Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: sDkva0r5KTsGG2yt2gUBLhE4BzewrJX2hrVKuYFHhgg=
Subject key identifier: 8D:38:BC:8F:72:71:68:98:08:37:D6:65:ED:99:14:7C:D8:C9:55:97
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 019E1F11232FBD51A1AAB6C123BDBAEA15C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:01:17 +0000
Manifest this update: Wed 13 May 2026 02:01:17 +0000
Manifest next update: Thu 14 May 2026 02:01:17 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: HMcD9XcnUBvjX2qjLVn9PvR3ql/4d7ZIDNzKPvTXfyA=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:23:2f:bd:51:a1:aa:b6:c1:23:bd:ba:ea:15:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: May 13 02:01:17 2026 GMT
Not After : May 14 02:01:17 2026 GMT
Subject: CN=8d38bc8f727168980837d665ed99147cd8c95597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:95:7f:ab:e5:68:fa:ef:60:12:47:4b:0c:
e9:aa:5f:a8:30:b2:4a:e2:b3:c5:8f:d0:81:5d:93:
73:8d:4c:74:97:36:cb:ee:fb:9d:c2:c2:58:59:23:
3f:f1:e9:93:11:c3:12:ba:e2:e6:01:83:2c:c4:6a:
ba:1b:26:ff:af:13:35:3c:70:73:28:38:a3:d4:d6:
ff:01:c3:b4:27:57:3d:81:6c:a1:94:61:02:cf:27:
8f:14:21:07:b5:e0:f7:4f:2f:3d:ec:31:e7:98:86:
dd:49:9a:0d:36:91:55:3c:17:a2:4c:69:8f:f2:75:
72:94:4d:7d:c3:89:fe:90:14:f6:c9:33:2f:26:ba:
50:c8:c5:d3:15:5b:ba:7b:9b:e1:68:42:e7:a2:e8:
4a:41:a8:3a:85:70:4e:fb:33:55:e9:7c:05:0e:09:
4e:19:0d:c1:55:43:2f:e8:a0:1a:6e:fa:64:65:6f:
ab:04:61:d5:b5:14:30:c4:4c:82:da:1d:09:cc:b7:
1c:27:fc:0d:3d:c0:4e:fa:7f:3f:01:d0:55:84:71:
ec:e2:ec:d7:f9:c0:3e:ca:66:ee:d9:30:07:32:9a:
88:4e:c3:26:09:4c:48:dd:06:6e:49:cd:f1:13:98:
3a:61:18:d2:63:05:67:7c:fb:26:f3:e1:cc:d1:00:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:38:BC:8F:72:71:68:98:08:37:D6:65:ED:99:14:7C:D8:C9:55:97
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:56:80:54:47:a9:92:3c:b9:c6:03:c0:8d:11:56:6e:8d:
7e:f8:67:04:63:7b:43:97:48:ad:77:c1:94:56:0d:cf:92:1d:
95:3f:be:d5:0b:36:b1:0b:6d:15:31:d2:07:7b:d5:78:9d:cd:
ad:44:93:a8:1f:ce:0b:48:c5:0b:00:86:45:97:b4:37:e9:8e:
90:0a:04:b5:21:e1:3c:bb:8a:77:0e:1b:5a:b4:da:4a:d9:5a:
6a:35:be:54:94:5d:e3:ba:94:14:26:f9:ee:1a:0c:4a:8d:a0:
d2:7b:76:72:93:95:b9:e4:00:92:ea:ef:82:38:29:80:d6:d7:
5f:f3:02:07:77:78:3c:e5:ce:09:a6:f8:32:1f:2e:28:f4:24:
1a:67:38:7d:a1:f1:d0:cd:52:9e:5c:a3:61:d7:80:9a:80:85:
60:51:5f:a8:c2:4b:98:cd:c2:b5:fc:b6:a5:13:12:5d:fc:ab:
80:b0:57:04:1f:15:95:ac:16:f4:02:0c:79:9e:64:a6:11:75:
13:65:f5:28:13:94:8b:29:16:cc:88:c3:39:54:06:b1:8d:a0:
21:04:d2:fe:93:d2:9f:0d:b9:ba:b1:3a:42:db:d4:aa:3d:4b:
39:4a:84:d1:7b:c4:7e:af:b1:aa:72:d6:a0:e5:78:77:97:a6:
8f:86:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:24 2026 by rpki-client