Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: sY2qUzac7/1AdynjoFU6g47Fwff99MufTtsIA+VREj8=
Subject key identifier: 23:45:F8:38:65:5A:98:55:70:AC:34:9F:DF:FA:D1:CE:52:49:EA:01
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019D39E5FBA901A89C6E7E1EC7DB68752C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 119D
Signing time: Sun 29 Mar 2026 14:01:06 +0000
Manifest this update: Sun 29 Mar 2026 14:01:06 +0000
Manifest next update: Mon 30 Mar 2026 14:01:06 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: +Ra/bNOlvXxiipujVV8KSb51fQkMYfQTk0/cbE8tSaQ=)
2: FhwS6oj1IU2dmxLLYCr_Dh9nNPg.roa (hash: gw4ySzsoHkhiHwNr6SgUSv5IRZbxDqYLsZYznQCEK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:fb:a9:01:a8:9c:6e:7e:1e:c7:db:68:75:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Mar 29 14:01:06 2026 GMT
Not After : Mar 30 14:01:06 2026 GMT
Subject: CN=2345f838655a985570ac349fdffad1ce5249ea01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:07:aa:f5:c8:dd:ac:ff:d8:4e:bc:77:9f:
44:31:73:96:23:66:ae:32:fb:e9:6d:4b:ab:2c:da:
a6:31:a8:59:08:ef:ca:60:81:ae:d3:a3:33:e9:d0:
24:30:01:10:55:1a:94:94:48:1a:bc:43:4f:58:91:
39:3c:80:27:b7:41:b7:c7:e8:66:65:5b:73:c5:f8:
2f:b6:d4:87:00:9f:df:8c:eb:4e:49:3d:b0:0e:b9:
27:e2:08:11:60:5f:8f:5d:2d:ca:a8:75:1d:0a:fd:
1d:3c:00:b8:67:34:55:59:b6:b0:af:0f:e1:8f:47:
e0:6d:bd:03:bb:87:f8:5e:08:84:1e:a1:c5:7e:c8:
82:15:b1:b3:9f:cf:96:cf:bb:e1:25:b4:54:4d:29:
ef:5e:d7:6f:d8:6b:12:c2:70:64:86:87:e5:af:a8:
7e:f3:be:86:6b:4f:4f:02:4e:f7:d8:b0:15:85:61:
2a:77:10:50:7e:fc:5e:2a:c4:78:95:1c:74:2e:3f:
25:3d:c9:d1:eb:e8:72:e1:cb:c1:6e:05:49:b0:22:
f4:5a:9b:c0:77:60:73:96:1c:c3:1b:da:1a:44:c3:
b7:5a:59:47:08:6f:44:a2:0a:bf:48:88:69:ba:bd:
18:17:37:62:c9:3a:1c:80:e2:89:0d:0f:16:49:42:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:F8:38:65:5A:98:55:70:AC:34:9F:DF:FA:D1:CE:52:49:EA:01
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:a2:df:c7:34:7d:18:13:68:26:d6:04:34:73:93:41:94:
80:32:39:31:17:ed:3b:35:64:2e:80:fc:45:78:24:d6:27:84:
b2:90:ca:2b:0a:4b:d5:9c:d2:26:88:f2:a4:ad:2e:b8:d8:6e:
cf:ca:a4:b5:ec:36:be:91:8f:c9:03:47:86:7b:8c:ca:32:0b:
fa:2d:c7:77:00:10:83:54:cd:0e:f2:15:37:93:91:9b:d8:8c:
22:f8:03:49:af:80:84:fc:b3:9b:2a:71:36:b9:d5:70:2a:84:
e1:40:95:ee:c7:a9:b1:6b:85:e9:97:db:f6:d2:bd:01:96:ea:
2c:2e:8e:9d:aa:72:86:d8:0e:3b:4b:1f:08:9e:fe:2b:ad:55:
86:e9:35:97:de:97:76:33:06:b7:37:5c:33:7c:10:fb:c7:e9:
b5:85:00:9a:5d:67:fa:ef:c9:2c:4b:80:b7:87:d2:c9:a0:a2:
59:79:43:20:db:cb:56:87:d5:a4:59:7b:b1:49:74:69:5f:be:
df:9c:82:b6:99:8b:f0:8c:09:94:1e:be:c4:24:76:2e:e9:09:
ee:b1:4a:cc:9f:ed:8a:a3:1f:1d:dd:d2:1b:96:03:f2:c0:c2:
da:49:03:e5:43:92:7b:e8:ec:f6:72:d5:8a:6c:5f:fc:b1:46:
c0:43:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:57 2026 by rpki-client