Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: 6oU2j2jb5tkOOZc6t7Y1LkNwWPlWdIK1aKtYHcclNO0=
Subject key identifier: DF:D3:1C:59:46:FF:6A:2A:9E:BC:83:B7:34:67:C4:96:F9:5D:7F:40
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019F18D63479F0CCB3D653A1CC2EFA5468AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 1295
Signing time: Tue 30 Jun 2026 14:01:58 +0000
Manifest this update: Tue 30 Jun 2026 14:01:58 +0000
Manifest next update: Wed 01 Jul 2026 14:01:58 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: 6v0PZuBJ6PURoqySBgx16u1CbSXO5eny//dcSx27soM=)
2: FhwS6oj1IU2dmxLLYCr_Dh9nNPg.roa (hash: gw4ySzsoHkhiHwNr6SgUSv5IRZbxDqYLsZYznQCEK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:34:79:f0:cc:b3:d6:53:a1:cc:2e:fa:54:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jun 30 14:01:58 2026 GMT
Not After : Jul 1 14:01:58 2026 GMT
Subject: CN=dfd31c5946ff6a2a9ebc83b73467c496f95d7f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:cd:1a:79:05:30:07:48:5e:e1:9d:4c:32:
27:6e:42:22:13:25:55:02:3a:b9:9b:5f:c8:f9:78:
00:02:96:2b:15:4b:9f:b9:91:60:fc:bd:4d:5c:06:
24:bd:a3:87:d8:20:9d:13:d7:38:fa:c5:15:b9:cf:
73:cf:cd:bd:0f:33:fb:96:13:59:17:f5:9a:cc:0c:
1a:7a:ba:85:c2:f2:11:a4:46:c9:ef:75:51:87:7a:
79:83:1c:15:cd:4a:8e:a4:23:85:81:ff:50:56:1c:
08:24:e6:20:f6:a2:de:90:6e:f6:da:cc:91:7c:44:
86:44:7a:61:17:37:25:24:7c:52:d8:64:b3:3f:1c:
64:21:a4:02:ef:80:71:5a:17:d9:a5:04:8a:57:6c:
b1:c1:28:98:b1:8b:71:b2:31:29:5b:04:b3:ba:6b:
82:b3:50:a9:c6:16:34:3d:37:79:74:ff:a2:9b:19:
02:7a:3f:42:0d:dc:91:1b:88:92:33:b9:e6:8e:41:
4d:e2:c6:9a:47:3c:3d:44:d5:a9:24:d3:11:fa:5e:
0a:29:f4:9a:3e:e5:00:cc:eb:de:d8:9f:11:83:23:
dd:86:ce:ea:5d:1f:ec:db:9e:97:a3:a9:37:9c:76:
da:18:58:65:18:53:9f:9a:74:91:d1:98:12:91:cf:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:1C:59:46:FF:6A:2A:9E:BC:83:B7:34:67:C4:96:F9:5D:7F:40
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:84:7c:6b:59:f7:90:39:46:b6:5d:7e:99:78:f1:78:b5:70:
b5:6e:56:b8:26:57:e3:a2:91:48:53:98:e4:68:7c:b3:3e:67:
63:01:c8:0b:6e:23:70:b7:c1:a1:e3:c0:62:68:7b:ee:28:e3:
a3:81:8c:25:20:ad:31:c0:f0:86:7b:eb:78:87:43:85:c8:48:
23:e2:f0:ea:24:bd:21:f4:8c:a9:70:c9:33:83:a7:2d:aa:24:
08:71:a2:8f:17:58:77:87:ad:4c:dd:0f:4e:38:5d:0c:a9:dd:
d2:4b:a4:36:4d:bb:d0:58:da:17:94:5a:98:01:29:47:38:fa:
86:70:80:da:a4:c5:f2:92:05:10:e0:5a:98:2e:fa:1d:21:36:
7d:25:ad:d8:25:dc:11:1e:32:a3:0b:d6:16:da:2d:d4:fb:bb:
be:04:9f:e9:55:2d:2e:85:20:6c:da:90:02:46:f4:95:cf:1a:
57:4d:ed:82:c3:60:5d:13:86:0f:7f:2b:2e:bb:53:d5:fd:79:
ba:e2:3d:f2:11:2b:24:da:29:72:e6:dc:5d:77:63:21:ea:ce:
6d:58:a7:c8:11:61:ff:3e:3c:6c:d4:d6:00:d6:8d:5c:2e:2d:
1f:e7:e7:50:18:83:fe:e0:93:a3:51:36:19:90:f4:f6:2f:cf:
6a:45:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client