Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
File: 356EndIcHQG2LXnhP74_rORSIr4.mft (raw, json)
Hash identifier: EIk30ap1eQxNGf0h8Ji/fpOjjsShl+z2AcKTmR/PiY4=
Subject key identifier: F6:63:59:AA:12:E9:CC:8D:A7:EE:E0:BB:B8:D4:93:8D:71:27:6A:23
Authority key identifier: DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
Certificate issuer: /CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Certificate serial: 019F909080A344C8ADD6FCD8FD0B50E95BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
Manifest number: 01B8
Signing time: Thu 23 Jul 2026 20:00:16 +0000
Manifest this update: Thu 23 Jul 2026 20:00:16 +0000
Manifest next update: Fri 24 Jul 2026 20:00:16 +0000
Files and hashes: 1: 356EndIcHQG2LXnhP74_rORSIr4.crl (hash: ivTXvLIb52ccvfTNSAgALGia9v22NogVzpEodGBJqLc=)
2: W7kaUhASlYNkrMhJVklCrmbhwaM.roa (hash: xNYEU03R+PSzs/IRWbK0wthdfu1uuUt0qLfMcyCb11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:80:a3:44:c8:ad:d6:fc:d8:fd:0b:50:e9:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Validity
Not Before: Jul 23 20:00:16 2026 GMT
Not After : Jul 24 20:00:16 2026 GMT
Subject: CN=f66359aa12e9cc8da7eee0bbb8d4938d71276a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:cb:fa:35:5e:9b:08:c1:c2:ff:79:c0:2d:
6e:08:7d:bd:3a:19:53:57:a3:31:b5:19:85:3f:f0:
6f:9c:ec:fa:e6:ab:f4:26:aa:99:bb:89:9d:26:ef:
ec:e1:fb:9e:33:43:53:eb:b3:8d:10:ce:db:97:13:
47:b1:0c:07:1d:73:46:21:20:16:f1:61:06:3e:96:
72:6c:7d:f0:5a:a6:dc:3a:38:ab:9e:3d:91:a7:ad:
65:90:bd:b1:af:70:64:2f:0e:69:48:df:a6:1c:9a:
a0:0f:b6:be:88:be:9a:a4:d4:19:6c:ca:11:2f:28:
14:42:59:1a:80:4a:8e:58:ca:59:ac:d0:9d:95:0f:
ba:37:36:37:b0:1b:a7:08:68:d5:da:fb:b7:96:a5:
f3:be:83:77:e9:42:6c:98:62:dd:0d:1c:a5:b8:0d:
32:61:18:66:87:a2:51:9c:92:e6:6c:c2:ae:e6:b2:
96:68:ed:2f:bf:d8:dc:d4:ea:75:e3:dd:52:fa:14:
72:bf:79:71:8c:80:c2:f0:80:ce:e4:0b:9e:77:68:
98:53:68:d3:d2:9f:23:91:4e:f2:8d:58:8d:e6:b3:
e6:98:0d:bf:0e:da:c0:c5:a0:19:37:03:46:31:a1:
bd:79:a4:e5:dd:43:c2:6c:0e:d1:19:52:68:67:d9:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:59:AA:12:E9:CC:8D:A7:EE:E0:BB:B8:D4:93:8D:71:27:6A:23
X509v3 Authority Key Identifier:
keyid:DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7a:b8:2b:94:7d:22:8b:cc:e3:c7:6b:01:c8:c4:d1:1e:33:
f5:5d:9d:86:fd:08:7d:f9:b5:aa:75:a3:3c:c1:df:b8:dc:e7:
c9:4d:22:16:40:ba:8d:bb:08:eb:ad:d8:05:43:bc:58:e1:20:
0c:77:6e:d5:e9:e2:bd:0d:8a:49:d4:7c:8d:3d:b3:e4:6e:ea:
cd:86:64:1f:26:57:64:28:e6:98:e6:96:2e:f0:2e:ff:ac:52:
b4:42:b5:19:a1:a2:6b:c0:62:2a:eb:4b:db:49:60:49:9e:17:
26:23:7b:d1:64:3d:07:39:f6:cb:e4:54:21:7e:6d:65:36:77:
d3:90:e3:a1:7a:b5:16:6e:7e:5a:6a:fa:bd:d6:6c:8a:ac:5d:
3d:e7:38:64:a9:4f:0d:85:c5:56:bf:64:37:bf:81:55:67:99:
a9:85:90:a2:83:62:ca:f0:0b:83:18:37:27:b1:22:f7:b1:d7:
f1:06:c1:d1:63:1d:05:4e:39:d2:13:39:01:d3:26:32:1c:a0:
7e:0c:b0:a9:8d:5e:b8:84:db:a1:6f:e9:ab:d1:24:dd:2a:7f:
69:c1:ab:35:88:a9:60:d0:94:69:f7:b8:77:19:63:ba:28:9a:
bd:4e:85:0e:65:a2:06:36:81:c2:e3:c9:91:1f:52:d8:a6:5b:
38:81:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:45 2026 by rpki-client