Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: g4mTBaf1EQzWf38IeTsBgvirgXsR+qHGfVPQKGQ/RbI=
Subject key identifier: 71:22:A1:8D:5D:2C:25:29:87:FE:64:51:89:27:96:04:50:4F:62:A5
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 01A0C255F2C3AE1625DBEBF915CF8A44EF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 17BB
Signing time: Mon 21 Sep 2026 05:00:07 +0000
Manifest this update: Mon 21 Sep 2026 05:00:07 +0000
Manifest next update: Tue 22 Sep 2026 05:00:07 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: FDuk2Nsw7aahRacB6Q47J5cVQ2REb+Bw2FwvD+wBj+A=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:55:f2:c3:ae:16:25:db:eb:f9:15:cf:8a:44:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Sep 21 05:00:07 2026 GMT
Not After : Sep 22 05:00:07 2026 GMT
Subject: CN=7122a18d5d2c252987fe645189279604504f62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:63:6f:fc:da:95:d6:47:4a:bb:cb:5b:12:
c2:8b:ac:f8:dc:cd:07:78:39:bc:22:8f:cc:77:6d:
b8:55:b4:bd:de:63:61:ca:11:34:cc:47:06:3e:8f:
20:6d:e3:c8:e2:f2:a0:22:43:8c:15:54:f8:ac:75:
30:b4:ba:2d:11:a8:58:c2:77:28:7e:c6:79:27:f2:
75:1c:9a:3f:76:d6:6a:1c:f2:c8:48:fa:e2:91:03:
25:89:34:39:57:22:63:e4:ce:31:ed:88:08:16:72:
19:21:0d:91:f6:3e:bc:b0:da:73:57:59:95:ae:48:
8c:be:fd:6d:32:de:b0:06:f5:db:12:1e:88:3d:7b:
89:53:eb:29:5e:03:31:b6:57:d0:a4:84:a6:a0:94:
9b:1e:e8:ca:53:c8:6c:4d:97:35:c4:81:1e:56:8c:
c9:4e:ae:cc:53:4b:af:de:96:dd:d9:3c:51:cb:bf:
8a:96:98:d5:43:7d:12:54:56:32:ea:5d:6a:e6:87:
f0:84:d7:e1:3b:e7:40:02:76:85:2a:4d:28:d7:92:
4d:ae:2d:b0:38:64:9a:0c:15:6b:8f:e6:27:9a:e4:
e3:d5:2d:27:6c:06:af:c8:30:10:f8:17:f1:16:be:
e0:9c:49:59:7e:09:5c:94:37:73:78:72:8d:6b:ae:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:A1:8D:5D:2C:25:29:87:FE:64:51:89:27:96:04:50:4F:62:A5
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:23:7b:23:60:38:85:c4:63:fc:d5:02:a0:5f:88:ea:e6:91:
6b:86:21:ac:b7:5a:01:d4:91:1d:74:2f:25:ea:3f:57:b7:ce:
f5:c1:84:1a:2c:8f:ae:d2:99:e5:fe:a0:29:80:39:2e:61:f0:
de:75:d8:3d:b3:5a:56:f6:96:ed:92:62:74:c8:f7:7f:33:92:
b8:7b:9f:d9:e7:ec:96:50:29:2f:4a:f0:38:78:b8:bd:81:2d:
5b:ff:97:c3:85:52:c3:f4:42:25:a7:c2:bf:a4:42:7a:fd:98:
7c:c9:73:d4:3c:92:59:0c:2f:d2:a9:5e:d2:13:23:7e:7d:7c:
9f:35:d7:72:2b:24:0f:bd:bc:c8:77:96:c2:71:6c:cc:32:5b:
d4:3b:d2:a3:0a:af:1e:f0:a2:39:4e:e6:53:67:51:f6:59:dd:
eb:7e:7f:1e:dc:48:90:04:ce:0a:e1:b5:b6:12:9a:0e:04:5f:
48:1a:22:82:82:a5:ea:4f:6d:cc:19:a4:f5:a1:f9:08:20:09:
b9:a7:78:87:9f:c1:63:47:fc:5f:66:73:37:eb:0c:5b:1c:42:
be:bd:52:71:32:4d:4f:32:54:7e:02:5d:f2:f0:d5:4a:db:66:
d6:54:68:27:b4:57:5d:c0:85:5f:f5:dc:06:94:d5:db:f2:1e:
d3:48:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:53 2026 by rpki-client