Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: VUWMCD49JM8W9pNqIu9WCpiMviv7BqKemGFzN2u8GQY=
Subject key identifier: ED:35:70:A3:DA:7E:55:9A:BF:45:1B:5A:2C:43:36:67:44:72:9E:F7
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 019D27A8BB46BB827EB5DF898FEA1BA94C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0F7C
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: BpHo/qR8N7kJFZ4f5mQzLPXCy0USEKSy7TdCajRJnRo=)
2: nNppMpelb0oU-Z8bXlu9JPmj-50.roa (hash: vaplA6p67yz2pjVfp5DzGuZj7gD852HpFF3uwF96n1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bb:46:bb:82:7e:b5:df:89:8f:ea:1b:a9:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=ed3570a3da7e559abf451b5a2c43366744729ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:1c:97:d8:15:3f:74:98:95:c6:56:c9:c2:
4f:b1:41:60:5f:32:28:0a:ad:33:3d:23:a3:2e:87:
5f:b5:5f:7d:c5:b2:62:9c:a7:2e:11:49:1b:03:aa:
fc:5d:fa:d5:fe:a8:6f:93:04:5f:51:13:0f:56:de:
e7:a1:c2:12:8d:29:87:00:20:2e:2d:84:c5:29:69:
ea:04:d1:eb:f8:d6:fd:1d:25:84:84:6c:87:30:89:
eb:8f:38:79:b1:84:6e:6d:63:59:0f:4b:26:07:03:
e2:fd:51:05:a2:23:3a:be:c1:b6:36:9a:9b:49:e1:
cb:57:4e:db:87:63:1e:ba:b9:a8:8c:1e:eb:46:3d:
10:c3:f1:c2:ca:fe:6e:ab:c4:28:8b:b6:13:81:c0:
ed:19:a6:d7:69:9c:1f:8e:9c:42:34:b8:5e:bd:75:
f5:b4:46:e6:00:ca:63:cf:73:92:82:ae:49:d8:6a:
8e:d3:4f:cc:76:80:7b:d7:f2:d9:72:06:93:7e:6e:
a9:52:97:a8:d0:29:05:5f:71:eb:70:7e:9f:55:43:
83:08:c0:13:5c:0e:c1:86:57:d9:99:66:e4:74:83:
26:f3:f7:ee:5e:8b:e9:eb:85:0a:05:4e:55:9a:b3:
62:2c:63:41:79:ec:94:79:38:c9:95:e7:34:d2:19:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:70:A3:DA:7E:55:9A:BF:45:1B:5A:2C:43:36:67:44:72:9E:F7
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:0f:78:43:2d:6c:bd:73:1f:9d:a9:74:ef:9a:d0:1d:11:
4a:90:59:84:1a:d6:d6:91:43:4c:4f:04:91:dd:fa:68:ea:d9:
0f:c3:fa:6f:db:12:1f:07:e5:e7:1c:78:89:6b:94:89:83:c0:
7d:14:a2:35:07:42:76:b8:6a:22:5a:20:c8:09:04:8a:2b:60:
5f:38:8d:47:11:c1:a2:72:32:04:83:f8:2e:03:44:ed:05:94:
2e:65:5c:15:42:4a:c8:bc:64:f5:a4:e5:48:9c:38:ad:52:86:
74:1e:c1:81:10:a1:10:36:af:97:b8:e9:84:35:33:d0:9c:00:
dd:6f:fb:61:c9:71:a5:33:15:a0:86:64:3e:6a:a0:8a:93:b6:
94:ee:22:1c:92:d0:05:b6:8f:f2:e2:97:1c:af:a1:1c:31:a3:
b4:11:aa:98:bb:a4:ae:ea:cd:f7:45:67:79:7f:98:10:5f:d8:
bd:53:36:ed:aa:ff:56:11:25:16:bf:b0:ec:b0:67:95:7c:79:
12:0d:f5:e1:61:ba:2e:f3:5e:d8:ed:af:da:5d:f1:8e:a5:1f:
e2:1d:46:a1:10:84:99:d7:d2:c9:ac:cb:4c:af:39:19:f3:1f:
b6:e5:8b:fb:42:77:d7:3f:58:a9:50:8b:95:e4:b9:fb:51:2d:
23:5f:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:40 2026 by rpki-client