Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: b1Ee1xvueMjXF0/MWhgwkugwxVw88fyJFi3560Qe9d8=
Subject key identifier: E3:FB:0C:97:AE:51:57:80:1B:9F:2B:1F:57:5C:94:B7:04:85:45:40
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019E1C7DD7E6D00396DCC6E3FACAB540B7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 165C
Signing time: Tue 12 May 2026 14:01:09 +0000
Manifest this update: Tue 12 May 2026 14:01:09 +0000
Manifest next update: Wed 13 May 2026 14:01:09 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: E4XYqZCxUnVHUm2bOWtoQd79QBKTL7KVB1+xCNyNae0=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:d7:e6:d0:03:96:dc:c6:e3:fa:ca:b5:40:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: May 12 14:01:09 2026 GMT
Not After : May 13 14:01:09 2026 GMT
Subject: CN=e3fb0c97ae5157801b9f2b1f575c94b704854540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:12:6b:8c:54:82:ed:16:ea:4b:52:a1:37:
c9:a8:0c:9e:1a:13:a6:cf:d0:0f:4d:74:ab:72:3d:
47:ca:42:30:77:b0:93:f7:9e:09:59:e1:06:34:98:
be:b7:2b:51:1f:aa:d1:9f:2b:2a:82:2f:57:28:62:
d7:3a:43:6c:cf:e2:be:6b:2c:a4:29:e1:91:fe:a1:
df:3f:96:18:9c:90:45:af:b5:20:ae:c3:d4:4a:ca:
2d:52:45:e4:79:53:4c:f9:b0:fd:2c:3b:c8:46:02:
b6:c7:be:72:44:4d:9d:d9:18:9b:d3:15:14:c4:57:
ce:c6:a8:40:fe:3e:d5:01:f4:2f:71:59:bf:5f:af:
ab:84:ff:0b:79:4e:5b:d8:7c:0d:7e:5f:b8:7d:79:
c8:c0:74:9d:5b:5c:cd:04:80:84:0e:f6:25:5a:49:
45:eb:75:3b:d1:69:0c:c7:de:49:be:6f:6c:79:4a:
db:2c:c9:6f:a9:fc:aa:40:b7:75:a9:03:c8:b7:47:
bf:c0:11:78:b6:30:e6:27:8d:64:e8:c7:3f:18:2d:
45:91:03:20:a3:43:ed:61:66:e3:ab:86:62:b0:18:
7a:8d:59:e4:4c:33:cf:6e:44:97:db:c7:02:fd:1d:
ae:f6:0d:ce:b7:31:eb:97:e8:39:2b:35:34:72:eb:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:0C:97:AE:51:57:80:1B:9F:2B:1F:57:5C:94:B7:04:85:45:40
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:84:13:35:ae:b0:f7:af:0f:e3:cf:50:18:25:b7:48:a8:56:
99:e9:a9:72:2d:fa:cd:71:37:80:d8:eb:87:57:03:12:ca:cf:
ce:2a:91:be:6f:88:e9:ab:5d:a0:f5:cd:23:5f:7b:31:8d:2e:
91:b1:e1:34:30:d3:41:39:b8:45:36:b4:04:0b:64:93:46:ba:
53:54:0f:2e:53:9d:64:0a:9a:3f:93:e1:bc:b2:8d:49:e2:f7:
c1:ea:c2:03:9b:56:c6:d1:ea:e0:4c:6a:d1:b4:a2:7f:0e:15:
b8:40:bf:6f:2c:97:27:16:49:05:b3:3d:cf:72:67:ad:c0:5f:
13:29:a4:d9:6a:a0:d1:5b:5a:60:c0:c4:00:18:6c:cc:04:f1:
66:72:d5:4d:10:4f:1f:13:2a:24:35:7e:68:d5:93:73:87:fd:
0e:66:29:29:0b:06:98:24:35:3b:78:52:ab:ec:f7:f5:00:e4:
77:ec:4a:e1:05:a2:c3:08:e1:e0:39:78:9e:6d:37:45:a6:b4:
aa:d9:ff:44:1e:60:e1:ee:fa:8e:83:7f:26:2b:17:e7:c1:5e:
fa:2f:b1:76:21:5b:55:a7:63:08:d3:e2:bd:02:a8:b3:46:af:
3b:d8:d6:11:95:28:38:dc:f0:42:cd:bf:99:62:f4:17:69:92:
80:8d:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:27 2026 by rpki-client