Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
File: 36ok1gYK42_vKPJN90c1oZO58uo.mft (raw, json)
Hash identifier: LXP/QroNaWpF6BFFvl5MvIqwhfo5Jdb9ovzXkVMt450=
Subject key identifier: BA:05:50:85:9D:C4:1C:CA:39:31:84:24:C6:F4:A3:41:E1:E7:FB:38
Authority key identifier: DF:AA:24:D6:06:0A:E3:6F:EF:28:F2:4D:F7:47:35:A1:93:B9:F2:EA
Certificate issuer: /CN=dfaa24d6060ae36fef28f24df74735a193b9f2ea
Certificate serial: 01A0412A477BE12074365036B7B5573CA7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36ok1gYK42_vKPJN90c1oZO58uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
Manifest number: 38
Signing time: Thu 27 Aug 2026 03:01:24 +0000
Manifest this update: Thu 27 Aug 2026 03:01:24 +0000
Manifest next update: Fri 28 Aug 2026 03:01:24 +0000
Files and hashes: 1: 36ok1gYK42_vKPJN90c1oZO58uo.crl (hash: AB9sKuQRCY7Cx5+84+0FbcrLJWIyrmCEqz4vmwWpDoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/36ok1gYK42_vKPJN90c1oZO58uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:47:7b:e1:20:74:36:50:36:b7:b5:57:3c:a7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfaa24d6060ae36fef28f24df74735a193b9f2ea
Validity
Not Before: Aug 27 03:01:24 2026 GMT
Not After : Aug 28 03:01:24 2026 GMT
Subject: CN=ba0550859dc41cca39318424c6f4a341e1e7fb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:bc:35:f8:b1:8b:87:86:b6:36:bb:60:db:
a0:54:7f:9f:6e:ec:e4:c5:da:29:b8:1c:68:78:70:
c2:ed:b7:b7:f6:c4:75:df:05:43:cb:89:ee:b7:fc:
4c:d2:8c:a3:c1:5e:78:91:02:51:06:4f:38:52:ab:
c8:ce:70:26:9a:cd:30:dc:45:ba:6c:30:d5:53:ab:
f6:34:06:01:9d:c8:87:64:e6:8b:d0:88:74:05:9c:
a4:30:25:14:b7:84:14:f2:e9:4a:6f:67:4e:e9:50:
e8:dd:f9:10:85:84:59:5a:7b:1d:e8:c2:9b:89:ea:
98:8f:91:59:2a:8c:ee:3a:08:49:7b:e3:ab:03:34:
36:07:cf:be:4f:d1:84:24:4d:e0:1c:fb:f3:df:fe:
36:a4:5e:c9:7d:55:06:3e:18:1b:2a:b5:ea:36:7a:
bd:6c:25:83:68:7b:30:16:13:2c:84:88:37:dc:02:
74:da:fc:73:8a:27:91:02:ee:5b:aa:c5:c2:44:b1:
3d:20:78:06:9f:49:b6:10:0d:ef:b7:d9:7d:48:47:
b5:30:f9:45:02:f4:ca:54:68:f4:b6:36:e7:2d:13:
ff:bd:bc:81:86:89:63:d4:f4:c3:5b:08:76:af:81:
13:75:36:75:c9:d7:cb:34:1e:69:48:bf:43:81:f9:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:50:85:9D:C4:1C:CA:39:31:84:24:C6:F4:A3:41:E1:E7:FB:38
X509v3 Authority Key Identifier:
keyid:DF:AA:24:D6:06:0A:E3:6F:EF:28:F2:4D:F7:47:35:A1:93:B9:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36ok1gYK42_vKPJN90c1oZO58uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/797a9d-bd2e-4719-9129-dee752c468e1/1/36ok1gYK42_vKPJN90c1oZO58uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f5:e2:c3:29:57:a4:74:2e:57:d0:a7:96:9e:55:56:7d:a6:
74:1b:c1:cc:06:86:ca:5b:a6:1b:52:88:af:f8:9c:6f:fa:42:
80:69:24:6b:e8:c2:f1:5f:98:82:89:57:1e:af:f9:a1:3b:61:
a4:cd:61:80:22:e7:dd:e8:cc:2d:11:a1:d0:ba:cb:a2:0c:8b:
72:08:5e:2e:c1:cc:9c:fc:9a:74:78:d1:c5:9a:61:b5:d4:37:
a5:e0:a6:a4:6a:bb:64:04:56:22:e6:06:ea:43:7a:4b:fc:8e:
af:41:58:f1:9d:3c:49:3e:44:56:97:4d:00:0d:c9:37:41:97:
ad:01:7e:69:e2:f5:54:8c:08:d9:03:6b:ce:79:82:9f:c4:b2:
7c:7a:31:89:4e:fb:a6:46:b2:67:87:e9:0c:3c:c4:99:db:19:
a3:73:57:79:e9:de:41:23:a5:36:1c:5c:52:a8:33:26:b7:e6:
c1:19:09:e4:2a:e7:0d:cd:f0:06:f0:cf:68:e2:a5:31:0f:c2:
23:ec:01:59:59:79:09:24:7d:7f:54:bc:65:34:cf:70:7d:7e:
e3:b2:03:11:29:25:26:a1:54:7d:de:54:fb:3b:cb:5f:bd:5a:
1a:31:f9:83:72:1e:9e:f4:a4:70:09:df:cc:ba:07:58:32:78:
ce:81:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:34 2026 by rpki-client