Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: jw+XPmFdGaSW8tAYN2hxL/8gI+C1of9gjafPhgPMCN4=
Subject key identifier: 80:3C:03:0D:6D:C5:31:A3:E5:B7:28:F3:B2:96:85:BC:22:3C:43:14
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 01A12AD6CCBBE70E6EC87161A064459367A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 09A2
Signing time: Sun 11 Oct 2026 12:01:22 +0000
Manifest this update: Sun 11 Oct 2026 12:01:22 +0000
Manifest next update: Mon 12 Oct 2026 12:01:22 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: jv9aH2TTQNbMFta7jBFhYq01rc0ynhbigml1iZWpM8Y=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:cc:bb:e7:0e:6e:c8:71:61:a0:64:45:93:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Oct 11 12:01:22 2026 GMT
Not After : Oct 12 12:01:22 2026 GMT
Subject: CN=803c030d6dc531a3e5b728f3b29685bc223c4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:01:52:0e:03:f8:51:da:e1:3e:28:b3:0c:
fc:51:1c:12:a9:5c:02:bd:10:e8:33:04:9d:2a:d2:
92:37:c2:05:ff:10:d5:28:0b:77:a2:39:e8:23:f0:
4a:0d:1e:81:64:f3:9a:d3:61:48:cc:d6:57:fc:34:
4c:69:e6:08:90:f7:a1:78:50:f8:3b:ff:a3:a1:86:
86:ca:bb:65:e6:5b:7e:7a:3d:1e:db:27:76:d8:1d:
65:1a:c2:42:ec:ad:28:69:ff:15:a5:8c:a7:aa:12:
7c:42:ba:2b:44:af:26:09:f1:94:c2:80:dc:17:08:
8f:d7:95:69:49:8d:f7:bc:91:fe:57:87:34:52:01:
73:d6:5f:61:42:ff:97:25:bc:be:04:0d:b8:34:d9:
f4:4a:dd:91:5d:a6:97:72:4b:66:c2:ce:67:58:ef:
f2:3e:21:bd:55:a7:4d:71:07:6f:4e:55:01:7e:4a:
d3:b6:fe:23:68:b8:1f:6b:a3:5f:42:0f:d4:35:04:
f7:c8:81:e8:1b:84:35:c7:03:44:90:1b:d5:e1:2f:
c7:c5:df:f8:08:b4:d1:f3:d9:ec:19:71:89:7c:3c:
55:78:73:d3:e7:56:23:a6:dc:c1:2f:d8:3f:5f:c8:
ec:e7:0e:3e:b8:b2:8f:b2:13:72:10:40:25:dd:e8:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:03:0D:6D:C5:31:A3:E5:B7:28:F3:B2:96:85:BC:22:3C:43:14
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bf:78:91:f7:5d:ec:e6:8d:b3:35:c3:01:26:4e:cb:1a:10:
8d:13:af:a0:6c:3f:e1:74:37:7c:e0:3b:b7:6d:8e:46:c4:84:
80:a3:f9:77:e5:7f:9e:0a:f5:97:94:ef:6a:4d:93:25:ed:8c:
d4:61:1d:5e:1b:b4:6f:2e:68:1c:f4:62:77:16:47:a8:49:e2:
e9:5d:96:36:6c:4f:c3:11:22:3a:75:1c:cf:d7:6c:6d:75:69:
44:c2:9c:34:b6:4f:ab:49:9e:2f:1f:b3:b1:fe:8c:35:06:4b:
61:39:9a:81:32:2b:8a:ed:fd:1c:ac:a5:02:c2:7f:5d:44:56:
aa:b9:83:e0:f9:15:c0:81:fb:4f:fd:78:12:6f:bd:54:3c:6e:
a8:6e:19:3a:9f:05:72:b2:54:7c:e9:24:de:4e:3c:cf:a7:ca:
d1:42:61:6c:eb:87:e7:19:23:99:70:47:c6:0a:50:c3:f6:66:
ac:80:e4:3e:36:1c:8d:0c:2f:e2:24:be:7d:06:9b:41:94:84:
9c:a8:6c:70:0e:eb:13:35:d0:23:d0:0e:b9:6c:03:7e:9f:79:
a5:0a:77:73:50:ce:b1:67:97:0e:8c:8b:33:ec:d4:7d:08:5b:
d7:c6:4e:bc:2d:98:60:32:81:9a:a2:59:58:2a:9c:92:3e:be:
f6:10:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:31:20 2026 by rpki-client