Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
File: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft (raw, json)
Hash identifier: nHqTv8J5yPQ56+dqwKoma9z2oA0Of3XQY9NTL14U+lA=
Subject key identifier: C5:4D:BE:7B:D0:EB:90:0A:CD:CE:69:C1:46:5F:33:67:FC:AC:BA:7C
Authority key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Certificate issuer: /CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Certificate serial: 4C0C7099ABDCC298513B2D075B4750BC297EC8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
Manifest number: 68
Signing time: Sun 11 Oct 2026 18:27:19 +0000
Manifest this update: Sun 11 Oct 2026 18:22:19 +0000
Manifest next update: Mon 12 Oct 2026 20:15:19 +0000
Files and hashes: 1: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl (hash: iciPFTcEOPcUK7jVWl8TXIFjr2i86b82A3wLNG5chGU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0c:70:99:ab:dc:c2:98:51:3b:2d:07:5b:47:50:bc:29:7e:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Validity
Not Before: Oct 11 18:22:19 2026 GMT
Not After : Oct 12 20:15:19 2026 GMT
Subject: CN=C54DBE7BD0EB900ACDCE69C1465F3367FCACBA7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:5b:e3:b4:4f:3a:7d:6a:e5:42:f1:85:14:
d0:8b:5d:1e:a4:10:04:95:ad:ce:c7:10:de:2d:43:
cb:b4:a7:d2:18:92:5e:4b:76:48:59:14:62:f6:2e:
55:f6:d2:8b:c2:36:69:55:4c:80:6f:b9:ca:c6:7d:
0d:94:f8:45:ec:b6:08:4c:18:cd:29:04:90:53:5b:
65:b8:a3:28:e5:da:81:4a:05:a2:cc:0f:f5:a9:aa:
d0:6e:34:a1:c3:d4:32:cf:88:b4:7c:f2:b7:d9:46:
9c:3c:2d:0a:a0:c8:7c:de:46:3d:71:8d:cc:99:39:
c2:ef:71:74:e1:b3:96:af:3f:dd:02:97:24:05:d1:
7b:e3:04:20:58:03:de:0d:67:0b:3a:cc:9d:fb:d2:
bb:c2:35:9a:ba:7a:66:eb:b5:c7:98:39:bc:0a:ef:
58:b5:ab:e4:70:82:40:27:8e:f6:d1:38:57:e1:a6:
d6:42:fb:29:75:0e:d1:0b:c2:16:fd:52:b0:be:6c:
d6:ad:80:22:31:aa:be:5c:90:28:97:81:cf:01:82:
7a:92:28:fd:58:d8:16:97:7c:2d:6b:33:17:33:79:
81:66:cd:b6:b5:a2:43:7c:e4:9a:b5:8e:82:37:f1:
01:e7:a3:83:48:ce:1d:39:24:b8:82:75:ad:9e:75:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:BE:7B:D0:EB:90:0A:CD:CE:69:C1:46:5F:33:67:FC:AC:BA:7C
X509v3 Authority Key Identifier:
keyid:03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:55:47:20:ed:ba:6d:4f:03:e7:8c:83:64:28:15:bc:a8:00:
2f:06:e0:d3:82:5f:21:d2:4b:a5:5e:77:db:7e:10:1b:ef:ef:
3b:d9:eb:c3:44:28:af:de:3f:ed:3b:f5:12:67:fd:0e:ef:df:
76:44:3a:c9:84:af:a2:0d:c0:7b:57:66:de:3a:d4:56:f7:0b:
ae:39:40:49:8e:f2:02:87:36:6e:5d:43:3e:72:5c:bf:5c:6e:
59:34:cf:76:5b:e5:8a:a3:d3:d5:da:91:07:82:bd:90:aa:9f:
94:2e:44:6f:2d:d4:97:a6:91:77:44:bd:e4:67:36:a1:e6:4c:
84:1e:5b:3d:79:8c:ea:d8:75:ef:b7:04:31:5b:45:a0:a6:b7:
2d:e0:ee:d2:6a:77:70:14:ac:fe:6b:fb:bd:f1:3a:60:2c:e8:
0a:4f:35:e4:f4:04:81:46:0f:af:75:ed:69:2e:b0:dd:9e:33:
bb:e1:43:4c:e2:65:20:4c:cc:5e:cf:3f:e8:b3:ff:5d:5a:79:
ef:0c:6d:9a:50:b4:07:98:55:ce:b7:ac:60:4c:1c:76:5b:f0:
ae:65:83:f9:21:93:0a:76:18:07:99:26:9d:08:94:7a:33:4f:
96:2f:e3:aa:b9:5d:35:4b:89:00:0f:47:e1:27:ca:b4:a5:7d:
25:e3:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:38:03 2026 by rpki-client