Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
File: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft (raw, json)
Hash identifier: If3qSMIiyqsY/bPkk05lPWfG19j25ryH5hTIreyyGN0=
Subject key identifier: 84:21:EE:AD:39:EC:A6:A0:0C:1C:80:5E:5C:01:AD:0F:56:B6:DA:E7
Authority key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Certificate issuer: /CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Certificate serial: 674B805B50D80D95D789700EF7DB5E4F91121585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
Manifest number: 66
Signing time: Sat 10 Oct 2026 05:47:01 +0000
Manifest this update: Sat 10 Oct 2026 05:42:01 +0000
Manifest next update: Sun 11 Oct 2026 08:03:01 +0000
Files and hashes: 1: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl (hash: l28SV3hWDyndTuiBgO9p6ubGeNzQ8HmSBrLYWOsqWtk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4b:80:5b:50:d8:0d:95:d7:89:70:0e:f7:db:5e:4f:91:12:15:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Validity
Not Before: Oct 10 05:42:01 2026 GMT
Not After : Oct 11 08:03:01 2026 GMT
Subject: CN=8421EEAD39ECA6A00C1C805E5C01AD0F56B6DAE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:72:23:bd:94:5f:12:3e:67:23:e9:2d:7f:00:
7d:21:96:21:10:55:f1:8e:3c:52:67:60:86:4a:da:
0f:91:70:69:d8:1d:e6:8f:ee:34:9d:91:db:1b:4c:
12:e2:61:c4:2e:df:c9:35:86:27:73:a3:61:ed:42:
5a:41:a7:c0:a4:76:9a:12:5e:12:b8:f3:66:1a:37:
80:37:a2:7a:66:e7:21:7c:46:53:aa:61:f3:6d:62:
4c:4f:f9:bb:4a:54:ed:b4:cd:90:0f:e3:fe:ef:52:
bd:9e:6d:c9:f9:02:92:0f:5e:0e:83:b2:fa:42:02:
eb:e9:35:16:07:2e:99:4c:39:7c:4e:59:99:e9:12:
d6:ac:61:35:73:5f:99:4e:aa:46:b2:be:21:0b:a4:
1c:cd:94:4a:e2:99:93:90:2b:88:8c:89:5d:88:16:
31:c5:87:7c:94:5b:90:2b:ea:82:20:5e:2e:e9:f9:
0b:88:2c:38:02:d2:e3:33:82:f5:ae:20:31:e5:81:
95:11:27:7d:c5:c0:92:37:79:5b:4b:90:d7:55:80:
c9:06:f6:89:ad:40:11:3c:00:a9:32:33:3a:c6:46:
be:7b:25:cd:58:90:b0:4e:c0:b1:bf:1e:6b:3c:cd:
76:30:a8:84:e6:35:6f:fb:f0:e3:d6:92:59:6e:c0:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:EE:AD:39:EC:A6:A0:0C:1C:80:5E:5C:01:AD:0F:56:B6:DA:E7
X509v3 Authority Key Identifier:
keyid:03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:3e:8b:c0:9c:26:4e:a9:d0:b1:ec:22:af:eb:dd:4a:7c:
e2:50:d8:ee:8b:8a:3a:aa:64:a1:2c:8c:e7:13:d0:56:49:b3:
26:34:26:cc:d8:9c:0e:33:a8:ca:96:59:83:2c:22:13:6f:3b:
7c:0c:2e:6f:fa:a8:7b:33:6f:0e:9d:da:52:a7:89:36:af:49:
12:78:e0:23:cc:09:bf:d9:e1:df:3e:81:d5:00:c8:f9:8e:41:
04:e0:c0:72:60:f3:c5:74:f8:4b:0c:76:f9:4b:4f:af:48:d7:
10:77:01:5c:7f:e2:7c:cd:25:8a:f0:06:a1:44:49:d6:1b:09:
af:9c:f3:24:31:e9:92:38:8e:0d:db:48:b4:0a:3a:28:79:62:
3c:4f:de:59:b1:89:42:d0:48:dc:86:5a:ff:a0:63:b1:81:8a:
ff:3b:b2:6b:8b:1f:52:6f:5d:50:97:6e:1f:68:62:b5:88:46:
15:e6:62:a1:a2:b0:d0:4f:ec:18:aa:f0:d7:5e:85:72:21:e4:
0b:10:98:0e:44:a6:d9:c0:31:4d:b6:31:4e:45:29:af:4f:45:
ae:0f:6c:af:86:69:44:0e:d2:9b:fe:92:cc:91:4a:da:f7:b5:
75:0f:64:88:d4:98:31:54:79:64:ea:ad:1d:80:2b:5f:48:8d:
aa:ae:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:43:10 2026 by rpki-client