Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: jBxZUoqaddmF9Yubb7z9OiaDyS612Ah97lBs1tTx+ko=
Subject key identifier: 99:85:F2:DC:06:93:83:47:7C:36:0D:2C:C5:56:5D:AC:96:3A:27:41
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019F954A189549A5E2D7B8F569305B6D1967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 08D0
Signing time: Fri 24 Jul 2026 18:01:28 +0000
Manifest this update: Fri 24 Jul 2026 18:01:28 +0000
Manifest next update: Sat 25 Jul 2026 18:01:28 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: rlzR00KtLNXtwY9kTfHo1jWAgfIo5u2wmvkr2j0jqDE=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:18:95:49:a5:e2:d7:b8:f5:69:30:5b:6d:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jul 24 18:01:28 2026 GMT
Not After : Jul 25 18:01:28 2026 GMT
Subject: CN=9985f2dc069383477c360d2cc5565dac963a2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:df:a2:66:82:c0:46:69:67:9f:71:1e:f8:
3e:62:f3:31:21:96:68:75:0e:d2:06:0d:74:a1:60:
92:c5:96:21:66:7e:21:95:71:3a:06:68:16:d3:d1:
fb:d5:95:5a:6b:b9:58:25:ba:be:83:67:93:ff:61:
e9:92:a9:ee:7f:b3:ae:54:ac:44:79:7f:be:0e:27:
84:fd:e4:19:d1:ff:31:d5:05:2b:7c:72:3e:92:79:
bf:7e:4d:c8:e5:10:e7:2c:5e:34:bf:37:56:78:b0:
d9:92:87:50:04:5e:e2:c1:ba:53:04:14:6c:17:6b:
d8:da:ec:1e:ab:b8:a6:8d:84:bf:10:52:5f:8d:4a:
d6:d3:6c:c0:84:26:e4:53:b7:10:21:2b:12:87:98:
3f:a3:f8:3f:bd:1d:e8:07:e1:27:aa:7a:dd:9f:6a:
cd:6e:d2:ac:c6:80:66:84:81:60:bd:cf:e2:28:e9:
74:5e:fd:98:f3:bf:2b:08:a8:50:e6:78:45:88:6c:
d7:e9:b9:38:63:1a:0e:8c:5b:a7:53:0b:7f:63:5d:
e6:d9:52:31:d9:94:6e:c6:90:a5:11:88:14:ea:5b:
d5:ca:18:64:b5:19:55:1d:b1:9b:0d:48:7c:b9:a5:
a0:66:79:5e:f8:38:e3:7c:84:f7:f8:82:c4:2d:ab:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:F2:DC:06:93:83:47:7C:36:0D:2C:C5:56:5D:AC:96:3A:27:41
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:a1:4e:8d:1a:42:78:96:b2:b1:49:32:b3:da:19:b3:17:
6e:15:5f:95:c8:02:0f:6f:1a:b4:5c:59:6f:fe:57:e5:b4:3f:
1c:d0:22:08:00:c0:04:e0:51:11:d3:9f:f2:d2:2b:ae:2b:52:
bd:96:dd:e3:e4:9e:a7:5e:a5:4e:4b:d6:c1:b0:c8:73:4f:f7:
eb:0e:27:7c:26:8a:f5:f0:dc:62:95:07:12:88:7b:bc:23:c5:
6c:43:3d:b0:dc:fd:75:9b:70:fe:f4:22:9e:59:e6:d5:34:0a:
28:af:fc:c4:b3:d0:6d:89:2f:c8:5a:2f:c4:ae:d9:5a:b2:31:
fa:6d:42:b3:73:a8:8f:ba:7e:95:ca:68:6b:e7:9a:f4:4c:71:
3e:e5:e1:1a:61:89:a8:ff:42:e2:ec:1c:01:6d:b5:b5:ad:5c:
6f:49:6e:cf:5d:e6:3e:40:19:ac:4d:bf:16:8f:50:65:99:7a:
c4:21:db:f9:94:dc:cf:b9:07:c5:7e:66:3f:f9:b0:23:9b:d5:
c9:88:90:52:62:0b:7a:f0:74:36:73:0c:01:51:32:eb:84:23:
e2:45:36:84:32:7e:93:11:9a:8c:bf:2f:37:5d:ff:e6:18:c2:
fc:85:63:01:ec:bf:ae:1b:81:ad:97:8c:ca:07:a9:b0:64:77:
b9:69:70:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VShiVSaXi17j1aTBbbRlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz
ZWFiYjkwHhcNMjYwNzI0MTgwMTI4WhcNMjYwNzI1MTgwMTI4WjAzMTEwLwYDVQQD
Eyg5OTg1ZjJkYzA2OTM4MzQ3N2MzNjBkMmNjNTU2NWRhYzk2M2EyNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHLfomaCwEZpZ59xHvg+YvMxIZZo
dQ7SBg10oWCSxZYhZn4hlXE6BmgW09H71ZVaa7lYJbq+g2eT/2Hpkqnuf7OuVKxE
eX++DieE/eQZ0f8x1QUrfHI+knm/fk3I5RDnLF40vzdWeLDZkodQBF7iwbpTBBRs
F2vY2uweq7imjYS/EFJfjUrW02zAhCbkU7cQISsSh5g/o/g/vR3oB+Enqnrdn2rN
btKsxoBmhIFgvc/iKOl0Xv2Y878rCKhQ5nhFiGzX6bk4YxoOjFunUwt/Y13m2VIx
2ZRuxpClEYgU6lvVyhhktRlVHbGbDUh8uaWgZnle+DjjfIT3+ILELatIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmF8twGk4NHfDYNLMVWXayWOidBMB8GA1UdIwQY
MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt
NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl
LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuKhTo0a
QniWsrFJMrPaGbMXbhVflcgCD28atFxZb/5X5bQ/HNAiCADABOBREdOf8tIrritS
vZbd4+Sep16lTkvWwbDIc0/36w4nfCaK9fDcYpUHEoh7vCPFbEM9sNz9dZtw/vQi
nlnm1TQKKK/8xLPQbYkvyFovxK7ZWrIx+m1Cs3Ooj7p+lcpoa+ea9ExxPuXhGmGJ
qP9C4uwcAW21ta1cb0luz13mPkAZrE2/Fo9QZZl6xCHb+ZTcz7kHxX5mP/mwI5vV
yYiQUmILevB0NnMMAVEy64Qj4kU2hDJ+kxGajL8vN13/5hjC/IVjAey/rhuBrZeM
ygepsGR3uWlwkA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:17 2026 by rpki-client