Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: 7SQzvMfL1Thm4k+KgeBc2LvbngA4sSi4DifwBLjh1AI=
Subject key identifier: D2:2D:92:6E:2E:2B:6B:2C:2E:80:6E:5B:93:E2:23:D7:29:23:CD:6B
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019FAA5106982CA6074A4502B73AE17D60FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 172A
Signing time: Tue 28 Jul 2026 20:01:04 +0000
Manifest this update: Tue 28 Jul 2026 20:01:04 +0000
Manifest next update: Wed 29 Jul 2026 20:01:04 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: p16sYaoFg2gbyq1qA2SH7BAK0POK3HEWd54pePkriMA=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:06:98:2c:a6:07:4a:45:02:b7:3a:e1:7d:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jul 28 20:01:04 2026 GMT
Not After : Jul 29 20:01:04 2026 GMT
Subject: CN=d22d926e2e2b6b2c2e806e5b93e223d72923cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:1f:d6:23:3a:7b:05:2b:6e:62:63:33:74:
9f:9a:61:6c:f2:67:86:07:49:92:1a:ca:fa:2f:60:
93:9b:21:0f:40:6a:25:42:64:6d:e1:da:e2:09:f2:
81:b4:da:30:8b:a8:9c:88:dc:48:9c:86:f5:dd:ef:
ae:22:d0:d9:69:48:b7:52:06:0b:23:1a:fa:f0:0e:
67:5f:db:a9:27:bb:54:fa:a2:73:f8:70:21:c3:40:
dd:1b:c9:23:22:87:3b:52:39:10:75:c3:13:a3:4f:
3c:ad:a5:e3:e3:b4:45:d2:e4:45:9b:e1:69:38:87:
49:b9:83:6e:f0:4a:d7:7e:be:fc:ef:2b:72:17:ba:
f9:63:2f:52:d8:6e:ea:90:d7:81:36:3b:b6:c2:1e:
ed:f7:52:71:3d:f1:a2:75:60:9e:03:5c:ba:8b:06:
5d:c0:c4:b7:52:ee:cd:41:86:ab:09:e9:89:ae:38:
50:ce:46:4a:1a:69:2c:34:5f:1e:32:55:de:31:b8:
42:c5:16:92:e1:b5:7b:e4:0d:2a:21:01:c3:da:16:
0e:81:ec:53:2d:ce:13:ed:d7:68:65:14:7a:cc:db:
55:b2:9d:1d:43:56:10:10:09:46:d9:9b:0f:5d:9f:
9b:a6:c5:bd:52:ac:67:68:42:e8:e0:37:2f:3d:2a:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:92:6E:2E:2B:6B:2C:2E:80:6E:5B:93:E2:23:D7:29:23:CD:6B
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e7:9a:76:3f:d6:1d:b0:2b:6d:a2:1a:b9:19:61:2a:e9:6b:
1d:36:a8:1c:c9:09:b5:f0:5d:62:9f:82:3c:9b:09:01:e4:91:
6e:5c:bb:fe:a3:98:8c:bc:73:a9:7b:f4:e8:2b:18:69:95:ce:
50:41:5a:38:26:f1:79:7f:34:00:85:9b:fd:06:ba:5d:ef:d5:
cc:c0:6e:99:52:d5:f4:80:76:d2:41:ec:68:d1:1c:d0:f9:e4:
68:50:8c:c8:33:98:e1:da:34:eb:25:79:c3:36:96:b7:b1:5e:
e1:cb:f9:e1:a7:c9:78:29:9b:2a:d0:ee:73:8f:80:82:be:01:
83:b9:22:bc:55:c8:00:4e:2a:b5:d8:5f:7f:23:a1:2d:4d:69:
ac:25:af:8e:3d:56:5a:12:fb:a6:cd:15:c6:75:94:7a:bf:21:
cc:9c:6e:06:60:8e:0b:f4:1f:31:cb:7f:2d:9e:52:e2:59:d0:
c2:bb:50:63:06:0e:84:99:7c:9e:3c:2f:05:62:22:85:d6:f1:
3d:4b:23:2c:18:c4:05:26:9e:80:26:f5:95:e7:b6:fc:63:9f:
e8:14:48:75:61:25:fc:79:7a:37:e3:da:89:1f:c0:a4:0b:ff:
94:e9:71:3f:c6:ce:32:22:2c:b8:1b:15:38:92:2b:91:37:02:
c7:97:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:13 2026 by rpki-client