Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: RivbFR5G7lI11v+BqlSSCDk35ZIV99fsoAtGjN0sPOg=
Subject key identifier: F0:B4:B1:DA:43:CC:CA:45:F3:DF:D5:EE:3B:FC:66:CE:3D:8D:AA:95
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 019DCDBD800C3DF81949599A01EFE2DB9996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0FD2
Signing time: Mon 27 Apr 2026 07:00:41 +0000
Manifest this update: Mon 27 Apr 2026 07:00:41 +0000
Manifest next update: Tue 28 Apr 2026 07:00:41 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: 2R8Uan+3WOkyHRpeWASTCVds1zk5kBog9taV/oa4vSk=)
2: nNppMpelb0oU-Z8bXlu9JPmj-50.roa (hash: vaplA6p67yz2pjVfp5DzGuZj7gD852HpFF3uwF96n1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:80:0c:3d:f8:19:49:59:9a:01:ef:e2:db:99:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Apr 27 07:00:41 2026 GMT
Not After : Apr 28 07:00:41 2026 GMT
Subject: CN=f0b4b1da43ccca45f3dfd5ee3bfc66ce3d8daa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:b5:44:40:7e:1b:5b:ce:2b:66:a0:e3:56:
13:bc:fc:78:fa:36:86:12:d9:be:8e:1b:ca:45:e9:
19:40:29:7f:53:27:a1:a1:64:07:9f:b3:df:39:5b:
97:1b:10:30:f1:aa:79:ae:3b:c1:75:23:7c:00:bc:
10:c8:65:33:e2:c8:28:29:fd:98:e0:bc:5c:f9:bd:
68:da:94:37:e7:0f:6b:15:d1:d5:5c:5c:a2:d7:97:
70:bc:4f:c8:01:5c:eb:3c:d2:9e:d1:68:e1:0e:e0:
a8:75:23:ef:26:00:c2:ec:5c:1d:d9:ba:94:8e:6e:
7b:5c:b6:6d:71:86:0a:0a:4c:70:67:8c:a6:d9:9f:
e5:6f:28:10:43:e6:90:1c:e9:c8:33:91:2a:e9:7d:
93:d9:82:b2:60:67:7f:ca:bc:4d:1a:16:28:da:45:
c7:4b:a8:f1:4e:20:91:32:bf:e0:5b:35:6a:f2:48:
54:80:de:ff:0f:39:b5:bf:be:46:7a:eb:72:0a:00:
19:a6:d9:7e:d9:9a:97:31:f5:8f:66:ff:9c:6c:31:
7f:bd:48:7a:4e:4b:44:5f:8e:c2:33:e2:67:67:16:
1e:4d:86:65:0e:76:cf:25:bb:e0:91:f3:55:ae:2e:
27:2b:6f:ac:24:62:4b:68:eb:1a:27:cb:76:f0:d3:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:B1:DA:43:CC:CA:45:F3:DF:D5:EE:3B:FC:66:CE:3D:8D:AA:95
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:fa:b4:65:9b:2b:8b:be:46:ed:c1:1a:6c:ea:1e:1a:75:
c9:4c:61:a1:d1:8f:78:86:58:d7:45:cb:1c:72:61:3f:67:94:
aa:12:2a:64:7d:8c:83:5a:76:8a:3a:32:35:b3:bf:a9:70:3d:
c2:0a:ef:0e:39:80:1c:77:31:77:7a:ce:ae:0c:6b:38:3a:2e:
a0:eb:1c:14:93:f0:bf:d0:d1:02:f0:e0:63:7b:c1:81:a2:34:
49:10:b1:50:af:31:99:1c:1d:dc:ad:90:5a:d0:82:0e:77:d0:
30:3e:59:3b:2c:1d:b2:7d:25:ad:7d:f5:1c:92:a9:96:23:e5:
73:65:f5:c0:d2:25:8e:af:06:e6:b9:75:d5:4a:de:f1:62:64:
cc:4c:1f:b7:5a:e7:c0:78:d6:bf:26:6f:9f:2d:99:1c:78:b2:
cd:26:ae:77:66:b1:7e:41:52:3d:28:8c:70:0b:4a:ff:04:80:
1a:13:dc:eb:70:37:63:fa:6d:4f:7d:74:c3:ea:8a:6b:ba:ba:
7a:11:d1:ce:9f:86:c4:38:f7:5d:85:d8:1a:72:e9:ac:3e:06:
78:32:61:c9:4b:d6:ed:9e:f2:4e:f7:90:c9:4e:19:9d:ed:77:
f7:60:03:7c:47:c6:a6:f1:eb:89:7d:0b:8b:92:cc:7c:18:b0:
91:61:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:26 2026 by rpki-client