Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: lz1zQ3wxAEMvM8mch2Nn5MFtyx1MvgRnWEnDddwP3ZY=
Subject key identifier: C8:79:94:A3:C0:9D:F5:9B:C8:4F:B8:A5:EF:C5:9D:89:80:8A:B9:82
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 019EB5B361E2A9B8DBB9792964B3D84831DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 08:01:32 +0000
Manifest this update: Thu 11 Jun 2026 08:01:32 +0000
Manifest next update: Fri 12 Jun 2026 08:01:32 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: yGDPOKIi75CJnNQt8aHaFKzB8qPHbM0ztaeECCb5oyg=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b3:61:e2:a9:b8:db:b9:79:29:64:b3:d8:48:31:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Jun 11 08:01:32 2026 GMT
Not After : Jun 12 08:01:32 2026 GMT
Subject: CN=c87994a3c09df59bc84fb8a5efc59d89808ab982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:d9:4a:34:83:8b:56:3f:44:b2:45:cb:59:
3b:8f:97:7b:17:50:44:48:ec:4d:9a:c3:68:8c:5d:
5b:b6:4f:c6:18:54:bb:13:74:96:45:dc:95:97:76:
ca:74:c8:4a:fc:34:ed:9d:37:1e:67:84:e5:f5:59:
39:8c:cf:40:65:2f:a1:cb:78:b8:f4:85:93:0b:6e:
81:46:9c:2b:ad:3c:ff:1e:41:0e:e9:1f:86:a0:e2:
4d:9e:91:27:48:60:a1:4c:a0:9e:33:67:93:93:ee:
f2:e1:fc:8b:1b:ff:a5:54:8b:21:c3:b2:1b:9b:50:
53:9f:b7:3c:10:b0:b1:52:48:57:5e:ec:7b:c2:c1:
c0:7e:a5:f9:b6:29:c9:54:45:ea:e5:4f:b1:84:b7:
32:f1:f6:08:e9:a6:82:70:57:f7:6b:af:52:80:08:
5c:b1:e7:58:1b:2b:f3:b0:5e:e2:23:24:4f:3a:67:
29:55:5b:29:0e:d1:47:a3:6e:cd:db:b2:6a:42:c2:
6c:7a:09:da:41:b2:28:1e:42:b2:15:f9:36:6b:95:
74:a8:89:3d:44:e3:f3:2a:d0:a8:a1:b4:23:b5:a6:
1a:8c:a8:98:be:83:ad:a1:a1:0e:91:4d:ee:50:33:
93:4e:35:e7:3c:dd:60:12:55:91:19:65:6b:31:6d:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:94:A3:C0:9D:F5:9B:C8:4F:B8:A5:EF:C5:9D:89:80:8A:B9:82
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:85:83:d1:f5:13:27:3f:dc:18:3a:07:06:69:34:a7:a4:3e:
2c:f1:36:f1:6e:a4:40:33:63:65:54:1f:7b:40:19:78:6c:ad:
64:75:cd:20:4e:e4:3e:41:b5:f6:fa:92:5c:d5:a4:17:76:34:
c5:16:f8:ea:90:db:aa:b6:0f:9e:6d:4e:d9:d8:b8:6d:2a:c5:
60:53:cf:19:7f:07:1a:dc:88:20:02:89:2d:ae:1c:b7:35:72:
f4:95:d8:24:d0:39:ef:85:fa:f9:e6:70:f8:cf:4b:00:2b:a3:
63:87:53:81:37:66:42:f2:94:89:fd:91:b0:4e:dd:91:92:fe:
f9:9a:d1:7b:d7:90:c5:54:53:ae:3b:0a:ca:11:a7:c3:9d:6c:
8c:91:a6:32:36:cd:5d:55:ac:e4:1b:25:3a:1d:10:74:9c:9d:
ad:fe:d1:94:4a:24:52:00:cc:42:2e:9b:a7:7a:2d:23:5c:c0:
09:99:2f:11:80:41:ec:5d:6a:0f:a3:68:3a:fa:6b:f7:90:75:
78:75:c2:66:8d:b9:e4:b1:53:9c:a3:a2:aa:53:67:86:13:18:
81:5e:33:93:ab:af:5d:23:c0:44:1d:7d:f8:87:7b:bc:50:85:
1e:e5:9a:88:c8:c9:9d:e5:be:cd:69:ef:9d:ed:4f:08:57:68:
32:4f:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:09:26 2026 by rpki-client