
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
File: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft (raw, json)
Hash identifier: y4HTz1rdB0AUsNQflKHfZx6ValD/0dXFiNPF+EotVhU=
Subject key identifier: AE:93:F5:45:F8:94:40:67:1B:9F:74:FD:77:71:3A:26:89:33:D0:11
Authority key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Certificate issuer: /CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Certificate serial: 6EBE89949C0F8E8E7F004DC606533F877F7A0490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
Manifest number: 53
Signing time: Sat 26 Sep 2026 01:01:14 +0000
Manifest this update: Sat 26 Sep 2026 00:56:14 +0000
Manifest next update: Sun 27 Sep 2026 02:29:14 +0000
Files and hashes: 1: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl (hash: +sp2HioYbwI40rzgRUWqG+03685PuHQ1sSxQ4wE6quM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:be:89:94:9c:0f:8e:8e:7f:00:4d:c6:06:53:3f:87:7f:7a:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Validity
Not Before: Sep 26 00:56:14 2026 GMT
Not After : Sep 27 02:29:14 2026 GMT
Subject: CN=AE93F545F89440671B9F74FD77713A268933D011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:bd:c7:42:a7:3f:a4:55:eb:32:ab:55:0a:
df:e4:d8:4a:5a:03:56:4e:48:4b:ec:9a:46:a7:42:
48:c6:58:7e:45:ab:80:66:e0:1e:16:5a:ee:4c:1a:
b4:70:28:1b:52:cc:84:27:1c:9f:1c:92:89:4f:02:
a9:60:fb:7a:89:f6:3c:4b:0c:03:b4:c3:56:93:69:
95:49:64:01:3e:47:c6:24:e5:36:b8:28:3d:a2:84:
fc:e1:61:70:f2:ac:70:96:69:1a:63:06:31:c4:f5:
b7:d1:29:81:68:e0:24:d8:f5:27:cf:03:73:04:1b:
ab:1e:95:44:be:94:0b:b1:a7:16:64:7f:df:b6:c8:
09:02:7b:04:13:bc:73:b5:3e:b5:ba:63:79:08:f5:
ad:45:00:ed:45:b9:fe:08:b6:33:05:4b:1b:d1:ad:
1b:68:82:79:8a:7b:77:b2:1e:cf:fe:46:c9:f1:90:
4d:68:f1:90:b9:67:97:53:c9:23:85:d8:f8:b8:fc:
7a:10:9c:fd:0e:ae:b3:4c:d3:1a:20:c0:7e:0a:2c:
43:42:20:7e:e6:e4:8e:b9:d6:35:f2:f1:fe:35:e9:
c4:7c:4e:88:57:c9:69:b9:74:b7:7a:78:0e:b0:aa:
60:c3:d3:cf:ad:d3:cb:43:e9:d4:78:6e:e3:62:1e:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:F5:45:F8:94:40:67:1B:9F:74:FD:77:71:3A:26:89:33:D0:11
X509v3 Authority Key Identifier:
keyid:03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:74:5d:07:1c:9e:94:4c:4d:c5:fb:0c:08:8c:c0:c4:20:
55:cf:32:cf:84:ef:a0:e5:d6:f4:19:93:53:42:b0:ea:07:11:
0e:03:9e:b1:1d:fb:15:c2:52:d9:5e:e2:c6:b3:b8:e2:2e:2e:
20:78:44:b4:02:c3:32:a2:4f:db:1c:2b:5a:34:92:da:10:99:
48:78:75:8a:61:60:e7:60:8b:d6:30:b4:4e:28:19:84:24:79:
c2:ae:50:91:ad:41:b8:1b:fb:29:91:3c:fd:8f:d1:b7:cb:f8:
8b:60:2c:40:3b:3f:05:43:8b:24:14:08:f9:7f:ef:b2:6b:9b:
04:e9:ff:c6:30:59:04:54:7f:51:dc:20:13:83:c7:50:6a:99:
d3:42:90:83:a9:45:09:72:e5:92:2c:4c:f6:c1:92:82:f2:37:
55:71:1f:82:26:a5:e1:90:73:71:60:d9:cb:b3:e5:61:ab:c1:
df:f8:5d:f8:89:ec:47:a4:7e:eb:61:c9:b6:6a:79:ce:97:82:
01:7b:bb:61:12:f9:83:b5:bc:01:6d:30:03:5c:cc:73:34:66:
99:f6:3e:54:bb:b7:dc:b3:ed:ce:15:71:0e:07:11:c0:ad:d9:
99:19:2b:dd:94:61:48:db:97:0b:00:3d:a4:7f:12:50:46:74:
2e:18:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:56:35 2026 by rpki-client