Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 47yOCbJzlKrMraZ0hnHpFRx02essWaEKJdJ5k9tLy/w=
Subject key identifier: 29:61:0F:98:5C:B5:AA:38:1E:6F:25:7A:0B:0C:12:17:8C:17:3E:88
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019D2B4E1B519761C2EE79DC756FBEEECADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0790
Signing time: Thu 26 Mar 2026 18:00:32 +0000
Manifest this update: Thu 26 Mar 2026 18:00:32 +0000
Manifest next update: Fri 27 Mar 2026 18:00:32 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: Rz2Trr3BK7e/jZ9Ilgt3sqkRqmH4AIWCdg0eZEeU2d0=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:1b:51:97:61:c2:ee:79:dc:75:6f:be:ee:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Mar 26 18:00:32 2026 GMT
Not After : Mar 27 18:00:32 2026 GMT
Subject: CN=29610f985cb5aa381e6f257a0b0c12178c173e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:da:70:7f:39:1a:f9:98:48:92:11:d4:5f:
f2:64:7c:99:78:6a:5d:81:59:4e:26:89:c1:3b:c3:
aa:62:69:54:11:4e:9e:e6:40:22:da:7b:f1:f2:bd:
b9:d1:c9:c3:c8:d1:6e:e9:44:d2:6f:3a:38:34:57:
3c:49:02:13:cb:0d:19:1a:57:cb:11:8d:6f:8f:21:
ee:f2:f3:d8:9f:b3:2f:dc:21:a3:7d:c8:5f:d7:03:
f5:f3:0a:6e:96:ed:25:f4:fb:0a:f1:26:f9:7a:71:
d5:6b:32:e1:8f:99:e5:1f:81:d1:f6:4a:d7:dd:d5:
64:c8:9b:cd:c8:72:e3:b2:a0:54:cb:72:a7:e0:b3:
25:88:7b:cd:50:a0:00:53:3a:a6:6e:7c:3d:17:89:
f6:b0:db:be:76:f2:72:c0:e3:64:c8:c1:ff:21:97:
bf:1c:24:6d:7a:da:69:62:d5:ea:4e:74:91:b9:d9:
84:82:d1:79:18:5a:43:4b:a3:16:7c:31:78:26:e9:
6d:d8:8f:07:f4:7f:de:a7:46:15:d2:02:7c:85:e3:
eb:60:da:e1:fa:61:90:99:06:85:82:a1:8e:54:1a:
ba:49:18:16:a4:df:e4:d5:c3:f0:d2:0a:0c:4b:ba:
45:0c:23:0b:64:05:ed:54:6f:61:73:6b:04:ff:1a:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:61:0F:98:5C:B5:AA:38:1E:6F:25:7A:0B:0C:12:17:8C:17:3E:88
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:d3:a4:1e:b8:09:12:eb:2e:46:c8:59:2e:d7:a5:44:98:
e4:8e:47:16:7f:db:ff:54:fe:53:bf:96:12:cb:b4:ed:d5:da:
aa:18:7b:32:08:86:7f:a4:49:52:65:6f:44:c3:40:9a:2f:a5:
ce:13:d9:81:51:61:9b:79:ba:91:b5:3e:b9:10:b1:cf:9f:44:
5b:e2:e1:85:60:86:5e:0e:66:7c:4b:50:22:a0:7f:39:c2:76:
d0:4f:3c:1f:92:d4:01:b5:17:bb:47:eb:63:34:dd:1c:ab:1d:
9b:92:71:0c:44:04:a4:89:f0:9f:cb:7a:7b:bb:19:40:02:78:
e9:d8:75:92:db:7c:26:d7:8e:15:6d:6a:d2:bb:86:06:85:e5:
52:ff:18:c6:61:71:02:3a:dc:dd:1d:90:cf:47:a6:50:6a:56:
cd:30:ef:04:d7:80:67:64:5c:57:d2:25:aa:2c:d5:05:1a:5d:
6b:6d:46:83:00:30:e8:96:06:03:48:7b:1b:26:c7:8b:e2:06:
80:95:28:09:c3:23:93:59:06:30:26:ea:8c:c0:c3:0a:34:d9:
96:52:ac:a8:91:4c:1a:71:e8:95:80:11:e3:29:72:83:cc:5d:
9b:61:50:aa:c4:46:9b:b6:24:96:28:bb:4b:5f:7e:bd:de:ff:
6f:54:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:50 2026 by rpki-client