Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.mft
File: 36tShCAP0BGCMzgMvaJEp4jv3Mc.mft (raw, json)
Hash identifier: d3Otpg7ObAD5/u7eYXzxXXD2P95eAu/63JIL1/Lu5Gw=
Subject key identifier: D9:BB:07:D6:40:91:F6:98:69:13:97:E8:21:ED:72:90:5E:51:61:EA
Authority key identifier: DF:AB:52:84:20:0F:D0:11:82:33:38:0C:BD:A2:44:A7:88:EF:DC:C7
Certificate issuer: /CN=dfab5284200fd0118233380cbda244a788efdcc7
Certificate serial: 01A0D0EDF3042DEE79285CCB115707096A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36tShCAP0BGCMzgMvaJEp4jv3Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.mft
Manifest number: 70
Signing time: Thu 24 Sep 2026 01:00:50 +0000
Manifest this update: Thu 24 Sep 2026 01:00:50 +0000
Manifest next update: Fri 25 Sep 2026 01:00:50 +0000
Files and hashes: 1: 36tShCAP0BGCMzgMvaJEp4jv3Mc.crl (hash: 0ZZiDU1rVT5e298ARmWjg8B6dVlXJkNeTe7OnXvXtck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/36tShCAP0BGCMzgMvaJEp4jv3Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:f3:04:2d:ee:79:28:5c:cb:11:57:07:09:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfab5284200fd0118233380cbda244a788efdcc7
Validity
Not Before: Sep 24 01:00:50 2026 GMT
Not After : Sep 25 01:00:50 2026 GMT
Subject: CN=d9bb07d64091f698691397e821ed72905e5161ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:0d:50:73:b2:aa:0a:8e:84:a9:a1:fa:46:
1f:18:43:aa:4a:8a:97:23:27:e5:06:1c:17:4b:39:
14:c3:91:d2:90:95:36:93:9d:28:bc:3f:a6:df:d4:
f9:50:5c:e0:18:e7:4d:07:a3:b4:a5:b5:54:4f:7d:
b2:ad:a0:a6:57:c8:40:4f:e0:44:c7:b0:23:36:7f:
9e:44:d1:de:7b:36:8e:13:40:76:b3:49:51:fa:39:
f8:7c:28:c9:ee:f6:3c:43:9e:75:b5:8e:24:38:aa:
3c:3d:25:23:9b:fa:ad:ac:9c:ee:ce:84:1e:b7:5e:
57:53:00:87:67:fb:8e:a3:c3:43:2b:79:ce:87:77:
75:28:05:df:53:ed:73:28:9a:46:fc:d2:a1:00:55:
5f:ea:d0:de:8a:59:cc:09:02:60:f2:66:8f:5b:bb:
db:e6:1d:14:f7:4a:32:c5:0c:39:df:00:de:e4:3a:
83:df:d7:47:09:0a:c9:ea:50:77:bc:1d:ea:a0:7e:
31:59:cd:89:f9:7d:0c:31:42:9f:12:81:3f:c2:cd:
18:8a:a9:32:4a:a0:a3:0f:8b:d1:c9:26:30:f8:f8:
a6:b7:4d:dd:d8:4f:ff:ed:25:70:49:0b:f1:a1:40:
26:8f:f3:22:6a:54:7d:c9:3c:df:ec:ee:43:53:17:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:07:D6:40:91:F6:98:69:13:97:E8:21:ED:72:90:5E:51:61:EA
X509v3 Authority Key Identifier:
keyid:DF:AB:52:84:20:0F:D0:11:82:33:38:0C:BD:A2:44:A7:88:EF:DC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36tShCAP0BGCMzgMvaJEp4jv3Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/36tShCAP0BGCMzgMvaJEp4jv3Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:90:31:64:fc:56:86:22:37:88:65:4e:44:d8:2e:b2:8c:
84:93:97:ad:ae:2e:67:96:16:7a:18:11:a6:8a:e1:08:f9:8a:
16:90:2f:f6:59:a1:f5:41:7b:5c:3b:e3:e7:a2:cb:2a:c3:1a:
e9:05:11:e8:3e:c0:dc:05:97:99:8b:96:6c:86:01:09:27:9a:
9d:c6:c7:16:d2:86:54:a7:0f:52:97:0e:13:09:30:94:8e:e5:
02:30:c1:c6:c5:91:ba:fd:c7:e5:a9:51:cd:5d:7d:6e:e2:34:
ce:0f:d8:50:d8:35:08:e5:8a:35:22:d0:19:da:36:af:5f:85:
5a:cb:6e:84:f9:5d:44:cb:3d:af:b5:07:7f:71:01:f3:2e:0d:
25:8e:c6:5b:a3:44:2e:c4:a0:e2:85:45:ff:65:47:6e:3b:d2:
b6:05:e5:d2:02:23:e2:2c:8c:d3:c9:4b:9c:fa:2f:d9:13:16:
5e:b9:8b:c1:5a:cc:10:68:7b:51:7b:46:11:eb:81:08:ea:08:
62:0e:86:60:38:f0:88:5b:2b:ef:9a:43:bf:ce:96:a6:9e:d3:
ed:5a:5d:59:b5:c4:65:e1:21:a6:87:3d:e1:4d:a3:4d:c4:d2:
f2:bc:c5:a3:7f:d2:da:ef:2b:2e:47:73:02:d8:b3:0a:7e:a7:
78:a9:e4:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7fMELe55KFzLEVcHCWoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWI1Mjg0MjAwZmQwMTE4MjMzMzgwY2JkYTI0NGE3ODhl
ZmRjYzcwHhcNMjYwOTI0MDEwMDUwWhcNMjYwOTI1MDEwMDUwWjAzMTEwLwYDVQQD
EyhkOWJiMDdkNjQwOTFmNjk4NjkxMzk3ZTgyMWVkNzI5MDVlNTE2MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApocNUHOyqgqOhKmh+kYfGEOqSoqX
IyflBhwXSzkUw5HSkJU2k50ovD+m39T5UFzgGOdNB6O0pbVUT32yraCmV8hAT+BE
x7AjNn+eRNHeezaOE0B2s0lR+jn4fCjJ7vY8Q551tY4kOKo8PSUjm/qtrJzuzoQe
t15XUwCHZ/uOo8NDK3nOh3d1KAXfU+1zKJpG/NKhAFVf6tDeilnMCQJg8maPW7vb
5h0U90oyxQw53wDe5DqD39dHCQrJ6lB3vB3qoH4xWc2J+X0MMUKfEoE/ws0Yiqky
SqCjD4vRySYw+Pimt03d2E//7SVwSQvxoUAmj/MialR9yTzf7O5DUxfzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm7B9ZAkfaYaROX6CHtcpBeUWHqMB8GA1UdIwQY
MBaAFN+rUoQgD9ARgjM4DL2iRKeI79zHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZ0U2hDQVAwQkdDTXpnTXZhSkVwNGp2M01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt
ZWFmNjhiNTllNTk5LzEvMzZ0U2hDQVAwQkdDTXpnTXZhSkVwNGp2M01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5
LzEvMzZ0U2hDQVAwQkdDTXpnTXZhSkVwNGp2M01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJOQMWT8
VoYiN4hlTkTYLrKMhJOXra4uZ5YWehgRporhCPmKFpAv9lmh9UF7XDvj56LLKsMa
6QUR6D7A3AWXmYuWbIYBCSeancbHFtKGVKcPUpcOEwkwlI7lAjDBxsWRuv3H5alR
zV19buI0zg/YUNg1COWKNSLQGdo2r1+FWstuhPldRMs9r7UHf3EB8y4NJY7GW6NE
LsSg4oVF/2VHbjvStgXl0gIj4iyM08lLnPov2RMWXrmLwVrMEGh7UXtGEeuBCOoI
Yg6GYDjwiFsr75pDv86Wpp7T7VpdWbXEZeEhpoc94U2jTcTS8rzFo3/S2u8rLkdz
AtizCn6neKnkrw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:27:16 2026 by rpki-client