Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: JJclA8B110TeRlduBSUmtcFG6SkwmEsy9frdIXpkrfY=
Subject key identifier: 97:1C:B8:04:87:1D:50:3C:7D:D8:43:00:1D:AD:EE:55:F3:0D:E8:A6
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 019D27E01D3A2BF00F96A97E2F8BBF45DA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:32 +0000
Manifest this update: Thu 26 Mar 2026 02:01:32 +0000
Manifest next update: Fri 27 Mar 2026 02:01:32 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: rlO5xEqRYmyST9o/KswvKQwZ57NgoDUVQUFrbVQW9lI=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1d:3a:2b:f0:0f:96:a9:7e:2f:8b:bf:45:da:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Mar 26 02:01:32 2026 GMT
Not After : Mar 27 02:01:32 2026 GMT
Subject: CN=971cb804871d503c7dd843001dadee55f30de8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:3c:94:47:cc:26:54:85:b9:66:82:fd:54:
3e:88:c7:c8:2c:80:f3:69:6f:78:66:c2:b1:67:2a:
f0:7f:d5:c7:97:99:fd:7e:40:63:eb:9f:84:86:5a:
9e:a0:62:c7:ba:cb:99:b1:dc:16:fc:84:96:70:a8:
fb:07:9b:8f:f1:0b:bb:22:57:42:01:95:be:9b:04:
c3:91:7b:af:d8:de:0f:a2:2e:5a:5e:32:2b:74:90:
70:d7:fe:5f:66:80:57:67:f8:c9:59:47:d0:92:8d:
ff:35:5a:c3:0b:93:4b:18:90:b0:1b:f2:28:8f:2d:
07:29:45:19:6c:07:f8:dd:d5:26:e6:c6:93:3b:a2:
c9:91:46:ac:10:71:3d:d6:91:a6:d9:d9:ed:c2:36:
b1:bf:fe:58:85:e7:bc:4e:4a:e1:fd:df:4a:81:ba:
5e:5d:de:9f:36:e6:4d:cf:d5:0b:80:f6:b2:34:12:
a6:2c:eb:b6:d4:4f:90:c3:09:c6:d0:3f:26:88:ed:
f7:62:8e:21:62:be:9a:8c:40:e8:91:82:e2:5f:91:
3e:eb:05:2c:c7:bc:30:3c:ff:21:0b:1f:6e:0b:4f:
6a:2c:df:29:48:e1:f2:c4:41:8f:35:9b:46:28:ad:
92:0f:45:05:75:be:2b:cf:92:3a:5d:7c:93:d2:4d:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:B8:04:87:1D:50:3C:7D:D8:43:00:1D:AD:EE:55:F3:0D:E8:A6
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e6:72:29:6e:25:dd:96:15:a8:47:ed:c6:cb:5c:cb:9b:08:
4a:48:b2:a5:f7:b7:8a:5c:a9:9c:3d:4b:d8:b3:70:9d:88:b8:
2d:78:ce:a0:ad:79:9b:8a:80:56:34:6d:45:af:e8:cc:23:2e:
50:bf:4a:04:b1:43:c1:46:e2:80:dc:d8:42:d3:82:a6:a3:32:
3f:9e:60:54:3f:72:d3:0f:85:c3:85:32:31:fa:45:68:42:60:
f5:69:f4:da:22:9e:6a:16:8f:41:fa:0a:ff:79:07:b6:f1:0f:
fc:e7:b4:2f:c4:76:08:fc:34:50:97:19:4b:64:59:a1:c1:81:
8d:49:fc:60:e6:a2:c0:f0:71:69:fc:d7:42:f4:d6:95:e4:a1:
dd:4d:c3:ce:8c:c9:77:6a:17:70:78:4a:d9:4b:07:7b:ee:ef:
37:8f:96:b5:ef:7a:5e:07:36:21:6f:37:62:45:00:63:0b:8d:
bc:02:d2:a8:ef:8c:91:d3:94:e1:0a:23:82:f1:65:42:2d:ea:
07:d9:4a:64:dc:1f:b1:7a:ed:64:9c:2a:45:9d:12:d1:76:0f:
df:99:89:e1:69:01:d5:58:a0:20:b2:fd:ca:69:1d:04:c5:69:
16:c4:16:6e:88:57:7e:20:1d:2b:94:ae:72:bb:c5:ae:b1:86:
58:64:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:30 2026 by rpki-client