Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
File: 356EndIcHQG2LXnhP74_rORSIr4.mft (raw, json)
Hash identifier: KvIEq3trCCYnK9KQcRhMF8c9DIBijkUz2Zzaz7VXGGE=
Subject key identifier: 99:1F:14:8B:A6:FD:10:67:3B:17:93:13:6C:15:3F:02:29:B9:C3:1A
Authority key identifier: DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
Certificate issuer: /CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Certificate serial: 01A0D124C8E6A443A26D22CFB6DF6867DD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
Manifest number: 025E
Signing time: Thu 24 Sep 2026 02:00:43 +0000
Manifest this update: Thu 24 Sep 2026 02:00:43 +0000
Manifest next update: Fri 25 Sep 2026 02:00:43 +0000
Files and hashes: 1: 356EndIcHQG2LXnhP74_rORSIr4.crl (hash: Ar05m7/rVLrFPEBkSZUaHKbLeZizqF2bCWJfxsZpSRQ=)
2: W7kaUhASlYNkrMhJVklCrmbhwaM.roa (hash: xNYEU03R+PSzs/IRWbK0wthdfu1uuUt0qLfMcyCb11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:c8:e6:a4:43:a2:6d:22:cf:b6:df:68:67:dd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9e849dd21c1d01b62d79e13fbe3face45222be
Validity
Not Before: Sep 24 02:00:43 2026 GMT
Not After : Sep 25 02:00:43 2026 GMT
Subject: CN=991f148ba6fd10673b1793136c153f0229b9c31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:7d:50:90:b2:00:b9:63:a9:ab:aa:24:93:
5b:8c:16:16:ad:93:1d:e9:ac:5f:3e:88:4d:9f:f0:
d8:0b:65:df:76:20:40:b0:c6:d3:74:4c:92:1e:9b:
16:09:97:ae:c0:93:6d:b6:e2:79:39:3c:98:ba:28:
8b:4c:25:83:5b:d1:4a:62:66:1c:77:bf:a8:42:98:
83:b2:96:34:8a:70:1d:06:be:62:1a:21:45:4a:38:
33:22:92:89:65:50:53:5b:ed:5c:16:b4:9d:58:31:
3f:7c:a4:98:29:67:2e:23:f6:e9:93:33:97:94:b9:
2f:ef:be:20:8c:5f:be:9e:dd:78:b4:73:7b:f8:e8:
43:a1:5c:ed:a8:d8:c1:c8:30:de:c7:9b:1b:1d:83:
33:16:01:ba:07:f6:ff:89:5b:84:74:6d:16:19:be:
c0:20:4e:05:0d:ec:c4:f4:b3:75:2c:1a:a5:af:ee:
bc:9b:14:cd:8c:36:fc:93:ab:07:f7:0a:d7:25:38:
64:c3:72:ca:87:27:28:cc:b2:58:e4:89:e5:63:4d:
28:f2:c9:1a:da:78:fd:7c:90:f7:33:14:d7:2d:8f:
30:bf:06:4c:5e:23:23:7a:75:bb:c8:24:a0:79:54:
3c:87:f7:50:78:6f:27:92:7d:2f:98:41:65:b7:1f:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:14:8B:A6:FD:10:67:3B:17:93:13:6C:15:3F:02:29:B9:C3:1A
X509v3 Authority Key Identifier:
keyid:DF:9E:84:9D:D2:1C:1D:01:B6:2D:79:E1:3F:BE:3F:AC:E4:52:22:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/356EndIcHQG2LXnhP74_rORSIr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3bcd4e-a541-4ce2-aa4f-72d091516193/1/356EndIcHQG2LXnhP74_rORSIr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:04:68:f4:86:0f:ce:c4:0f:d8:99:40:be:a9:0c:ad:49:
82:07:6f:3d:17:65:34:2c:4c:41:5c:f8:bf:8f:15:8f:a7:bf:
5d:c3:d1:c5:f6:57:3d:0a:10:c0:43:a4:a2:8f:ce:f6:b0:3c:
01:bc:4f:88:8c:55:83:21:91:d9:44:a5:1e:31:57:4d:d0:57:
af:af:ed:b3:e8:a6:dc:7c:eb:c4:7b:71:a8:f5:2e:58:1b:36:
16:5c:de:c6:60:4c:fd:e6:6c:aa:db:5a:1e:45:e4:23:d1:ae:
75:97:85:50:0f:9f:d4:b1:ff:2e:7b:40:3a:8a:f8:bc:9f:c1:
14:8c:9b:9c:cf:75:dd:8f:e2:50:61:28:cc:36:a3:ee:2f:75:
11:54:39:f2:8b:56:6c:b6:70:06:3e:73:43:8c:e3:4d:39:48:
45:58:f5:b7:6a:71:19:64:7b:8b:54:de:81:97:39:bd:41:16:
df:49:1a:a6:a8:0e:10:5f:d2:28:ea:9c:c9:b3:8b:5a:37:9b:
1f:ab:3a:42:b7:21:1e:c7:b6:f8:25:67:f8:0f:97:8a:15:92:
62:03:66:80:a0:c1:29:5e:04:2c:6e:e1:4f:07:51:78:52:39:
dc:bb:9c:f8:10:87:06:db:5d:76:f2:46:94:dd:53:b3:c1:e5:
e4:b7:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:05:55 2026 by rpki-client