Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: S0Vn6NORenOOCVcAPTpWLoE0AgKQxV/PUqRSDizDRXk=
Subject key identifier: CC:2C:92:74:1E:C7:0A:6F:2E:AC:55:49:5C:0B:D6:F5:9C:5C:55:A0
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 01A177DEB514F81F36B2BE5B1D36DFA5606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 1819
Signing time: Mon 26 Oct 2026 11:00:46 +0000
Manifest this update: Mon 26 Oct 2026 11:00:46 +0000
Manifest next update: Tue 27 Oct 2026 11:00:46 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: vyJiHfsVsw3dezyp2n91GJzMYn+GzO9LSOComwcB3iA=)
2: i0WslBSNbZGrjfVFMISsJmr6unc.roa (hash: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:b5:14:f8:1f:36:b2:be:5b:1d:36:df:a5:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Oct 26 11:00:46 2026 GMT
Not After : Oct 27 11:00:46 2026 GMT
Subject: CN=cc2c92741ec70a6f2eac55495c0bd6f59c5c55a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:07:80:ca:c9:2f:96:b5:3c:1a:e5:13:94:
c3:2f:d2:0a:5d:16:a3:a2:b8:8d:38:75:32:ec:27:
1a:86:17:f8:c6:2e:59:8a:92:48:d4:9a:f0:7a:1d:
88:d4:78:02:a0:15:62:be:fd:f0:87:30:0e:a3:a8:
a2:c9:16:05:b8:1c:a7:cb:20:9e:33:56:20:8f:01:
25:3a:e1:bb:6f:44:8c:fd:30:39:fb:18:72:e7:bd:
00:ec:81:1d:68:a5:c7:96:e4:e5:60:6f:8a:36:8a:
2c:14:04:5d:34:59:81:e4:9e:56:f5:58:59:15:1c:
64:83:8e:7b:4a:f6:b4:36:08:d6:22:7c:15:f3:c7:
9d:b7:5e:17:42:2f:00:4d:62:e7:65:97:92:62:93:
de:66:de:e9:c6:ca:46:dd:9a:14:29:b5:8e:db:b2:
50:a0:f4:6b:b2:ad:73:91:e5:72:2d:e6:81:27:67:
7e:1f:86:83:a3:3a:95:fe:f4:cf:45:4a:f3:6f:15:
44:f8:98:e0:bf:2a:b7:09:8c:77:73:24:a5:f5:1d:
10:7c:85:88:97:6c:20:40:9c:aa:0b:5d:a5:99:9e:
c7:f9:14:c5:d8:27:5e:b3:6f:c7:51:3f:f3:c2:1e:
cc:b4:66:81:34:d1:97:05:89:46:f7:27:6b:a3:7a:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:92:74:1E:C7:0A:6F:2E:AC:55:49:5C:0B:D6:F5:9C:5C:55:A0
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:28:78:ac:d1:f9:50:c6:ef:5e:fc:ca:00:39:95:4c:9b:2b:
a7:1d:1a:40:e3:a9:2b:1a:48:98:bb:7f:39:42:0c:b9:cb:3f:
0d:72:ee:e9:b2:2c:f1:dd:53:68:69:54:41:e2:90:15:6c:03:
63:16:28:4f:e6:65:f0:ff:ea:56:bf:8c:57:8a:7b:30:4a:86:
a2:71:d1:27:96:6d:94:f2:f3:f6:29:ca:28:a3:dd:a3:cf:71:
58:48:c5:14:9b:e2:f9:75:ed:11:b1:b5:08:3f:75:93:4e:66:
38:a7:08:66:03:f0:a3:ce:c0:2e:a7:1a:24:7a:ff:16:07:c2:
4a:8d:14:e0:e7:2f:00:35:f0:58:42:71:e6:cb:fd:e6:a2:09:
00:1d:a1:ad:b1:fa:22:13:49:88:d0:23:8e:19:50:a2:96:ee:
ae:c4:a3:56:8b:fa:a3:de:af:d5:3c:ec:fc:fe:d6:f5:46:95:
0c:18:6f:b2:08:11:4b:97:17:37:81:51:4c:37:59:76:c5:67:
26:85:8c:51:94:9f:23:ef:67:61:ca:05:53:31:6c:63:68:cd:
ea:65:ff:93:f5:08:05:2b:fb:57:bf:bc:3f:28:d5:88:99:d1:
78:ee:47:a9:ff:65:96:c3:23:6f:c7:e2:95:48:7d:fe:b5:54:
1d:8e:54:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF33rUU+B82sr5bHTbfpWBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1
YWE2YTgwHhcNMjYxMDI2MTEwMDQ2WhcNMjYxMDI3MTEwMDQ2WjAzMTEwLwYDVQQD
EyhjYzJjOTI3NDFlYzcwYTZmMmVhYzU1NDk1YzBiZDZmNTljNWM1NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisMHgMrJL5a1PBrlE5TDL9IKXRaj
oriNOHUy7Ccahhf4xi5ZipJI1Jrweh2I1HgCoBVivv3whzAOo6iiyRYFuBynyyCe
M1YgjwElOuG7b0SM/TA5+xhy570A7IEdaKXHluTlYG+KNoosFARdNFmB5J5W9VhZ
FRxkg457Sva0NgjWInwV88edt14XQi8ATWLnZZeSYpPeZt7pxspG3ZoUKbWO27JQ
oPRrsq1zkeVyLeaBJ2d+H4aDozqV/vTPRUrzbxVE+Jjgvyq3CYx3cySl9R0QfIWI
l2wgQJyqC12lmZ7H+RTF2Cdes2/HUT/zwh7MtGaBNNGXBYlG9ydro3r3twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwsknQexwpvLqxVSVwL1vWcXFWgMB8GA1UdIwQY
MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt
OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0
LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXih4rNH5
UMbvXvzKADmVTJsrpx0aQOOpKxpImLt/OUIMucs/DXLu6bIs8d1TaGlUQeKQFWwD
YxYoT+Zl8P/qVr+MV4p7MEqGonHRJ5ZtlPLz9inKKKPdo89xWEjFFJvi+XXtEbG1
CD91k05mOKcIZgPwo87ALqcaJHr/FgfCSo0U4OcvADXwWEJx5sv95qIJAB2hrbH6
IhNJiNAjjhlQopbursSjVov6o96v1Tzs/P7W9UaVDBhvsggRS5cXN4FRTDdZdsVn
JoWMUZSfI+9nYcoFUzFsY2jN6mX/k/UIBSv7V7+8PyjViJnReO5Hqf9llsMjb8fi
lUh9/rVUHY5U+g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:15:47 2026 by rpki-client