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:44:3d:16:d9:31:ea:04:26:01:48:27:5b:
67:a4:2a:67:20:de:9b:df:9e:ee:90:02:1b:bc:99:
69:76:e8:e0:52:df:be:af:68:ec:de:94:5e:85:38:
1f:12:17:32:de:50:f1:ef:0a:1a:94:ec:8f:72:b1:
59:6c:79:ab:a7:1f:2a:1b:7f:ec:0c:93:87:07:2e:
ef:33:c9:e8:67:c0:85:31:d0:41:db:bd:47:9e:80:
66:07:4a:d0:06:ec:ed:cf:a6:66:5c:67:26:f5:df:
aa:b4:2e:99:be:c8:4a:2c:18:39:6d:06:ed:de:19:
e8:42:0f:06:5a:25:dc:31:2a:f9:06:15:9b:f6:34:
83:be:78:a2:0d:47:ec:bb:49:43:93:45:df:73:e4:
4c:6c:16:83:cd:2b:1e:62:a1:02:ca:f2:15:9b:72:
ec:26:06:6d:17:46:ed:75:9f:53:11:34:db:89:b0:
89:de:6e:73:fb:c9:35:bc:19:44:e8:3e:da:e0:e2:
7e:80:0f:73:7b:43:8e:93:0a:ae:6b:ec:7b:25:2d:
c1:de:81:bc:4e:89:8b:d3:a2:2d:d1:15:a7:ea:9f:
fc:ca:27:19:a6:a4:a7:d5:30:3b:37:57:5e:43:75:
a1:a6:9c:99:cb:30:e9:18:52:64:4e:c3:0c:cd:e1:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:50:69:EC:8E:DB:65:D1:CA:03:12:2E:4A:A6:95:31:5E:08:3A:1A
X509v3 Authority Key Identifier:
keyid:47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3c:9d:d0:41:81:ee:e3:d8:ce:ef:d7:c6:9e:ec:65:60:99:
de:2d:8a:87:3f:21:0a:2f:0e:c4:ec:e3:f9:45:6b:25:42:86:
e5:7f:2a:dc:22:52:ba:ae:bf:39:c4:d9:78:5e:9a:d8:3b:b5:
54:9a:aa:1d:e8:24:d2:9a:32:58:73:27:24:1d:40:ee:b0:b7:
74:89:99:23:71:38:eb:8d:f6:1d:93:d0:71:b7:dd:5e:9f:52:
8c:6a:10:25:72:cb:53:e2:e0:89:fd:d1:33:8f:a3:31:1f:8c:
91:6f:3e:9b:bd:13:5a:82:76:f1:7d:f5:80:8c:77:a1:c1:68:
de:a1:61:70:9f:0b:b2:ad:09:27:33:83:25:da:b2:e3:ad:b0:
e8:9d:93:3c:1f:ad:ba:81:0b:18:c5:92:98:0f:c1:b5:48:6c:
6a:7d:4d:59:8c:1c:9d:91:fb:e4:b5:dd:34:86:2c:0b:d7:18:
0c:ec:bd:03:8e:ef:4a:8d:3f:85:29:a8:6e:fe:23:1b:84:29:
11:eb:89:87:e2:05:39:ab:af:22:16:74:76:63:ce:16:12:8c:
60:30:1f:21:ce:4e:5e:87:11:e6:3d:33:d0:52:45:28:50:74:
e6:80:2b:b1:87:94:7a:d6:39:17:39:d1:3b:1a:0d:67:b6:20:
e9:c3:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:37 2026 by rpki-client