Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: 7FOPXHtm1/f4WW43l5hZUKEkPSY5ZrrrjniXBBi4opI=
Subject key identifier: 62:D6:93:A8:26:79:05:38:ED:21:4E:65:92:5E:4D:9E:70:01:2E:F4
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019D292952C919350F7F189C5B566A9D495C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 15DE
Signing time: Thu 26 Mar 2026 08:01:07 +0000
Manifest this update: Thu 26 Mar 2026 08:01:07 +0000
Manifest next update: Fri 27 Mar 2026 08:01:07 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: RhqlZ/pNyvXSNwz1SzedNDcVqeorfxhTiiOCL9CBQg8=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:52:c9:19:35:0f:7f:18:9c:5b:56:6a:9d:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Mar 26 08:01:07 2026 GMT
Not After : Mar 27 08:01:07 2026 GMT
Subject: CN=62d693a826790538ed214e65925e4d9e70012ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:de:23:5d:3e:a8:2c:9d:85:74:11:48:d7:
18:51:a9:61:d6:ea:06:fc:48:aa:ee:2f:b0:25:fb:
7d:d8:75:1f:94:24:84:b2:65:39:17:d0:56:f8:52:
f7:90:48:f4:b0:cd:e1:98:25:d7:d7:42:65:6c:e2:
2d:30:67:a0:c8:42:83:e5:c6:a8:db:6b:e3:b5:f5:
7e:58:a3:f5:a8:81:cb:fc:2a:fd:3b:09:5d:c5:1e:
4c:ee:d4:24:ee:65:3d:4b:29:8d:63:38:04:8d:4f:
2c:6f:c5:ef:4c:02:07:f9:cc:bd:3d:3a:0c:16:b4:
5c:ce:8e:66:44:7d:0d:59:9d:97:0e:a2:7f:af:9c:
3b:94:2a:bb:72:ad:1f:8d:73:7a:58:1a:8e:43:56:
d9:39:54:79:fd:a1:b0:b9:bd:4d:2e:fc:05:0d:42:
09:9a:bd:93:00:76:4d:55:f3:13:08:90:1a:a4:5a:
f2:b3:f5:8f:ee:e9:02:b3:7f:fe:a2:8f:1f:8a:6b:
49:10:d8:0b:25:ae:7f:f5:0d:b6:b4:25:c6:f4:cb:
19:a6:9f:91:6f:fd:b4:86:0b:39:8a:8b:6c:9f:3e:
41:56:63:4a:b3:13:e9:b2:a6:bf:19:c2:d1:89:19:
36:a2:11:6b:c4:1b:64:0e:8c:27:3a:bf:1e:08:b3:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D6:93:A8:26:79:05:38:ED:21:4E:65:92:5E:4D:9E:70:01:2E:F4
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:21:cd:fa:61:46:81:eb:d7:e0:01:15:1d:79:6b:51:3f:31:
64:70:ee:2b:ec:1e:17:a1:f9:b5:7e:c6:0c:ac:fa:e0:2a:96:
65:20:d9:cc:fc:8a:3e:b6:ad:9a:9b:0d:a8:c3:c3:ee:93:28:
cd:93:9a:8b:e2:40:a6:52:b5:86:73:d2:f6:99:db:f8:82:2b:
58:cc:5e:07:73:73:0d:76:3b:73:ef:e6:1a:2c:ac:dc:a1:16:
1f:94:40:aa:65:55:fa:70:7e:b8:0e:a5:f1:86:55:26:24:96:
ca:fd:bb:3f:ac:f6:93:bd:8a:d9:37:a2:ad:de:87:67:5f:f9:
47:2c:a3:3a:f3:b6:81:50:66:b6:ff:8e:aa:d9:75:bf:e3:85:
bc:38:be:b7:59:ae:24:20:79:75:ef:22:6b:08:61:58:6a:e3:
30:dd:5c:cc:5e:2c:43:28:d4:0e:82:54:97:33:71:de:70:bc:
e8:27:cd:b4:3c:4b:32:95:6c:e1:8a:a7:1e:21:42:98:07:46:
f7:45:5f:a2:e7:70:b5:c4:fd:fa:9e:7c:92:44:b5:0e:ce:e3:
57:42:68:de:62:ec:48:a8:39:c4:51:bd:ca:40:d0:5b:8c:8f:
35:25:82:05:04:7f:64:31:8a:ff:fe:83:64:e9:b3:f7:cf:44:
73:43:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:28 2026 by rpki-client