Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: S+R4mfIwe3fhIqj6zmuBaCDUqN5Q7T68m8c/bDCS+V0=
Subject key identifier: E4:BA:43:8A:40:7F:51:F3:ED:65:C5:76:E8:EE:6C:32:DB:61:74:E0
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019F8F4785DB170C560C329BC16D769C9509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 171C
Signing time: Thu 23 Jul 2026 14:00:56 +0000
Manifest this update: Thu 23 Jul 2026 14:00:56 +0000
Manifest next update: Fri 24 Jul 2026 14:00:56 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: jE3Ye5CWepQnZtefnuEjbSRAKTjtEMjCJU3jF1sFnik=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:85:db:17:0c:56:0c:32:9b:c1:6d:76:9c:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jul 23 14:00:56 2026 GMT
Not After : Jul 24 14:00:56 2026 GMT
Subject: CN=e4ba438a407f51f3ed65c576e8ee6c32db6174e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:fa:2c:b1:e4:9c:15:02:6e:ea:12:2b:3d:
33:ec:6a:2e:31:63:3d:ee:5f:99:7f:74:7c:52:83:
16:f0:cc:1a:e8:fb:33:d0:ce:df:ee:78:5a:44:6a:
1d:72:c3:3f:e9:21:e0:a8:ae:11:04:37:56:03:fc:
24:70:c2:d5:dd:2a:10:20:f7:67:ea:60:07:e4:cf:
43:e5:d8:d6:f0:8a:12:b6:1c:a2:f1:8c:98:5c:0b:
f3:5f:58:33:eb:b9:10:66:98:a0:56:3f:26:e2:4a:
66:ca:16:8d:f6:e7:77:b5:28:ba:db:d5:0c:d9:34:
f7:22:4f:f9:32:1b:5b:ea:a8:60:5c:9f:5a:3c:eb:
2d:fb:85:f5:50:2e:2f:ae:60:0a:bb:a2:5d:e8:ef:
d4:28:68:0b:15:a8:db:62:cd:8a:2f:8e:5e:ca:c2:
17:c3:d9:80:04:9b:58:d9:b8:74:e8:c3:36:26:40:
b6:99:61:ca:69:7b:3f:08:61:65:89:1e:0e:25:2c:
61:93:a2:1e:94:48:be:8c:d7:39:5f:f8:66:e9:d8:
fc:f5:62:68:e0:d8:62:3a:80:de:fe:f9:39:d5:fe:
8f:60:9b:e1:96:37:e8:96:49:39:c1:b5:f7:d5:aa:
0b:86:ed:1f:d4:ca:5b:27:af:0f:f9:f2:a3:ad:80:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:43:8A:40:7F:51:F3:ED:65:C5:76:E8:EE:6C:32:DB:61:74:E0
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:7e:1c:f8:92:65:0a:76:4c:c3:d2:59:ed:01:41:b8:36:
d9:1c:1b:17:40:fa:75:6b:d4:5f:e1:96:86:8b:76:56:e1:f1:
59:23:1a:94:90:28:62:cd:35:c2:bf:f0:6e:8e:b6:65:b2:74:
e4:23:fe:71:c4:e9:a2:0f:09:5c:08:0a:ca:30:97:50:e9:36:
9c:85:64:ed:8d:4a:7b:8c:cd:60:57:b4:4c:fe:ee:5a:76:7c:
c0:75:cb:7a:7f:1b:c4:6e:5e:70:e7:a4:4d:99:c0:43:e2:d1:
11:4a:50:10:59:49:09:a0:57:41:d5:58:0a:5f:0c:6f:82:7a:
05:9e:15:29:61:b6:39:3d:b0:df:92:02:1c:dd:57:91:52:b9:
6d:6d:be:dc:35:f2:31:6f:52:0b:1f:cb:6d:be:ce:61:e9:a4:
82:1b:22:d9:49:4c:6c:7b:50:c9:59:03:f8:2d:aa:e2:45:8e:
f7:5d:be:a6:be:12:df:fc:31:d3:9a:fe:ed:02:38:8d:45:99:
03:0a:c5:aa:d7:68:69:8f:b1:20:c4:df:c5:d0:10:3b:17:d9:
19:6e:fc:fb:b6:fa:4f:f0:13:b8:9a:bc:1d:c5:e0:75:e0:50:
c5:59:06:8b:f4:47:cd:d7:4d:50:42:0d:13:aa:14:62:b9:54:
38:1d:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:31 2026 by rpki-client