Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: podyhxYOlXPK+6UonLlgdHB+XWzhpElpewicGTyJseM=
Subject key identifier: 24:CC:42:CE:A3:AB:49:E5:25:FD:B1:82:F6:EB:EB:83:52:FF:4F:EC
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 019D9B87EF4A1C370918B59B6D1908BA06A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0EBE
Signing time: Fri 17 Apr 2026 13:01:10 +0000
Manifest this update: Fri 17 Apr 2026 13:01:10 +0000
Manifest next update: Sat 18 Apr 2026 13:01:10 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: R9GzoTFf7Iem8ehUxr3PLuUgD+tkfDCEtipPD93SqSk=)
2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ef:4a:1c:37:09:18:b5:9b:6d:19:08:ba:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Apr 17 13:01:10 2026 GMT
Not After : Apr 18 13:01:10 2026 GMT
Subject: CN=24cc42cea3ab49e525fdb182f6ebeb8352ff4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:e9:3c:81:b7:49:cd:13:d0:06:10:8b:e1:
14:5d:12:0d:7d:b1:28:4a:c2:b7:2e:9f:0c:b2:c0:
9f:f2:c3:5a:43:d4:63:cc:39:6a:c9:fb:06:08:d6:
c5:95:b3:55:42:84:64:ec:a0:6c:61:09:f3:7b:b3:
af:f9:30:49:d8:b1:2a:43:e6:07:f0:59:0e:3e:e0:
3e:ee:49:e2:44:14:8f:9e:98:3e:3a:af:31:05:ee:
7e:c0:15:84:14:15:21:e0:34:26:27:85:dd:c4:7b:
d9:b2:9f:8b:1f:be:24:9e:54:07:85:2a:05:cf:f0:
6d:a2:ed:54:7e:5b:2f:da:95:90:53:39:89:09:3e:
81:4a:71:19:37:55:56:b9:ee:ae:5f:40:ca:ab:d0:
28:fb:9e:18:7b:45:76:69:a5:c1:4f:9d:80:4c:c3:
da:fd:21:53:75:e9:d2:c4:b8:30:fc:a5:8b:0d:45:
43:fa:39:65:cc:24:69:07:13:9d:b2:f1:fb:99:0e:
9e:4d:07:33:b1:0e:1e:52:4a:1a:39:aa:45:34:7b:
a2:cb:45:e8:78:d2:23:c4:b2:3a:8b:3f:07:3b:38:
ae:58:ca:d2:1d:b4:ec:ec:bb:b7:7d:cd:a8:97:f2:
68:30:90:6d:cf:59:fe:39:62:20:c9:56:3f:cf:e5:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:42:CE:A3:AB:49:E5:25:FD:B1:82:F6:EB:EB:83:52:FF:4F:EC
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f3:02:1c:77:34:2c:bd:39:9b:81:c8:f3:14:60:74:ea:d8:
a4:80:a2:4a:6f:0f:4e:9b:93:5c:60:51:6f:48:24:2f:94:59:
53:23:eb:13:1e:2b:0a:5c:40:13:94:27:8f:04:b2:aa:66:e6:
21:53:e1:f2:81:b5:3c:f5:21:c4:d9:75:65:b0:a4:06:80:4f:
72:eb:4e:4c:fe:f4:9c:4a:fd:2c:70:d8:af:11:01:23:b7:b3:
4a:76:1b:62:c3:f7:53:ee:94:eb:33:33:2c:b3:7c:e1:48:c1:
3d:ca:00:9f:a5:71:04:e4:4b:21:b9:a4:1b:ef:86:d7:b1:9a:
a9:b5:1a:1d:c4:88:5d:a7:5c:07:61:e5:e2:08:b1:d8:5f:e3:
c0:09:86:26:9b:a2:67:6b:82:1b:9f:ad:3a:61:5a:02:8f:e9:
8b:38:44:48:e3:c2:c2:40:e8:cf:db:f0:0a:51:ab:c2:8d:ad:
60:97:6c:c2:8f:56:81:54:9a:9e:60:2e:67:4d:0a:1d:25:87:
b0:ab:85:97:a8:09:d9:b5:e6:e9:50:f0:a4:91:ea:b4:c5:e7:
c5:d6:4f:7b:61:da:90:19:46:33:df:1f:43:c6:d1:a0:f4:fa:
3b:54:16:82:54:c8:67:44:6f:07:c9:ce:2c:e7:e3:dc:85:02:
12:bb:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:50 2026 by rpki-client