Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: NYg2t91hcfrslvBfk+6Tev+YfWtfor/INaXiVPS9Spg=
Subject key identifier: 86:4E:70:49:78:79:5E:21:68:3F:DA:DA:3C:1C:9D:C9:A0:65:F4:B4
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 019D27A8E10C45B304159D4C6B02F56CD201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0E82
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: E7/ZVH+IghfTNh62A74fG1/LzpzDmAhQj+9q6fyN290=)
2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:0c:45:b3:04:15:9d:4c:6b:02:f5:6c:d2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=864e704978795e21683fdada3c1c9dc9a065f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:9d:be:ae:2b:b0:0a:f5:3a:68:d1:63:16:
c9:c0:af:87:37:37:02:38:b8:c8:91:99:af:81:ab:
ea:7a:4a:82:06:38:67:cf:27:99:6f:c1:0e:ae:f2:
d0:f2:bf:c6:40:f1:79:fa:69:af:df:8e:15:06:77:
72:9b:81:53:96:6c:43:9b:f6:e8:48:b0:30:84:dd:
dd:48:61:29:e0:e0:2d:9b:39:a4:12:0f:a1:2c:8f:
77:b8:8d:3a:d2:aa:d7:0b:83:f3:34:5c:6c:41:73:
e2:9c:24:34:e5:f0:24:c6:78:44:f8:b2:28:34:b1:
0e:22:30:a1:9c:9b:67:51:b8:3d:da:84:ad:06:bf:
60:c4:cd:04:59:ab:88:d0:ed:ae:cc:d7:b0:70:11:
a7:70:d8:0f:b8:75:8f:a7:ba:aa:64:52:93:dc:d1:
55:84:23:ef:f7:99:72:e3:39:16:c4:31:7e:c2:eb:
40:9c:d0:2b:3d:25:e2:c8:8a:b9:f2:06:5f:5d:17:
cf:43:bd:02:2a:f5:f1:d9:51:73:f5:e9:8f:b6:33:
ae:4e:32:03:d8:cd:81:5b:ce:da:6c:9e:70:37:32:
24:72:8d:7d:eb:c9:30:a2:cd:f3:22:3c:5a:06:d4:
1f:40:e6:54:ad:c2:1f:47:0d:d4:6b:83:36:b4:28:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4E:70:49:78:79:5E:21:68:3F:DA:DA:3C:1C:9D:C9:A0:65:F4:B4
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:86:40:e0:0b:ad:93:70:b5:18:79:3e:cf:a6:ea:94:8d:
f0:73:dd:72:a5:e0:c4:c5:0b:39:8d:9f:98:44:b8:e4:85:0d:
80:e9:18:f1:20:cb:51:9a:16:3d:02:86:97:86:78:19:d0:c9:
5d:da:43:3d:ca:2c:c2:fb:05:48:a4:77:f4:a8:93:b2:8e:48:
76:e1:47:5c:2f:d0:94:f5:99:ab:6d:54:79:22:21:71:cb:2f:
e6:18:3c:a1:10:50:cf:04:98:7d:3b:0a:00:1c:48:57:32:d1:
6b:f8:36:8f:96:e8:d6:5b:5a:64:11:8d:c5:b3:1f:98:0f:75:
ad:12:d1:63:c5:65:d2:1c:56:1b:63:4e:85:f5:a1:6b:9a:01:
2c:d4:47:9f:f7:7f:c9:ee:e5:08:ec:0a:5b:ad:05:db:a3:9b:
8c:be:96:1e:25:6a:25:63:fd:90:c1:ee:f7:c2:de:63:98:0d:
36:42:a1:f8:cd:37:52:40:c9:b9:68:11:ca:13:9a:3a:59:2d:
b0:c1:0f:75:ab:a4:a9:62:37:28:92:c9:2d:6d:a2:9f:cb:03:
5f:bc:00:3f:72:61:b2:ac:55:fb:08:b6:62:73:70:24:56:78:
12:f8:a1:e7:ac:d9:f3:bb:30:b0:85:a5:39:02:c9:27:7b:50:
b9:ad:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:57 2026 by rpki-client