Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
File: 356EndIcHQG2LXnhP74_rORSIr4.mft (raw, json)
Hash identifier: vn4CZ0IE0UalKm2qLVc4YZod58dIUTLxvHwNyBJxrr8=
Subject key identifier: 29:DC:1D:C6:2D:F6:27:C2:60:45:8B:FC:D8:8D:ED:56:38:2A:00:E7
Authority key identifier: DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
Certificate issuer: /CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Certificate serial: 019D39E5E28CC2E8E38720809D50536EF722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
Manifest number: 82
Signing time: Sun 29 Mar 2026 14:01:00 +0000
Manifest this update: Sun 29 Mar 2026 14:01:00 +0000
Manifest next update: Mon 30 Mar 2026 14:01:00 +0000
Files and hashes: 1: 356EndIcHQG2LXnhP74_rORSIr4.crl (hash: 2VVBLvd6a2xHyoDQKIawJT1lzVRzdqdP09Pib59tSM4=)
2: W7kaUhASlYNkrMhJVklCrmbhwaM.roa (hash: xNYEU03R+PSzs/IRWbK0wthdfu1uuUt0qLfMcyCb11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e2:8c:c2:e8:e3:87:20:80:9d:50:53:6e:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Validity
Not Before: Mar 29 14:01:00 2026 GMT
Not After : Mar 30 14:01:00 2026 GMT
Subject: CN=29dc1dc62df627c260458bfcd88ded56382a00e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:46:2a:16:c1:1a:85:85:fb:60:0f:b4:56:
b1:03:56:e9:18:23:1d:1c:54:a4:e0:48:a5:31:7d:
4c:82:1e:22:63:07:6b:7f:ef:a7:33:3d:65:7d:d4:
85:ff:48:48:bd:0d:15:e4:78:bb:56:9c:bb:7e:1d:
24:df:03:ff:7b:94:79:d5:96:d6:10:39:a8:be:d2:
6b:a1:3c:a4:0b:95:bb:03:60:1e:54:45:1c:ca:73:
03:e3:91:34:99:6a:34:e0:3e:50:28:55:a0:e8:9a:
d0:43:d2:d7:12:73:a0:c5:1f:3c:f4:26:73:a2:2c:
30:8e:53:98:cc:17:c3:35:0c:95:5d:c0:1e:08:e6:
e1:ff:0e:cf:72:e6:c7:23:34:72:0a:d3:1a:82:0b:
17:d8:91:53:d3:cb:2b:d7:1c:74:dd:71:f1:49:d5:
84:78:b9:ae:6d:47:4f:a5:d6:a1:3d:59:a3:cb:fe:
7a:32:1f:06:69:7f:15:24:20:e0:0f:6e:08:34:5a:
99:79:8e:11:55:65:a0:d0:4f:35:83:a8:97:7c:88:
df:87:41:c9:30:4e:8b:fc:59:78:0f:3f:2f:1f:d1:
e6:a3:07:da:18:e1:83:76:9c:82:13:cb:1f:1e:21:
e9:35:7c:c0:d8:08:a9:5c:49:c0:da:b8:54:d8:27:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:1D:C6:2D:F6:27:C2:60:45:8B:FC:D8:8D:ED:56:38:2A:00:E7
X509v3 Authority Key Identifier:
keyid:DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d0:4e:0b:ec:c6:8e:43:7e:fb:90:a9:40:69:ee:11:7c:35:
8f:1a:86:33:6e:ae:46:d1:51:0a:78:55:5f:87:3d:a4:a0:12:
dd:56:c5:4d:5a:07:88:e9:83:24:7c:26:52:67:74:95:25:be:
01:66:1f:44:5f:7a:8a:67:36:ff:d2:c4:a0:1c:34:51:60:36:
24:9a:a6:3a:a9:47:68:c0:9d:d4:00:42:fa:0c:2b:26:d9:9e:
6b:9a:3f:f9:9d:84:a6:28:af:00:47:92:3f:03:86:da:92:21:
e8:58:af:ed:7a:ea:bf:51:54:25:b2:b4:e5:f9:c9:d6:8d:b5:
5e:7e:f8:c3:1a:36:46:87:c7:67:87:27:23:78:a6:93:d2:dd:
35:a3:2f:82:72:80:63:26:a3:92:20:9a:27:49:98:e0:57:4e:
dc:ec:09:f5:e0:ae:e4:ef:db:ff:7b:ee:32:50:a0:e0:4c:6a:
a6:c4:c2:a5:2e:08:ae:a1:cb:ee:f1:62:e8:f7:20:21:70:16:
b1:24:55:b4:01:29:94:94:8a:a6:22:46:33:8a:69:c5:af:d9:
d8:e2:98:2a:95:d5:86:16:be:69:34:28:0c:22:78:ad:66:66:
fd:d1:03:42:d7:9a:cb:25:82:5e:97:33:4f:f3:2c:c3:33:ce:
b0:e6:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:40 2026 by rpki-client