Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: YNNJdpO1thTMLtHh49QK7sF+BO3y2D0gMqFxWXL9v80=
Subject key identifier: 9B:78:5C:A9:E4:A3:9B:D0:52:FC:27:D2:DC:0E:68:67:B5:3F:86:DB
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019E2092157B619A1F65EA1C8EC8D8FE953B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 080F
Signing time: Wed 13 May 2026 09:01:44 +0000
Manifest this update: Wed 13 May 2026 09:01:44 +0000
Manifest next update: Thu 14 May 2026 09:01:44 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: 4O3AiLgmSA22Sq6cJIogyL7MYAFtax19CdDuahqt50M=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:15:7b:61:9a:1f:65:ea:1c:8e:c8:d8:fe:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: May 13 09:01:44 2026 GMT
Not After : May 14 09:01:44 2026 GMT
Subject: CN=9b785ca9e4a39bd052fc27d2dc0e6867b53f86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:e2:fa:69:66:a2:06:be:1a:9a:94:30:6e:
7a:fb:44:ff:8f:eb:1d:17:e7:dd:7c:ed:61:dc:31:
1a:65:c7:bb:de:88:0b:7f:28:b5:7e:62:84:b8:c5:
6b:e9:97:19:d2:c6:6b:bf:a6:1b:16:3b:3d:95:00:
ea:49:f9:84:23:9a:98:69:d9:3c:8e:f4:41:a6:c1:
b4:0c:1f:58:33:b0:13:60:64:06:1d:58:20:32:f7:
ff:3c:85:76:7d:a1:69:9e:b1:c6:2f:3e:8b:10:cf:
78:9a:bb:8e:57:37:a5:4e:64:37:01:75:97:34:a1:
ad:12:a1:93:b4:dd:0b:cb:0e:db:1f:65:d4:57:c2:
aa:29:65:59:a6:df:96:3b:86:22:91:61:63:d2:6c:
6a:c3:3e:fe:e0:f8:72:a8:94:11:14:8e:a5:4b:11:
da:1a:e6:2e:f5:6b:6d:ea:02:07:f0:1d:25:f4:82:
28:01:06:a6:c2:b1:0c:50:a9:76:6a:d8:4a:f6:66:
5b:b2:f0:e0:f1:f1:f3:a6:c4:0c:e3:cc:4b:1c:81:
66:b2:8a:6b:29:86:a4:8e:8f:dc:9e:cf:39:0d:a5:
53:4c:1f:c9:10:4e:50:10:55:d4:35:92:fe:bc:4a:
4a:6b:63:74:2b:42:1c:58:31:da:f1:f2:4b:d2:cf:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:5C:A9:E4:A3:9B:D0:52:FC:27:D2:DC:0E:68:67:B5:3F:86:DB
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:b7:9a:3d:90:90:26:69:44:36:cc:21:db:b4:ba:c2:3c:
82:ad:31:e5:27:88:2c:e4:c7:7b:d8:d2:f2:41:d2:e0:63:74:
ec:a4:ed:e8:d0:9b:12:5d:71:a2:ba:6e:ef:00:7c:4e:f2:f0:
1e:04:6e:a7:6c:4d:c4:3e:59:fe:f1:a1:bf:3f:7e:40:0f:15:
8e:12:aa:9c:ad:73:7f:c5:c1:20:f8:04:97:ac:34:bb:34:68:
bd:35:8a:ca:86:3e:2d:bf:a0:00:9a:0a:b2:2e:cd:4e:94:d5:
5e:19:93:ed:c1:6d:0f:8f:2b:6c:c0:1a:6b:8e:24:16:23:ea:
93:ed:aa:f0:78:8c:14:1e:6c:59:35:2b:c6:be:e7:16:07:24:
32:54:b7:8c:e1:e3:ac:75:59:59:99:a9:b0:b5:7b:66:7e:b6:
ff:0f:50:4f:42:be:c0:93:6b:5b:dd:53:72:07:ee:f1:e0:9d:
cd:b4:b5:5e:71:b5:77:55:c1:c2:af:74:e7:f9:99:64:e6:3a:
13:56:77:84:b9:68:a3:d7:c9:4f:b3:b4:75:b4:f9:3a:51:f8:
21:03:a1:eb:51:67:25:88:9d:41:a4:c0:9f:1d:c0:61:9e:a4:
13:f7:ba:d7:63:e1:11:10:b8:e1:f5:c8:61:49:f8:e0:3c:99:
df:ec:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:58 2026 by rpki-client