Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: BHxHGe1HSNdm1wbXsje1ICkkLMVk+4KKlnEPQS+k2eg=
Subject key identifier: FD:A1:72:B3:BF:42:2A:0B:13:FC:96:90:F2:BF:6C:70:3D:67:CD:AA
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 01A0CFDAB1B89D05F94C592874604F42A798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 17C2
Signing time: Wed 23 Sep 2026 20:00:11 +0000
Manifest this update: Wed 23 Sep 2026 20:00:11 +0000
Manifest next update: Thu 24 Sep 2026 20:00:11 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: KyJ95AK7t/9gJn/DzeH6M2fHd9hkDN+0U9o6+9OBHks=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:b1:b8:9d:05:f9:4c:59:28:74:60:4f:42:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Sep 23 20:00:11 2026 GMT
Not After : Sep 24 20:00:11 2026 GMT
Subject: CN=fda172b3bf422a0b13fc9690f2bf6c703d67cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:7a:3b:ed:2f:86:7a:5b:a9:ca:fe:f2:bc:
6f:8d:5f:10:0c:52:56:ab:fc:08:aa:17:ba:76:bc:
f4:fb:1b:f6:e2:50:53:a3:28:fc:a5:9c:ae:f8:dc:
3c:48:c5:11:74:be:2e:62:4b:4f:df:5b:c3:bd:e9:
3b:4d:53:a6:5b:9d:86:a5:cf:8c:47:b2:62:07:df:
b9:90:a7:13:43:24:6c:6e:65:90:a6:a3:c0:c7:36:
a8:b0:44:61:06:b0:71:cb:ef:57:30:63:a6:ab:b1:
59:0a:b7:f5:6d:d3:59:d3:10:a9:37:fc:7e:ff:c8:
32:45:6c:b5:c7:50:d1:7d:ba:76:cc:f5:f9:44:8b:
7a:0f:d8:6a:4b:1c:22:bb:89:16:b2:fd:84:4b:b0:
9f:a1:b7:57:b2:8b:c9:73:d7:ea:89:74:49:00:27:
9d:af:1b:16:ce:c3:37:82:18:01:06:f7:c9:de:42:
88:da:f4:e7:4d:0d:6b:09:02:95:38:99:98:56:d1:
35:d5:73:12:55:6d:bb:b8:22:78:a5:1f:29:cf:be:
a6:69:86:4b:1c:20:06:2d:fa:ec:b5:70:67:ad:59:
a6:4b:ec:a1:17:ad:69:11:33:03:87:2a:a6:e7:9d:
21:09:91:8f:42:d8:34:4c:74:a2:ab:82:98:25:9f:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:72:B3:BF:42:2A:0B:13:FC:96:90:F2:BF:6C:70:3D:67:CD:AA
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bf:df:8a:b3:06:2d:24:52:a3:f3:74:56:3e:bd:77:91:1f:
4d:5f:a3:f5:7d:27:e9:b7:ec:0b:44:ff:e0:c8:5e:46:81:71:
43:ee:e3:2b:6e:c9:2f:ea:de:3a:ab:bb:17:48:5a:11:e4:39:
fe:1b:bb:70:1f:c3:8c:9d:5c:64:a6:46:ee:ff:5f:8a:f2:5d:
fa:75:de:12:1b:62:f7:92:99:f3:ac:ab:73:f8:0a:04:51:00:
09:9d:1a:69:2e:ea:76:e3:f5:e3:3d:13:b7:30:62:19:df:e9:
c2:4a:3b:ca:ce:c1:16:54:d0:e2:3d:63:40:e8:08:38:71:cb:
c4:2f:0f:7b:bb:ec:96:be:b5:1f:98:bf:0e:2c:98:10:d9:55:
b6:09:b4:b1:4a:bc:89:98:be:fc:e5:91:ed:fd:62:01:84:5e:
a7:15:f1:2c:2e:ee:b7:63:53:13:71:df:9f:2e:ab:66:10:01:
98:e6:1f:ea:a7:40:6f:a7:bb:84:cd:76:ad:93:ed:28:ef:40:
f1:fe:ec:fb:fa:79:9d:26:65:23:94:7c:2a:80:f0:15:a8:0a:
d8:8a:f7:d9:be:b6:e9:50:e6:99:7d:ca:df:f6:cf:f2:d6:5b:
bd:9a:0d:6e:13:76:9d:53:c7:0f:f0:f8:25:ef:23:31:4e:24:
1e:33:c3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2rG4nQX5TFkodGBPQqeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1
YWE2YTgwHhcNMjYwOTIzMjAwMDExWhcNMjYwOTI0MjAwMDExWjAzMTEwLwYDVQQD
EyhmZGExNzJiM2JmNDIyYTBiMTNmYzk2OTBmMmJmNmM3MDNkNjdjZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPx6O+0vhnpbqcr+8rxvjV8QDFJW
q/wIqhe6drz0+xv24lBToyj8pZyu+Nw8SMURdL4uYktP31vDvek7TVOmW52Gpc+M
R7JiB9+5kKcTQyRsbmWQpqPAxzaosERhBrBxy+9XMGOmq7FZCrf1bdNZ0xCpN/x+
/8gyRWy1x1DRfbp2zPX5RIt6D9hqSxwiu4kWsv2ES7CfobdXsovJc9fqiXRJACed
rxsWzsM3ghgBBvfJ3kKI2vTnTQ1rCQKVOJmYVtE11XMSVW27uCJ4pR8pz76maYZL
HCAGLfrstXBnrVmmS+yhF61pETMDhyqm550hCZGPQtg0THSiq4KYJZ/ZZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2hcrO/QioLE/yWkPK/bHA9Z82qMB8GA1UdIwQY
MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt
OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0
LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr/firMG
LSRSo/N0Vj69d5EfTV+j9X0n6bfsC0T/4MheRoFxQ+7jK27JL+reOqu7F0haEeQ5
/hu7cB/DjJ1cZKZG7v9fivJd+nXeEhti95KZ86yrc/gKBFEACZ0aaS7qduP14z0T
tzBiGd/pwko7ys7BFlTQ4j1jQOgIOHHLxC8Pe7vslr61H5i/DiyYENlVtgm0sUq8
iZi+/OWR7f1iAYRepxXxLC7ut2NTE3Hfny6rZhABmOYf6qdAb6e7hM12rZPtKO9A
8f7s+/p5nSZlI5R8KoDwFagK2Ir32b626VDmmX3K3/bP8tZbvZoNbhN2nVPHD/D4
Je8jMU4kHjPD+w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:05:29 2026 by rpki-client