Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: bAzFYBPSqdIkBYEkKWwJV039ADhOG0VAlpxx452MCGE=
Subject key identifier: CC:71:00:D0:F9:5A:D6:AB:AD:B5:04:BE:05:1C:66:AC:18:B1:B5:DA
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 01A17C5FCCD3A6756F3DEE180FB079DD7ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 08:00:15 +0000
Manifest this update: Tue 27 Oct 2026 08:00:15 +0000
Manifest next update: Wed 28 Oct 2026 08:00:15 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: lth+9ZDug+GxrfXYlV7TH1clNNc7Knl0VEXdlN4fix0=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:cc:d3:a6:75:6f:3d:ee:18:0f:b0:79:dd:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Oct 27 08:00:15 2026 GMT
Not After : Oct 28 08:00:15 2026 GMT
Subject: CN=cc7100d0f95ad6abadb504be051c66ac18b1b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:d4:ee:d6:d4:7a:60:d7:ac:a3:f8:68:88:
b3:90:c4:bb:47:26:05:d1:61:5c:01:0c:32:5d:c7:
9d:ef:5b:1e:81:09:59:86:27:7a:6d:cf:b3:91:66:
98:f5:ab:87:cf:a3:99:82:3f:53:45:37:01:02:a9:
a1:38:13:6a:ed:9b:b2:3a:fd:7d:1a:a1:ca:1c:ea:
1d:9b:70:eb:8a:5e:3e:93:38:2b:9e:99:99:31:3a:
73:a9:5a:8c:fe:30:40:b6:0e:8b:3a:f2:90:a8:b2:
af:a4:76:01:ed:67:63:82:3c:ae:5f:b1:b0:43:4c:
67:00:26:2a:74:0e:73:35:a3:45:ad:14:12:69:de:
ae:1c:10:bf:ba:ec:dd:c2:25:68:e5:cb:da:37:b4:
4b:0c:34:87:d4:72:64:c8:95:2c:b5:8a:98:0f:8d:
b3:1f:b1:82:e4:83:01:ca:89:dd:46:1e:7e:5c:63:
6c:c6:0b:b0:97:03:67:0e:b3:f1:65:51:40:2f:fd:
a5:4e:34:af:ab:11:35:fb:e1:2a:33:73:d9:f0:49:
e5:0c:84:55:57:69:7d:44:7b:43:c1:3c:0f:1c:73:
d1:eb:44:d3:22:82:3f:f3:ba:ba:a8:2c:10:01:31:
4e:c6:ef:83:33:89:8c:13:61:9d:24:3e:68:ca:df:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:00:D0:F9:5A:D6:AB:AD:B5:04:BE:05:1C:66:AC:18:B1:B5:DA
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9b:bf:04:d0:ed:eb:be:3c:4e:b5:1e:9d:ce:9b:ee:00:51:
41:47:12:5f:16:6c:46:d1:32:6f:db:8f:26:2c:1c:d3:95:16:
b0:0b:c6:67:7b:da:80:93:68:70:7c:b2:c3:57:b8:0e:c4:05:
41:91:a5:ed:dd:b3:b9:9c:17:4c:27:3f:0a:0c:63:a1:81:8e:
5f:4b:33:7d:35:8d:c2:ff:e9:ae:04:1e:3c:32:2b:c3:bd:f8:
09:00:bb:41:ab:48:2a:e4:f8:2d:e8:c4:66:65:7a:bb:5a:d6:
41:11:03:58:c2:3d:6b:28:78:0f:66:e4:76:6d:d8:f6:b0:f6:
f0:cb:af:b6:37:a7:9f:84:e6:eb:0f:54:7d:3d:40:36:f3:19:
2a:21:a3:5e:3d:a2:bf:ca:10:4d:d8:ff:d4:67:88:eb:62:14:
09:75:33:87:85:2f:f9:1e:ed:6e:47:b0:e5:e5:cb:f1:3f:01:
3a:16:cd:cb:da:a4:f3:0f:e7:e9:ea:31:d0:3f:28:08:3d:ad:
cd:86:96:df:ea:c9:7b:3d:74:7f:e6:62:0f:18:2f:7f:08:d0:
b4:33:ea:81:cb:86:5c:07:54:8d:43:be:9b:6c:38:e8:a9:56:
4d:ff:7b:e2:b8:89:b2:58:d6:49:8f:e7:aa:4b:1c:2d:2d:48:
28:da:8c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:59 2026 by rpki-client