Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
File: 37htXnTBI0828hmwXXQ7s6Lir9o.mft (raw, json)
Hash identifier: jmM1aQjw2frkUys5gRN2DGNUTNegJQoRsH0BR2C64SY=
Subject key identifier: 55:7C:43:C0:DC:A5:6D:8F:52:C7:48:40:2E:51:36:24:E9:4E:92:96
Authority key identifier: DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
Certificate issuer: /CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Certificate serial: 019D1BA444BB32D79C8AA1EB9E33A97076A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
Manifest number: A4
Signing time: Mon 23 Mar 2026 17:00:43 +0000
Manifest this update: Mon 23 Mar 2026 17:00:43 +0000
Manifest next update: Tue 24 Mar 2026 17:00:43 +0000
Files and hashes: 1: 37htXnTBI0828hmwXXQ7s6Lir9o.crl (hash: ZDHWEEPLLl+LNFZM7z1sCM8DuKRAwX3Jqz8ODUw4Z4E=)
2: pjVyRWgLsMdox-VVuZ-NaPLETvs.roa (hash: 9UbRxa/hD4Pj6lxQzvJSYegiW7ncLSeA+lrKDXMCizI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:a4:44:bb:32:d7:9c:8a:a1:eb:9e:33:a9:70:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Validity
Not Before: Mar 23 17:00:43 2026 GMT
Not After : Mar 24 17:00:43 2026 GMT
Subject: CN=557c43c0dca56d8f52c748402e513624e94e9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:80:21:f8:98:fb:22:df:34:fc:43:41:25:
72:19:a4:b3:33:ee:b5:25:0d:b8:39:d7:95:dc:89:
aa:6b:6a:4a:52:b9:b9:da:ad:11:55:0b:5e:5f:b4:
4f:09:9b:16:c3:62:1c:22:b3:51:8e:a6:25:10:9a:
6f:97:70:81:e6:e7:fe:eb:b8:79:35:f1:e0:8e:2b:
b6:5c:0b:ec:6f:3e:f6:24:74:bb:ed:f7:f2:da:a7:
bf:f9:63:34:59:1d:db:1d:00:3e:08:86:1b:6f:0f:
e8:aa:01:f3:4a:9c:a6:6b:11:fd:8a:15:cf:a0:56:
c8:ec:c4:cf:ce:4c:be:06:b3:72:33:d4:ff:51:b8:
d9:66:94:07:ae:c3:7e:54:b9:d7:87:09:54:08:97:
0e:5e:32:d6:4e:ed:fe:74:5c:6c:a1:5d:10:68:78:
44:d9:ef:f1:d4:9c:5c:6e:4c:24:8e:89:08:05:b9:
88:2c:6b:b0:cc:dd:03:b1:69:55:4f:22:65:5b:de:
6d:75:33:a6:5c:50:a7:4b:36:58:0b:96:22:a6:78:
75:48:4f:30:65:02:9a:a6:89:1a:61:67:75:dd:07:
2d:e3:71:fa:c0:32:07:cd:04:5d:cf:a9:dd:b1:32:
c0:1c:c7:d2:00:01:8e:97:e1:b8:dd:77:c7:4c:f3:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:43:C0:DC:A5:6D:8F:52:C7:48:40:2E:51:36:24:E9:4E:92:96
X509v3 Authority Key Identifier:
keyid:DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:cb:67:ce:ed:8b:dc:83:fc:3d:d1:5a:32:6b:fc:28:79:
f0:ca:42:6d:ec:6c:60:1b:81:b9:7f:6c:11:24:5b:fb:4a:46:
39:6f:3d:54:89:93:66:7c:e0:2d:b4:f3:69:c1:3b:63:a7:69:
ed:56:7c:a2:66:09:10:fc:1e:a9:ed:3e:cc:93:53:42:6e:ab:
ed:48:4e:bb:80:fc:f8:2e:c6:cb:4b:75:01:ab:f4:b6:74:1c:
4f:6a:3e:52:7d:36:67:0a:a1:0e:db:e4:6a:d3:6a:e6:50:10:
6b:ce:8a:87:4e:9f:6c:f5:d0:18:4f:13:70:91:f3:6c:12:7f:
59:52:9e:6e:08:f1:bd:49:44:2a:24:68:e4:45:0c:ff:8f:38:
54:f3:1e:bd:d8:87:06:4e:ac:c9:53:48:c0:9e:7c:e0:04:72:
30:25:f7:95:22:a7:d8:dd:f1:11:be:b1:25:50:29:3d:e9:14:
7a:a5:fc:5d:fb:f5:68:77:19:0b:3a:14:be:6a:e7:2a:a1:88:
d8:26:b5:36:5d:cc:21:65:73:fe:91:97:4c:10:4b:d1:91:ea:
52:ae:66:8e:09:b7:df:0c:d9:f4:59:e0:20:2b:89:f8:69:a0:
36:61:ea:fa:11:49:fb:1a:2f:f6:ac:1d:60:d6:26:95:81:9c:
04:f9:83:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0bpES7MteciqHrnjOpcHanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjg2ZDVlNzRjMTIzNGYzNmYyMTliMDVkNzQzYmIzYTJl
MmFmZGEwHhcNMjYwMzIzMTcwMDQzWhcNMjYwMzI0MTcwMDQzWjAzMTEwLwYDVQQD
Eyg1NTdjNDNjMGRjYTU2ZDhmNTJjNzQ4NDAyZTUxMzYyNGU5NGU5Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzeAIfiY+yLfNPxDQSVyGaSzM+61
JQ24OdeV3Imqa2pKUrm52q0RVQteX7RPCZsWw2IcIrNRjqYlEJpvl3CB5uf+67h5
NfHgjiu2XAvsbz72JHS77ffy2qe/+WM0WR3bHQA+CIYbbw/oqgHzSpymaxH9ihXP
oFbI7MTPzky+BrNyM9T/UbjZZpQHrsN+VLnXhwlUCJcOXjLWTu3+dFxsoV0QaHhE
2e/x1JxcbkwkjokIBbmILGuwzN0DsWlVTyJlW95tdTOmXFCnSzZYC5Yipnh1SE8w
ZQKapokaYWd13Qct43H6wDIHzQRdz6ndsTLAHMfSAAGOl+G43XfHTPOhiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV8Q8DcpW2PUsdIQC5RNiTpTpKWMB8GA1UdIwQY
MBaAFN+4bV50wSNPNvIZsF10O7Oi4q/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdodFhuVEJJMDgyOGhtd1hYUTdzNkxpcjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MmU5NWYtZTVkMi00OWNhLWI5YzQt
ZjdhNzdjNDQxZjFjLzEvMzdodFhuVEJJMDgyOGhtd1hYUTdzNkxpcjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MmU5NWYtZTVkMi00OWNhLWI5YzQtZjdhNzdjNDQxZjFj
LzEvMzdodFhuVEJJMDgyOGhtd1hYUTdzNkxpcjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ7LZ87t
i9yD/D3RWjJr/Ch58MpCbexsYBuBuX9sESRb+0pGOW89VImTZnzgLbTzacE7Y6dp
7VZ8omYJEPweqe0+zJNTQm6r7UhOu4D8+C7Gy0t1Aav0tnQcT2o+Un02ZwqhDtvk
atNq5lAQa86Kh06fbPXQGE8TcJHzbBJ/WVKebgjxvUlEKiRo5EUM/484VPMevdiH
Bk6syVNIwJ584ARyMCX3lSKn2N3xEb6xJVApPekUeqX8Xfv1aHcZCzoUvmrnKqGI
2Ca1Nl3MIWVz/pGXTBBL0ZHqUq5mjgm33wzZ9FngICuJ+GmgNmHq+hFJ+xov9qwd
YNYmlYGcBPmD0g==
-----END CERTIFICATE-----
Generated at Mon Mar 23 22:28:42 2026 by rpki-client