Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: 8rstIH/j2r/XYWrIoonFRSFaDqo5wbXaWVs/5jhTjS0=
Subject key identifier: 5B:7D:A1:BE:35:31:E3:87:A4:98:94:27:3B:24:3F:6E:64:E9:BB:ED
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019FA0A913FF63A7ACFD7CA7A7DBFF2F89BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 1725
Signing time: Sun 26 Jul 2026 23:01:02 +0000
Manifest this update: Sun 26 Jul 2026 23:01:02 +0000
Manifest next update: Mon 27 Jul 2026 23:01:02 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: k89o7kGr2vsacrcATvGDO/yxO4yaGj7h09Mw1b9b1jw=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:13:ff:63:a7:ac:fd:7c:a7:a7:db:ff:2f:89:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jul 26 23:01:02 2026 GMT
Not After : Jul 27 23:01:02 2026 GMT
Subject: CN=5b7da1be3531e387a49894273b243f6e64e9bbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:72:88:13:f7:33:51:70:de:0e:b5:7d:96:
69:7b:16:af:ab:f3:43:bc:ae:9b:7b:8d:12:de:7c:
07:fe:6d:87:83:07:64:c4:c9:22:1a:e7:69:35:59:
61:a9:af:47:42:35:4e:06:44:56:80:21:f6:36:6f:
fe:29:70:b5:5a:c9:e1:33:b4:4d:a3:c2:4c:b7:c8:
73:aa:ff:8a:1b:e4:8d:b3:5b:43:88:7e:79:d1:2b:
2d:c7:48:18:95:46:c8:33:6f:41:ee:e8:d4:3e:25:
fd:c1:8d:52:1b:06:1d:5f:63:df:ce:8b:56:3f:a6:
6f:9e:6e:25:d7:c4:74:d0:52:df:8e:5d:fa:7c:2f:
64:18:71:c5:a3:ac:ff:f2:75:cd:50:1c:60:0b:d1:
54:74:e1:74:c6:b1:8d:17:28:47:9f:4e:ab:f6:25:
c0:f3:63:b1:6a:68:89:71:88:d5:bd:3a:f3:7a:c2:
c2:aa:4d:fc:fe:2e:8c:06:92:7e:2c:2f:79:7c:85:
dd:dd:52:9c:fb:71:d9:fc:68:67:ed:db:8b:a7:75:
d7:3f:bc:72:75:4a:ad:90:64:d8:93:42:12:fa:f7:
34:a7:89:ef:79:c5:66:82:bf:c9:20:fb:5e:b0:86:
3d:3a:3c:e4:49:c1:03:44:5a:b7:72:f7:5d:df:2c:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7D:A1:BE:35:31:E3:87:A4:98:94:27:3B:24:3F:6E:64:E9:BB:ED
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e3:15:57:5d:1c:ac:e9:70:1a:92:15:65:2a:ff:35:dd:bc:
a0:ea:f2:fb:a1:d5:b8:94:ff:5a:57:ec:12:58:32:fa:ec:f5:
3b:42:f2:5a:51:8e:91:30:b1:ee:25:7f:6e:cc:23:20:7d:39:
a6:c5:ee:00:54:01:60:81:54:94:59:ea:6c:2a:a0:d4:86:56:
fb:14:40:8a:73:9e:d9:d1:64:3c:96:1e:72:a5:80:0e:8b:88:
1b:38:03:0d:61:91:61:90:de:c5:1a:a3:32:ad:8f:28:4f:3f:
bd:41:b9:8a:e9:a6:ea:8f:36:f6:eb:92:ff:91:8a:11:e9:96:
45:50:0f:76:44:02:21:1c:d3:b6:29:64:fc:17:c7:07:90:a0:
a1:c9:73:a0:f9:23:a5:4d:28:c8:fb:41:d3:f8:59:05:fc:4c:
e3:05:35:73:7f:a1:25:d2:49:21:a4:63:cb:30:a6:0b:c5:c9:
62:5a:de:06:bd:06:50:e4:33:e9:59:98:2a:e2:14:e5:85:57:
55:8a:25:dc:4e:a1:06:0d:03:2c:16:19:56:f6:3c:9f:5e:3e:
24:cd:84:a8:45:cf:bf:41:8b:6d:a0:ff:1e:1b:5d:ad:95:1b:
8e:7c:a7:4b:5f:02:a3:68:c0:89:c1:d6:23:7f:8d:37:5d:97:
84:4b:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:35 2026 by rpki-client