Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: Eyep05aO3LSXU8Z4jnkHKYhjUmxlqbBCPP0BQ7k5CtU=
Subject key identifier: 78:CC:92:B8:C3:B0:EA:F6:44:1B:3D:91:FA:1C:81:6F:CE:2A:0A:3E
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 01A08C439A2CE13E8A9D3BDAFD48C13BC99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 179F
Signing time: Thu 10 Sep 2026 17:00:35 +0000
Manifest this update: Thu 10 Sep 2026 17:00:35 +0000
Manifest next update: Fri 11 Sep 2026 17:00:35 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: 5ue5FGfF08ftvcPEsqC0EWahXtoZkOU2vQnFKyb05dI=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:9a:2c:e1:3e:8a:9d:3b:da:fd:48:c1:3b:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Sep 10 17:00:35 2026 GMT
Not After : Sep 11 17:00:35 2026 GMT
Subject: CN=78cc92b8c3b0eaf6441b3d91fa1c816fce2a0a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:c2:ce:32:4f:ca:99:20:9d:4d:8c:cd:a4:
ea:63:73:75:c9:c5:da:af:86:ab:90:60:f6:e5:ef:
e7:40:f5:6f:7c:88:23:8a:fb:2d:ac:b2:c9:79:a0:
0a:06:09:5d:b3:4e:ad:b3:3a:38:c9:fd:ec:c8:30:
40:31:be:96:49:16:f9:93:a2:bc:68:d6:a3:58:85:
7a:5a:84:f0:ae:10:80:ca:3a:cd:8a:10:72:e1:97:
4e:ca:c7:51:ba:b7:dc:05:b9:d4:02:7a:84:b3:79:
b6:f7:45:7a:58:79:c1:f8:23:37:ee:2b:30:70:d9:
7e:30:bd:73:59:7e:8b:af:32:83:db:18:7c:8d:04:
7e:35:da:e2:4e:44:1f:7a:48:f5:83:05:fc:30:ce:
e2:4a:da:25:33:9a:0d:41:fb:bd:c6:07:9b:0b:ef:
79:b9:0a:af:b1:e2:bd:5a:aa:59:61:d4:0f:82:b2:
54:44:54:f1:8d:e9:30:a3:df:fe:18:21:d4:f3:fc:
a1:1e:00:95:a5:91:95:30:42:9f:d4:50:a8:8a:6f:
25:ec:40:80:21:0e:4d:e6:e9:57:3b:25:87:a5:b8:
f8:4e:8f:75:9e:17:5e:bc:3a:d1:8f:f0:0b:84:18:
42:73:7c:14:0f:02:8e:70:6e:61:9e:f2:92:f5:cf:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CC:92:B8:C3:B0:EA:F6:44:1B:3D:91:FA:1C:81:6F:CE:2A:0A:3E
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:74:d2:6e:c0:d5:2c:71:a8:a7:61:8a:1e:87:30:ef:55:7e:
88:74:2c:a7:c2:9d:ef:5f:02:9e:9f:c9:a3:cd:0b:84:15:6a:
d0:13:d8:99:2d:02:98:c9:57:f7:f3:26:3d:39:79:05:56:a0:
99:e9:17:de:ed:4e:70:ad:eb:02:09:3c:8b:b3:84:31:ca:43:
64:14:36:ec:32:87:ea:d3:38:6a:11:48:19:05:78:41:df:d2:
1e:4d:fb:6e:5c:a9:f5:20:13:68:ea:44:ac:12:2b:37:4d:1a:
d1:b8:1e:99:f4:f2:5d:53:8a:76:89:30:90:17:3b:96:f2:91:
6e:60:d4:57:da:0c:ed:9b:ce:b8:49:b1:c0:42:91:a4:c6:91:
ea:d1:72:a1:fc:7a:a4:9c:b9:31:8c:f3:64:9b:c3:ed:74:a9:
f0:65:75:b0:b8:34:9d:1a:68:29:a0:49:58:fc:3a:21:46:ee:
28:7b:b3:98:f2:c4:9d:3e:fd:52:82:cb:32:4a:09:59:16:ea:
9d:9b:7a:0e:7c:be:7b:27:6a:23:ae:cc:a1:67:57:f2:c2:81:
a0:af:be:5e:85:7f:63:0b:a2:63:21:f9:ab:cb:14:77:8b:05:
85:e1:84:88:1f:7c:b0:60:d7:df:47:4e:c3:10:7f:55:03:9b:
5f:61:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:11:41 2026 by rpki-client