Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
File: 36ok1gYK42_vKPJN90c1oZO58uo.mft (raw, json)
Hash identifier: mRGBW0KHTbF6KQTPPq18vCbXzzOolnFzCsgVZm5ZSWY=
Subject key identifier: CD:B3:E1:62:1A:DD:2C:46:41:57:14:8B:12:5C:F2:57:62:47:0B:C6
Authority key identifier: DF:AA:24:D6:06:0A:E3:6F:EF:28:F2:4D:F7:47:35:A1:93:B9:F2:EA
Certificate issuer: /CN=dfaa24d6060ae36fef28f24df74735a193b9f2ea
Certificate serial: 01A0CE24501FDFBC092A0042BD497F975AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36ok1gYK42_vKPJN90c1oZO58uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
Manifest number: 81
Signing time: Wed 23 Sep 2026 12:01:21 +0000
Manifest this update: Wed 23 Sep 2026 12:01:21 +0000
Manifest next update: Thu 24 Sep 2026 12:01:21 +0000
Files and hashes: 1: 36ok1gYK42_vKPJN90c1oZO58uo.crl (hash: nMIQ4SVgYbaUVMPiPuVwvVLOdeqdxl69ysasikdQ8Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/36ok1gYK42_vKPJN90c1oZO58uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:50:1f:df:bc:09:2a:00:42:bd:49:7f:97:5a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfaa24d6060ae36fef28f24df74735a193b9f2ea
Validity
Not Before: Sep 23 12:01:21 2026 GMT
Not After : Sep 24 12:01:21 2026 GMT
Subject: CN=cdb3e1621add2c464157148b125cf25762470bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:a7:7a:30:66:03:a2:4f:3d:78:af:33:9e:
31:8d:25:77:c3:c3:73:43:74:fb:ea:fb:d4:ea:21:
32:89:18:d0:d4:a3:75:7c:d2:7f:c1:cd:0b:a1:cc:
bf:98:67:c6:6a:8a:bc:cd:56:9e:fc:4e:0b:8b:b7:
d6:f5:cb:6a:8a:4d:ae:2e:36:cc:85:75:2a:8f:68:
22:bb:d5:5e:12:a0:46:e9:0b:fc:ef:6c:d1:fc:e9:
14:b4:99:7e:68:42:25:d3:2a:ba:8e:53:91:9b:71:
e6:0a:48:eb:30:48:56:91:46:90:58:8b:97:ee:ce:
70:fe:4c:fe:47:c1:61:f3:f3:75:9c:37:80:b2:75:
3a:ef:e2:c4:82:1d:12:e5:f1:30:5c:12:7d:b7:1b:
01:f3:22:47:e0:04:a5:31:12:a8:de:b4:0c:5e:39:
6f:67:20:b1:26:73:b6:11:5f:f7:7e:df:fd:ac:e9:
95:9e:1b:08:6f:b8:d7:c4:f8:bd:01:e5:29:20:cf:
42:08:5d:5f:8f:97:37:54:9a:7a:68:6c:f2:3e:1a:
43:5c:f8:c1:f4:52:5e:78:1b:78:95:65:e2:76:5f:
07:38:02:0e:0f:03:57:ac:3e:02:08:dd:e9:47:08:
04:46:a3:b0:be:b4:bd:5b:6b:11:dd:f4:f2:8e:5c:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:E1:62:1A:DD:2C:46:41:57:14:8B:12:5C:F2:57:62:47:0B:C6
X509v3 Authority Key Identifier:
keyid:DF:AA:24:D6:06:0A:E3:6F:EF:28:F2:4D:F7:47:35:A1:93:B9:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36ok1gYK42_vKPJN90c1oZO58uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:62:1b:f2:8b:1a:88:06:f5:45:6c:65:c8:9b:f2:a2:9e:
c9:e9:67:5e:a4:79:fe:be:8c:13:a5:33:c3:f7:9a:a2:37:2b:
40:a0:62:d9:d9:2d:67:6e:3b:59:cc:10:f4:be:e3:48:92:8c:
c0:57:dd:85:ee:61:96:76:ca:3c:24:91:a7:12:16:fe:9d:ed:
32:08:f2:fa:01:b2:1f:e2:35:86:4d:3f:c8:22:84:3b:1f:da:
2c:37:6c:5f:ac:35:22:d3:7f:3e:26:74:78:d2:42:ea:5b:a2:
ba:73:59:63:b6:89:71:72:13:29:9c:b3:33:11:da:89:c2:bf:
76:4b:ea:a6:53:e0:02:9f:c0:9e:e9:b0:ec:31:9f:38:4f:56:
ad:50:85:0d:f3:9d:d4:07:fe:7b:32:fa:b7:46:0f:5a:6a:7a:
0f:fb:ee:22:6b:21:b6:16:d0:ac:06:8d:af:84:5f:41:0a:00:
fc:36:53:80:4b:64:8a:ba:ec:5b:5e:83:0f:76:e4:83:c1:dd:
8c:78:d0:15:89:0c:5e:d1:42:46:a1:34:d3:be:0c:86:76:77:
10:02:f7:e2:55:d7:21:10:44:7f:82:da:50:9d:71:12:c7:61:
85:39:59:a1:56:b9:22:e9:10:80:37:38:74:18:c7:ae:61:b5:
b2:4f:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:45 2026 by rpki-client