Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 2LDhifCuIXrp0+XbDs1c2p4Teur4YxhdbwFm7zJMCmI=
Subject key identifier: 96:F8:B9:B3:C5:2E:DF:4C:52:8D:5B:E9:04:47:62:8F:1B:90:31:A0
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019F935B5D56750EE2E0B9040C4B37B6CCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 08CF
Signing time: Fri 24 Jul 2026 09:01:06 +0000
Manifest this update: Fri 24 Jul 2026 09:01:06 +0000
Manifest next update: Sat 25 Jul 2026 09:01:06 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: 2POZQDcev8M+lULCxWSOxi5NMmF7XOzysOl8slUhe/I=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:5d:56:75:0e:e2:e0:b9:04:0c:4b:37:b6:cc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jul 24 09:01:06 2026 GMT
Not After : Jul 25 09:01:06 2026 GMT
Subject: CN=96f8b9b3c52edf4c528d5be90447628f1b9031a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:ca:f1:f8:fd:1f:4d:b3:70:1b:96:49:66:
04:35:cf:76:b5:6e:bd:0c:66:08:66:51:27:11:0d:
e4:37:f1:bf:68:57:94:91:0e:1e:4d:8c:ef:11:a4:
a6:d8:b9:e8:d6:a3:8c:84:8b:cc:a1:0f:10:79:58:
7a:66:45:93:da:8b:89:09:4b:ce:61:b6:70:01:c9:
7f:e6:71:71:8a:ec:01:73:81:17:ba:69:d5:75:86:
66:0a:a7:cf:58:4c:cf:e5:37:72:c4:40:c7:26:57:
f7:60:35:cc:77:88:43:17:00:7c:d7:13:63:ef:8e:
f7:63:bd:f5:d9:d7:9f:a5:ef:5a:98:21:08:2c:0b:
7b:5c:db:26:30:5d:da:dc:b7:94:af:95:cf:37:a4:
cd:0d:fa:bf:9d:d3:1e:00:2f:f2:71:70:38:7c:61:
03:28:5e:fa:64:0d:16:e9:85:23:ed:75:5d:8a:ad:
23:65:fb:81:e3:47:59:14:e3:d0:2f:26:40:15:83:
90:9a:4f:8d:b5:64:13:1e:d7:d1:a3:c8:58:91:62:
ea:60:97:d0:19:6f:e3:fd:49:2f:3c:d9:3d:83:12:
d9:45:b5:63:5b:9d:06:70:2d:d8:3c:09:85:2b:de:
9e:45:92:95:92:78:75:ef:62:0a:70:5a:93:1a:19:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:B9:B3:C5:2E:DF:4C:52:8D:5B:E9:04:47:62:8F:1B:90:31:A0
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:ee:12:80:b5:33:32:b8:b0:92:0f:31:ab:6c:61:4d:7d:
e1:d7:b7:97:08:83:8f:77:f6:95:3e:3f:e8:f6:64:da:7f:7b:
52:45:87:99:3e:02:6c:fb:0b:ff:a7:e6:e0:68:25:3e:83:b4:
6e:74:66:eb:99:0e:bc:27:4c:e3:79:94:6f:6d:df:16:3e:19:
3b:f8:a3:7f:5b:46:f1:5d:1b:c7:cb:a3:f6:c2:30:0c:24:17:
96:57:df:28:9f:a6:e5:d1:c6:61:ae:0a:aa:3a:0f:16:79:4c:
0d:1e:01:29:11:3a:d2:a3:83:44:3b:ca:07:e3:26:c7:86:cc:
06:11:3e:21:75:5d:e4:c8:9d:20:00:67:ea:f6:c7:04:0d:f9:
92:4e:54:c8:6b:fc:a3:72:c8:1e:a9:65:7e:3a:f8:7a:a0:a2:
6b:9c:9a:5a:97:15:c3:b0:e0:7d:a4:87:dd:9f:37:0b:45:c9:
d3:77:11:75:b8:08:90:aa:fa:25:b7:d3:e6:75:a3:25:0d:ce:
fb:71:a9:02:09:e8:ed:9c:b0:17:5e:b5:1a:5b:d0:bf:d8:7b:
25:cd:fa:94:7f:c6:36:7e:13:41:93:ad:90:f1:61:8e:c0:10:
4c:57:43:42:cd:84:7b:f7:5f:57:80:1b:f3:a3:5b:56:bf:1f:
6b:68:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:51 2026 by rpki-client