Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: Mjb1/yow5yp8QkdmAi6lFV2Nxtim/kLa89jY2ce2fog=
Subject key identifier: D2:28:67:6D:9A:A7:3F:A7:47:7F:D3:27:9A:AB:D0:83:17:07:41:EC
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 019D99D09103A4FBC0F50CD1529FEF9E4566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:15 +0000
Manifest this update: Fri 17 Apr 2026 05:01:15 +0000
Manifest next update: Sat 18 Apr 2026 05:01:15 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: sZXaNJgFXaxEWFDWphATG6jWWwJfHKUPJW6qJ24ccVM=)
2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:91:03:a4:fb:c0:f5:0c:d1:52:9f:ef:9e:45:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Apr 17 05:01:15 2026 GMT
Not After : Apr 18 05:01:15 2026 GMT
Subject: CN=d228676d9aa73fa7477fd3279aabd083170741ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:9d:a7:38:13:9d:33:18:4b:94:da:ef:dd:
7f:98:8b:64:44:63:19:31:36:4f:a5:5a:8c:e1:ff:
8e:32:e2:c5:a3:f9:41:eb:d0:e2:e5:96:12:29:22:
71:7e:cb:e9:13:08:b9:11:f1:fe:f8:08:bf:7b:11:
b7:e3:66:d0:17:f8:31:5e:48:85:28:17:eb:08:a5:
8d:85:1a:b5:14:eb:24:21:bf:5f:de:e1:64:f0:3b:
23:d7:8b:fb:fd:bd:a5:bb:8c:fc:14:ba:26:e8:f7:
6f:38:f6:fe:2f:fa:ec:99:d8:11:01:77:e6:53:1e:
97:a2:92:91:cb:b9:f6:d8:4f:d8:ed:83:4d:cf:4e:
16:52:77:ba:5f:9e:d5:64:35:9e:6f:78:3a:9b:c2:
d8:c7:2f:e4:b0:f6:4c:0b:6d:35:67:f3:f9:76:75:
4d:0b:39:7a:cf:5e:8a:6d:60:a8:6c:f8:cf:44:32:
9d:86:44:22:19:78:f4:e6:d7:3b:62:6f:79:35:03:
70:d7:03:9a:c3:31:e3:d9:94:b8:76:a4:c0:7c:c3:
b6:2e:8e:6b:43:22:24:33:9c:4a:91:70:f8:83:2c:
7d:d3:d1:ff:95:8f:f4:80:d7:ef:93:4b:8e:13:fc:
31:bb:67:63:d5:84:c8:c7:00:7e:18:25:bc:29:5a:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:67:6D:9A:A7:3F:A7:47:7F:D3:27:9A:AB:D0:83:17:07:41:EC
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7a:87:d0:90:18:36:4f:a6:d8:be:69:85:8e:72:c2:2d:90:
f3:09:e1:43:85:ad:4a:e9:e5:17:fc:fb:e4:f7:92:0f:4b:68:
6b:11:26:b2:e9:99:61:06:2b:7f:81:f5:a3:61:71:81:0a:b6:
84:c7:40:40:41:88:b6:ac:6d:b2:8b:9b:11:99:02:f5:a9:97:
98:7f:7c:5c:6b:5e:7d:d2:4b:6f:e5:34:56:75:2a:6e:d3:01:
b0:f6:76:e7:34:8b:6e:86:dc:44:91:ed:7b:df:c3:97:7a:7b:
69:ca:73:37:ee:8f:d0:b1:98:c3:50:a8:b3:64:38:9a:38:da:
fc:86:77:c1:51:06:89:84:80:3b:d8:40:11:ba:3f:ba:33:bc:
cb:49:b7:b4:58:f0:bc:14:49:29:3b:15:d4:cc:02:cf:10:2a:
ae:91:a3:3a:54:a4:bd:f8:c3:8f:53:3f:f8:28:ba:45:53:58:
d9:3f:7a:28:b0:10:2b:cd:99:50:62:cb:ed:6e:58:62:da:11:
f9:5d:cb:4b:27:9f:51:e8:cb:2e:d7:2e:ef:df:15:3d:72:f9:
69:84:f9:2c:95:65:2d:40:e8:e8:a9:ea:6f:50:ea:3b:32:72:
9a:a1:49:05:2b:d7:9e:99:16:be:77:90:4c:d2:c7:15:8f:09:
6b:f8:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:32 2026 by rpki-client