Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: TSVZQ+ni6Gxlp80XorB1f0jGEL4567N8ZWRNgm4hxJo=
Subject key identifier: CD:55:8D:71:54:72:A8:D3:24:02:B9:9F:14:4C:78:65:38:7E:FB:49
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 019CAA5937F5FD913F709287904CD0134063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: VkaSqsUKwrg/KQ8X/qpwKbiUPchQrgKLgUaWXjQy/SY=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:37:f5:fd:91:3f:70:92:87:90:4c:d0:13:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=cd558d715472a8d32402b99f144c7865387efb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:61:bd:38:e1:6e:96:6e:0a:57:f7:28:b2:
54:f3:dc:4d:8e:ff:ba:73:01:18:96:20:bf:23:9d:
24:b3:15:e5:f4:4b:89:1f:7b:2b:f3:e9:4f:c8:cc:
26:c7:32:db:26:59:16:a9:f1:ee:25:b2:e1:fc:1a:
99:dc:7c:7f:1f:2d:41:66:d5:2c:05:16:a6:a8:7e:
bc:d9:08:39:ec:db:b2:52:9e:b0:03:30:5c:53:d6:
ae:45:3c:1b:d2:ff:10:80:d9:19:80:74:51:9c:d8:
91:a7:13:a4:56:20:47:d3:bc:97:1a:ea:7b:72:0b:
e8:80:24:41:af:db:28:cd:d6:21:c9:51:0d:e6:02:
db:2d:94:33:13:b8:5e:60:77:7c:00:90:21:16:97:
9a:3f:8a:f8:88:d4:e8:28:d7:33:fa:b2:00:ca:5a:
f7:59:37:e4:48:86:88:6e:6b:48:4e:2b:28:c5:a5:
db:1d:e4:bd:65:0b:09:e5:e6:7a:96:5f:92:11:e7:
41:db:bc:8c:5a:fc:90:bd:96:c6:78:a4:b4:d5:d3:
5b:be:52:51:50:41:3a:01:d0:91:79:8c:eb:70:3e:
b1:c7:3f:79:53:42:ae:53:91:c4:d9:a3:c6:63:9a:
23:81:c1:96:38:2e:32:ed:4e:e1:5e:54:0a:04:da:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:55:8D:71:54:72:A8:D3:24:02:B9:9F:14:4C:78:65:38:7E:FB:49
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:b6:b2:01:8c:e9:85:91:40:e8:23:f2:03:0c:74:16:67:
1d:82:5d:5d:e0:25:14:ff:c6:a0:6b:ee:57:e5:12:9e:a2:05:
97:50:1e:00:c9:3d:2a:b9:ba:5d:2d:c3:6d:dd:37:38:63:bc:
cd:4f:2e:4d:f1:28:fa:7e:43:a7:8b:e9:94:f4:64:90:3d:99:
5d:17:5a:b1:a5:54:01:c8:d4:0c:87:fc:48:bd:d7:f7:a0:ac:
bc:c8:35:ec:08:a4:ad:ec:bf:0a:ea:b5:2e:cb:a1:04:ed:40:
e1:a5:94:d0:aa:5b:3d:a0:95:a9:a1:53:b7:34:c2:4a:86:98:
79:84:c6:05:78:78:7e:45:69:d7:7f:c1:56:98:a5:51:2e:6e:
e5:27:a9:0e:68:c0:fc:e6:73:68:b2:93:3c:60:38:50:0a:b3:
40:74:e1:5f:c0:56:66:53:c6:6c:d4:68:7f:29:3d:7d:87:d1:
b5:43:dd:b8:75:01:7e:af:bc:ae:ea:b0:b3:c2:dc:80:56:58:
49:3e:d5:61:66:7f:b0:56:c0:4f:5b:86:9c:f7:b4:13:00:56:
a3:83:f0:6f:99:ca:fa:fb:75:56:7a:1b:21:4c:1a:ca:45:02:
f1:f0:42:70:be:df:c0:c7:02:96:0d:83:7f:47:4a:54:3f:94:
b8:a9:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:43 2026 by rpki-client