Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: xMNnvTWJgd7y1V1S2KBAHKmwvTKs04sLdWRbfHyANWk=
Subject key identifier: 06:80:64:D1:F9:64:83:A7:F5:58:E1:7A:2D:A4:DD:36:28:1A:04:B2
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 019D3B2F1BA97F2E20E6BF201B73CFABEAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 20:00:36 +0000
Manifest this update: Sun 29 Mar 2026 20:00:36 +0000
Manifest next update: Mon 30 Mar 2026 20:00:36 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: SQe8icIW9bzzFlC7pkpiTcTVwlGa93UmgQ6yaeE3Uvo=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:1b:a9:7f:2e:20:e6:bf:20:1b:73:cf:ab:ea:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Mar 29 20:00:36 2026 GMT
Not After : Mar 30 20:00:36 2026 GMT
Subject: CN=068064d1f96483a7f558e17a2da4dd36281a04b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:9a:d8:d9:cf:e5:bd:f1:d4:18:92:fc:70:
f1:29:bc:e9:5e:b5:15:bb:c0:dd:d3:26:01:77:87:
e9:f9:62:e7:cd:81:99:d0:d7:54:7f:9f:81:77:e4:
b6:21:32:7d:3e:58:41:b4:db:93:58:fe:2b:0d:1b:
b5:f9:30:cd:80:de:29:ba:ff:84:ac:75:9a:b3:a3:
b1:16:90:30:0a:32:7d:9f:e4:74:8b:9d:30:87:50:
86:c9:9c:65:3d:2f:ce:51:07:cf:55:b5:89:4f:f7:
39:32:26:5a:62:19:a9:30:d1:10:74:0e:78:6b:50:
8e:6f:65:5f:77:d7:6c:5f:8d:00:5c:00:23:33:5a:
de:23:12:40:1a:b3:f9:2d:b8:10:8a:f1:e8:84:78:
b9:c2:1c:07:dd:7e:86:48:34:80:d6:e8:86:5b:9f:
ad:43:9d:5f:6b:e3:3e:6e:53:02:8c:a0:f7:0f:55:
cf:ab:5f:85:3d:cb:85:ee:8c:d8:92:13:08:ca:e9:
b1:99:5d:26:bb:8d:98:f6:df:99:41:f7:d9:e9:be:
21:68:2c:c7:4f:e2:88:e2:55:29:63:88:7c:61:c9:
23:2e:9d:20:34:63:b4:0a:a8:4e:64:ac:ee:4e:d9:
98:d0:54:ac:c6:d3:72:f5:19:2d:4d:e2:9a:e4:a4:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:64:D1:F9:64:83:A7:F5:58:E1:7A:2D:A4:DD:36:28:1A:04:B2
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:da:63:c8:73:3e:80:a1:f9:5c:22:ef:45:8d:a8:76:df:
14:0a:99:54:cb:52:bf:86:53:b0:8d:f1:7f:f8:1a:d4:e6:71:
4a:7b:2f:32:a8:08:93:94:7b:07:32:a1:86:30:3f:4f:59:84:
18:5c:bc:dc:06:21:7e:2f:f6:d3:cb:0a:31:4c:12:7c:e1:51:
f2:b9:3a:91:5a:35:b8:6c:1f:2d:78:b5:d2:4e:4a:09:f4:d6:
78:42:db:b2:64:92:13:52:d3:57:1c:8d:82:7a:56:46:b6:b1:
ef:b2:d4:e9:e9:ee:c8:02:98:8a:6b:00:80:7a:f2:c3:8c:9c:
2c:5f:50:19:63:42:9c:f5:14:5d:bc:e2:72:30:de:a8:50:fa:
cf:2d:5c:ee:b4:74:39:74:ec:65:0b:b6:9e:72:52:4d:57:89:
fc:f6:fa:e1:cf:43:fd:42:df:10:63:36:15:9d:97:41:28:73:
80:eb:3b:e0:99:df:16:16:2a:b8:be:d2:c1:c3:97:77:fc:21:
67:9a:aa:6d:8e:4a:af:5e:eb:e4:59:c6:cb:9f:26:a3:e9:17:
ab:53:69:a8:dd:73:69:0b:75:63:1b:af:35:6d:88:20:60:13:
c2:d9:ee:24:04:3a:1c:98:3a:b7:85:b8:77:00:de:bd:e8:b0:
89:7d:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 00:48:05 2026 by rpki-client