Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
File: 356EndIcHQG2LXnhP74_rORSIr4.mft (raw, json)
Hash identifier: G/81eaaVM31Nl+24bIPT3sft5mBj98iDiKgB/zZA1QQ=
Subject key identifier: 18:A8:8C:ED:35:79:87:61:72:5B:AA:59:E2:FB:F5:0D:D6:3E:CA:34
Authority key identifier: DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
Certificate issuer: /CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Certificate serial: 01A0404E2B51757B575A56D8BB37319B24A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
Manifest number: 0213
Signing time: Wed 26 Aug 2026 23:00:59 +0000
Manifest this update: Wed 26 Aug 2026 23:00:59 +0000
Manifest next update: Thu 27 Aug 2026 23:00:59 +0000
Files and hashes: 1: 356EndIcHQG2LXnhP74_rORSIr4.crl (hash: 8ujDn4Igc7+WSTk0yKmFQ0rjhdzdKzw159W0QmG862w=)
2: W7kaUhASlYNkrMhJVklCrmbhwaM.roa (hash: xNYEU03R+PSzs/IRWbK0wthdfu1uuUt0qLfMcyCb11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:2b:51:75:7b:57:5a:56:d8:bb:37:31:9b:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Validity
Not Before: Aug 26 23:00:59 2026 GMT
Not After : Aug 27 23:00:59 2026 GMT
Subject: CN=18a88ced35798761725baa59e2fbf50dd63eca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:35:e0:ed:8d:98:05:cc:f8:15:00:7e:55:
f8:75:2f:3a:5a:91:33:01:60:b5:c3:b2:a7:3e:35:
3d:ca:ee:26:53:06:71:46:24:d4:24:0d:63:de:d6:
73:e3:9a:a9:d9:0e:74:b4:7c:c4:28:89:3a:c2:e8:
03:f2:d5:99:8d:35:22:2d:c0:4e:72:bb:d2:34:e4:
87:c2:24:5f:8d:09:71:8b:fd:38:cc:9c:32:23:ca:
b8:44:60:a9:ee:3e:46:a5:7e:ec:16:21:d1:c5:56:
5b:f2:9b:56:7b:69:07:fc:41:b6:0c:32:40:08:3f:
ef:81:bf:02:8b:03:b5:6f:d7:2f:e9:93:1a:ed:1d:
20:e0:d5:19:20:e8:29:54:76:a8:43:72:b3:bf:94:
3f:dd:cf:df:46:9f:df:0b:05:f4:6a:6b:c5:cb:43:
f6:0a:5c:6e:dd:55:81:96:2d:93:ee:c0:78:8a:62:
2c:13:4e:14:68:03:fd:6a:29:e6:54:18:3a:dd:89:
a0:4a:09:94:c6:42:7b:cb:85:54:33:36:c4:4c:24:
07:f1:22:47:1e:bb:07:4b:65:48:ab:91:a6:15:3e:
19:74:a2:37:13:12:1a:de:fc:f4:78:99:d6:cf:cb:
f4:5c:12:77:e4:24:f6:6c:76:3f:c4:ab:ab:84:3b:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A8:8C:ED:35:79:87:61:72:5B:AA:59:E2:FB:F5:0D:D6:3E:CA:34
X509v3 Authority Key Identifier:
keyid:DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:15:77:de:a0:f8:5d:d5:11:49:2c:b8:60:5c:b4:49:7b:1e:
ee:0d:9f:ae:59:35:36:7a:2a:ba:79:74:a1:c8:9d:c5:23:73:
36:f6:62:58:90:77:3e:ed:02:a4:bf:fa:86:98:05:73:ad:39:
63:34:e8:d7:c0:27:e3:aa:c4:f6:d4:de:31:99:bf:4d:ae:d6:
4e:43:1d:68:40:70:33:3f:57:cd:2b:50:1c:ec:30:69:4b:66:
e5:0b:08:9b:d3:3d:68:ec:08:79:30:6d:44:f9:5e:ce:81:48:
4f:4c:10:d1:d6:f7:31:75:07:73:1d:e1:08:06:6c:69:00:04:
cc:82:b1:6f:a9:6c:43:fc:25:d4:da:30:50:d9:7d:b2:8a:d5:
78:b2:57:ef:6a:a1:a1:49:39:09:1b:f6:c8:48:d8:5c:d8:0f:
7e:7d:8f:15:1a:3e:73:4d:a7:05:16:c3:c2:5e:dd:c9:f2:47:
f5:db:75:e9:f8:a4:45:90:86:70:b7:4b:c0:e6:d9:58:b0:8f:
33:3a:f0:af:d8:9c:82:5e:34:d9:d3:5a:50:bf:e8:02:0b:52:
04:8a:f5:43:dc:68:9d:8d:fd:b2:c5:7d:9e:61:6d:bd:c8:ee:
ee:73:26:c0:aa:ad:df:67:63:90:a4:d4:04:57:09:52:41:6e:
58:24:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:27 2026 by rpki-client