Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.mft (raw, json)
Hash identifier: aQptQkeURf0lj/+qgsdzvkzw1IKpxxaIt4KJiYJn6Sc=
Subject key identifier: 9A:D1:42:51:21:5D:0F:66:78:5D:C7:52:2D:7C:CB:BE:A3:F7:B4:01
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 019D39E562D571CCAA9968FF8C00DF925144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:27 +0000
Manifest this update: Sun 29 Mar 2026 14:00:27 +0000
Manifest next update: Mon 30 Mar 2026 14:00:27 +0000
Files and hashes: 1: 36xiikxcxuVw9PQcTg1jlUkbTX8.crl (hash: 5OzpdblQOWpz+bGDIejbMcOwohdrNtxy9Z2eK/FWwc4=)
2: x1B-mdWUUiKHAk3b8SUqN_-EL2I.roa (hash: WJUhh7/d5aZNzfyoptLs5bYcLK8fHrUMzT9DKjN5hPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:62:d5:71:cc:aa:99:68:ff:8c:00:df:92:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Mar 29 14:00:27 2026 GMT
Not After : Mar 30 14:00:27 2026 GMT
Subject: CN=9ad14251215d0f66785dc7522d7ccbbea3f7b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:77:91:94:ee:be:88:b1:b0:f5:35:ea:13:
74:75:c3:ba:1d:b0:28:dc:bc:b1:dc:fb:e8:44:3f:
93:a3:50:e5:65:4b:03:d0:59:c7:27:43:90:9a:6d:
00:34:29:0e:31:ee:8a:a5:03:82:6e:57:e9:b3:a3:
a8:a0:b7:05:10:c4:03:04:1f:e7:94:77:8a:57:4c:
27:13:3d:ef:23:92:58:20:95:15:a6:e1:bf:5d:29:
57:81:0e:3f:e6:d8:98:d0:8d:43:6a:04:36:e3:57:
28:7e:6f:88:f9:8b:47:52:7c:63:dd:9f:18:61:84:
51:43:4d:e0:4c:27:97:27:99:ed:a4:88:83:33:6c:
ff:ae:0c:7b:bf:d1:c1:d6:ec:ba:0a:3e:fa:d4:2a:
4a:0a:b0:9e:82:47:e0:a8:b1:69:54:43:8a:81:2a:
b0:b4:be:d7:f4:7d:23:03:2b:9f:5d:38:15:e6:f7:
30:93:57:a1:ac:b7:d6:fb:52:51:91:22:63:d2:22:
ab:50:60:3d:b6:55:54:3a:24:71:eb:f7:86:d9:ad:
fa:fb:9e:ef:bc:b4:50:11:80:78:98:e9:b5:79:f8:
0d:a7:37:3e:2e:62:1e:43:6f:dd:ef:a8:2b:ae:9f:
74:93:5b:1f:47:48:e9:00:ff:72:a9:f1:39:51:52:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:42:51:21:5D:0F:66:78:5D:C7:52:2D:7C:CB:BE:A3:F7:B4:01
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1b:30:7e:d6:5e:41:91:ca:a5:8b:11:1c:c6:6f:5c:96:14:
aa:62:54:e4:b3:03:c4:6b:fd:44:48:31:f9:78:39:33:99:eb:
4b:70:1c:e8:b1:14:11:22:d0:ce:94:5a:47:80:b5:29:14:df:
fc:6d:20:9c:4a:5a:74:22:21:7c:54:1a:59:78:71:c8:26:90:
60:f9:7f:b9:17:f1:b7:6c:39:a2:2f:3a:3c:3c:96:b4:80:e6:
9a:ce:87:98:cf:f6:5b:ee:51:d0:ec:76:53:c1:cc:dc:32:3a:
0f:00:f2:0b:9d:8f:5d:e5:b6:87:77:b4:71:e0:e6:9b:2c:2a:
71:b1:73:18:f7:24:14:32:55:23:d4:64:a5:69:c7:97:85:83:
23:fc:0c:15:09:ea:51:7f:71:a3:22:d8:93:33:2d:ae:86:60:
b9:7c:3b:bf:c9:48:d2:fa:2c:1c:57:9e:bb:59:bb:62:87:18:
ef:a4:f5:b6:ff:65:29:83:fc:3b:d6:7c:55:a4:1d:43:88:1b:
27:7e:e5:9c:ca:d8:9f:c0:e8:70:c6:5f:05:6c:4b:37:3d:cb:
0e:3d:db:e7:29:ed:1f:e4:10:e2:d9:c9:ff:57:9f:cb:28:25:
04:44:3c:b2:5d:b2:ed:a5:ce:48:73:35:66:f9:ed:e4:f6:23:
e5:df:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:06 2026 by rpki-client