Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: JZdb9URduJw8FgH0dUc4i1eg7IwwoxN4AsvDJ0pTrTg=
Subject key identifier: A6:77:7A:03:78:EC:13:51:13:69:6A:3D:80:C1:00:B0:DA:C5:C2:4B
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019EBEB65B60BD989602056815240582D783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 16B0
Signing time: Sat 13 Jun 2026 02:01:22 +0000
Manifest this update: Sat 13 Jun 2026 02:01:22 +0000
Manifest next update: Sun 14 Jun 2026 02:01:22 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: dkuequJu+yeB1vADDsA4VcPb7VbnhY6k7JxInhWCTps=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:5b:60:bd:98:96:02:05:68:15:24:05:82:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jun 13 02:01:22 2026 GMT
Not After : Jun 14 02:01:22 2026 GMT
Subject: CN=a6777a0378ec135113696a3d80c100b0dac5c24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:65:82:f7:0b:6d:4f:5f:ce:cc:46:3a:dc:
32:ca:74:58:da:ba:9c:fb:71:42:4a:5a:09:f3:83:
5f:aa:4e:e9:d8:48:fd:4c:54:34:0b:0c:f1:ad:5a:
10:0a:8f:fa:9f:1f:ae:72:95:59:ac:33:a4:e7:65:
04:6c:71:e5:65:b8:0a:75:c2:95:62:33:53:23:11:
7f:2f:df:8a:1c:f7:df:79:8c:27:ab:2e:48:7e:81:
55:85:47:61:18:59:e5:bc:8f:ad:65:ec:d5:1d:bc:
3f:e9:6e:8e:62:2a:8b:ed:9d:1c:6c:6e:25:8e:76:
28:6a:ae:15:64:e8:13:9d:f0:97:0f:22:fa:01:79:
a9:7f:b2:7f:d2:f6:25:d2:2f:a2:70:48:79:44:ff:
75:01:ae:cd:01:4c:b8:71:db:d0:f5:e8:9c:67:a9:
00:19:2d:c6:f3:89:f8:bb:3b:89:d5:e8:f0:c0:a2:
47:a9:d8:99:68:bf:85:5d:66:fe:62:33:bd:e1:1d:
d4:2d:a4:b6:f3:30:04:82:d9:9d:5b:46:2e:32:77:
1b:88:b1:6b:95:dd:57:1d:74:1c:f7:11:ff:60:e8:
cb:72:2a:bc:10:af:54:99:0d:af:8b:91:7f:b2:e3:
e6:ea:b0:a2:59:8a:98:a5:34:db:c0:1d:02:98:c5:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:77:7A:03:78:EC:13:51:13:69:6A:3D:80:C1:00:B0:DA:C5:C2:4B
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:75:cf:42:a9:e4:d6:6b:4a:bb:12:c0:c0:10:04:ae:24:8b:
01:0d:56:6c:b6:a2:9d:52:b9:4e:eb:39:b6:12:a3:76:39:f5:
d7:d3:35:e6:1c:30:14:c1:24:a4:fc:dc:d4:2e:6d:a6:2a:f9:
ff:2c:15:4d:c8:68:bb:18:d0:cc:4f:ea:61:54:6e:37:b8:9c:
36:bd:23:7f:5f:a2:c3:34:e0:60:08:97:00:c9:ff:87:3a:c1:
66:cd:aa:10:e9:37:aa:5b:80:bc:a8:93:e4:64:4f:75:95:4d:
01:6c:ff:0f:49:75:2c:d9:aa:f8:61:e7:ef:0c:b7:9b:6d:52:
a1:37:4f:1b:70:83:8f:f7:d4:61:b3:69:52:47:3b:24:a6:87:
69:b4:2e:22:41:7d:41:ed:c8:5b:77:50:6a:a9:36:41:9e:e5:
00:98:e0:b8:84:8d:f1:68:09:b2:99:fa:fc:41:21:4f:e7:dc:
8a:96:2f:5a:ba:6d:24:0a:5a:a0:a2:64:0c:5f:e7:e6:91:81:
3e:1f:ba:12:78:29:84:07:5b:7e:30:cd:2c:41:a5:a1:3c:7b:
6e:10:fc:be:0c:c4:fe:1a:ca:4f:3b:d8:58:c2:79:a9:c0:c9:
dd:13:9c:f9:bd:8a:bc:52:17:bf:dc:e7:8e:2e:b5:de:ee:49:
37:bd:4b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tltgvZiWAgVoFSQFgteDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1
YWE2YTgwHhcNMjYwNjEzMDIwMTIyWhcNMjYwNjE0MDIwMTIyWjAzMTEwLwYDVQQD
EyhhNjc3N2EwMzc4ZWMxMzUxMTM2OTZhM2Q4MGMxMDBiMGRhYzVjMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyNlgvcLbU9fzsxGOtwyynRY2rqc
+3FCSloJ84Nfqk7p2Ej9TFQ0CwzxrVoQCo/6nx+ucpVZrDOk52UEbHHlZbgKdcKV
YjNTIxF/L9+KHPffeYwnqy5IfoFVhUdhGFnlvI+tZezVHbw/6W6OYiqL7Z0cbG4l
jnYoaq4VZOgTnfCXDyL6AXmpf7J/0vYl0i+icEh5RP91Aa7NAUy4cdvQ9eicZ6kA
GS3G84n4uzuJ1ejwwKJHqdiZaL+FXWb+YjO94R3ULaS28zAEgtmdW0YuMncbiLFr
ld1XHXQc9xH/YOjLciq8EK9UmQ2vi5F/suPm6rCiWYqYpTTbwB0CmMWsWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ3egN47BNRE2lqPYDBALDaxcJLMB8GA1UdIwQY
MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt
OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0
LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHXPQqnk
1mtKuxLAwBAEriSLAQ1WbLainVK5Tus5thKjdjn119M15hwwFMEkpPzc1C5tpir5
/ywVTchouxjQzE/qYVRuN7icNr0jf1+iwzTgYAiXAMn/hzrBZs2qEOk3qluAvKiT
5GRPdZVNAWz/D0l1LNmq+GHn7wy3m21SoTdPG3CDj/fUYbNpUkc7JKaHabQuIkF9
Qe3IW3dQaqk2QZ7lAJjguISN8WgJspn6/EEhT+fcipYvWrptJApaoKJkDF/n5pGB
Ph+6EngphAdbfjDNLEGloTx7bhD8vgzE/hrKTzvYWMJ5qcDJ3ROc+b2KvFIXv9zn
ji613u5JN71LaA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:43 2026 by rpki-client