Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: PLDx+A2agaJPCCxTutAdc5gwfgqDfb1/q6VOmO0YfAo=
Subject key identifier: 22:CB:2F:72:E3:7E:27:AC:BA:E3:01:2F:94:DA:DF:EC:C3:3B:4A:0D
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019D992B4204697AB3B5E0ADDBC470AE8144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 1618
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: Y0dpESNpu/9COxRiw9UhhV8iGDeX+ubX/Uia3Yi7Dis=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:42:04:69:7a:b3:b5:e0:ad:db:c4:70:ae:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=22cb2f72e37e27acbae3012f94dadfecc33b4a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:0a:8b:29:ad:9e:f8:17:30:bf:7a:7c:06:
73:3b:c8:39:0b:0f:8b:63:8d:45:d0:37:9e:51:db:
c2:a7:9c:50:c4:9e:43:29:1d:f3:7c:9d:cf:88:51:
49:fd:8b:ea:13:c0:4d:5f:d5:17:a8:5a:8a:a8:da:
cb:92:af:ba:3c:79:8e:1b:c4:ec:8e:a6:3c:81:84:
5e:ce:42:1e:e8:6f:50:8f:46:f1:e4:b4:c3:82:ab:
42:33:2d:be:a9:a9:9a:b6:d8:b5:f3:89:60:b3:22:
90:f5:67:49:7c:49:ab:bd:f8:63:3a:f7:52:bf:79:
28:4b:c6:8e:cf:c7:3d:ef:7f:f8:20:1f:13:57:35:
24:b9:41:f3:d8:06:4f:97:a3:72:87:b4:c4:77:02:
68:61:63:fd:a9:7a:3c:2c:dc:0e:27:9d:b2:3a:e8:
1d:e4:4a:86:61:a4:ad:bc:d0:4b:d1:76:a0:51:2f:
98:09:3d:71:36:54:85:f0:88:71:3a:33:92:29:1f:
9b:2d:44:87:e5:1c:7f:63:13:1f:f4:99:e4:16:21:
cc:6f:a5:53:07:35:42:af:1f:a7:d8:d2:11:b0:db:
2e:c9:3a:54:ad:71:95:3b:1e:67:d1:43:46:ba:2f:
96:a8:73:2e:4d:95:33:90:ea:52:1b:7b:7a:25:bc:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:2F:72:E3:7E:27:AC:BA:E3:01:2F:94:DA:DF:EC:C3:3B:4A:0D
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:14:39:7d:02:ba:8d:d2:93:d1:81:98:09:de:18:4b:b2:04:
f2:b8:b1:c9:71:0c:0f:cc:2c:1b:a8:dd:7f:cb:f3:8e:3f:1c:
33:af:35:d6:88:54:79:9d:2e:9f:9f:32:dc:f4:63:1d:78:35:
22:67:99:8b:71:c7:22:9e:e5:fc:e7:fc:78:29:3b:20:8e:86:
3c:c6:93:fb:99:51:e1:ae:de:d8:1b:c9:39:dd:8a:05:3d:0d:
72:c6:8c:80:b2:5e:db:c0:3a:9c:ac:b9:d7:bc:88:fd:bc:a5:
9e:36:0e:38:4b:df:33:41:44:db:55:e1:d1:9e:5b:69:bd:81:
70:c2:9b:ac:ac:d3:a8:36:97:2e:f6:0c:02:53:b3:83:77:73:
8a:a0:c9:ba:df:88:20:48:ee:3e:0f:07:3f:f8:c4:c3:c9:e8:
7c:7f:3e:01:19:31:6a:ab:28:c9:83:f7:a9:83:71:93:94:dc:
13:7b:b3:a9:72:e1:96:e8:6f:9f:b9:6f:5a:e9:34:bb:03:72:
82:79:45:78:05:37:43:b7:09:c0:b8:24:9b:c8:de:2b:8a:63:
1a:32:f6:50:1d:5f:48:6a:a6:12:4d:ca:dc:d8:5d:f2:95:ca:
3e:1b:e8:36:18:f9:19:d5:aa:10:dc:cb:8b:33:9e:01:36:61:
65:5d:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:14 2026 by rpki-client