Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: wSOl14LNbmFjm1bsBaIvntAbEisj/v59HkbSiXelXvM=
Subject key identifier: D7:66:D8:97:5A:FE:7F:55:BB:0C:43:BF:7F:0C:AB:AE:4D:F5:05:39
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 019D3909FD110C010E2273C1E221E97C9266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0E8B
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: GqoVb012lhhRvBg6i2wb5HmEa7VOlLpJ5PpCU7WoF1c=)
2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fd:11:0c:01:0e:22:73:c1:e2:21:e9:7c:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=d766d8975afe7f55bb0c43bf7f0cabae4df50539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:f1:ac:9f:73:b7:c4:99:85:cb:e1:77:c6:
b5:94:4a:b1:3f:af:b5:df:97:ab:46:2b:32:b8:fd:
fc:a6:83:83:2b:03:7d:69:92:55:73:25:f7:d5:78:
03:19:63:48:e1:df:4d:60:6d:5b:2c:c3:1e:f5:39:
13:d5:b7:e1:81:2f:b7:e3:cc:20:cd:02:9a:93:97:
00:b4:78:c7:c7:13:4a:9b:91:a3:f7:e7:41:06:2a:
ab:1e:d6:ca:0e:7e:ba:d7:3e:98:2a:e7:8d:10:17:
95:01:60:d6:c9:e2:8a:46:a9:8b:8f:52:b4:47:51:
57:37:ac:83:4e:9d:86:05:4d:74:06:3a:d3:3b:19:
5e:b0:f0:73:2a:51:33:1b:bc:3d:7b:bf:1b:42:df:
ae:03:1a:28:26:9b:62:ec:a6:7e:b4:93:9d:af:68:
af:db:69:37:19:6d:45:69:cd:dd:80:51:b4:2f:53:
1b:87:6f:ae:36:c7:0e:ca:83:cf:fc:56:ab:da:53:
2d:73:60:a6:01:d4:3e:e8:ed:f6:09:d3:dc:62:cb:
12:1d:00:28:bf:a7:2e:db:22:be:89:fc:ae:9e:03:
9c:39:b8:31:2e:d3:02:b9:39:96:11:69:1c:5f:7d:
ac:ef:65:94:ab:6b:73:91:a2:86:41:af:29:12:eb:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:D8:97:5A:FE:7F:55:BB:0C:43:BF:7F:0C:AB:AE:4D:F5:05:39
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1b:f6:37:08:ae:0d:00:e3:c3:98:2f:8b:95:a9:9b:31:3c:
9a:0f:f0:73:53:fa:8e:6b:0a:59:26:ab:e0:41:80:72:74:ad:
89:c5:1d:53:9e:22:1e:aa:fb:03:a2:72:91:77:ce:85:d9:2b:
14:18:aa:ee:9f:c4:f8:4f:0f:b2:b8:90:04:de:dc:d8:60:02:
c1:b4:13:34:b7:e8:89:83:28:a1:05:37:24:aa:78:8a:d9:d6:
b4:89:71:6e:58:67:3d:9d:10:a0:b3:39:5d:a9:7d:4f:b6:7f:
cd:43:84:97:c1:ae:ed:fd:26:09:0c:a2:cb:87:7c:25:3d:8b:
62:6c:d5:45:3c:da:c5:81:1a:cd:1b:f2:99:75:d7:04:b9:89:
dc:e2:66:48:21:df:95:c8:52:87:29:50:c2:e5:ea:a9:7c:ba:
54:8a:f1:a3:c9:95:9e:35:d8:50:93:67:c1:67:83:ff:9a:89:
89:67:8f:4c:72:18:5d:62:b0:16:88:31:7a:1c:0e:7f:6b:3e:
98:83:70:81:d7:df:f2:60:12:ab:2c:00:03:ce:5c:8b:1f:c4:
26:29:be:4b:f0:75:97:86:cc:35:59:32:d6:ac:d6:ff:93:f8:
d4:1f:e9:ce:20:82:a1:ff:4e:33:45:ce:08:9e:93:e1:04:68:
1e:b4:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:41 2026 by rpki-client