Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: YzHrVcWHJ+RaEQIjNYLspaOiK8yr5tsl6mPPTPywnjA=
Subject key identifier: D8:5D:D6:CD:3D:B2:A3:51:DD:CE:D2:41:05:AD:47:7E:59:1F:99:5D
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 019E1D90D1D4ED6F96C8C6FDD4F4F53F8E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 1243
Signing time: Tue 12 May 2026 19:01:30 +0000
Manifest this update: Tue 12 May 2026 19:01:30 +0000
Manifest next update: Wed 13 May 2026 19:01:30 +0000
Files and hashes: 1: KSbA9cQaQrEqqJ9Vk5u4pl14-MA.roa (hash: xWE05jJQHZZKnurMgtEYX+1igOzBte1K+N47A2wHl2g=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: QLlHT/KVWH8fjLhBz4Idh7GcQHKJwPUEYSE4vPj6vz4=)
3: iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa (hash: /XuM1/LN4ogIjwLDnxCjibzUafyv79hq4kOMwib5+d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d1:d4:ed:6f:96:c8:c6:fd:d4:f4:f5:3f:8e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: May 12 19:01:30 2026 GMT
Not After : May 13 19:01:30 2026 GMT
Subject: CN=d85dd6cd3db2a351ddced24105ad477e591f995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:49:c6:b9:04:e3:cd:c2:42:21:09:dc:ec:
2d:60:ed:53:15:5d:20:93:cd:73:31:ba:c4:e5:bd:
67:d5:43:95:39:4a:0b:4b:13:a7:4e:9f:72:e8:5e:
81:5f:95:bf:50:22:2b:6c:1f:43:fb:c2:0b:61:3b:
3d:ae:33:55:73:70:a4:2f:b6:ac:d6:ef:35:5e:01:
cf:e2:c5:10:b2:47:e6:0b:48:72:7c:de:2d:1c:4e:
3b:d4:10:9f:e5:e2:98:31:97:df:3b:6c:ae:3a:00:
e2:db:15:10:c1:67:9f:a5:63:1a:1d:2d:62:d3:36:
bd:d5:d2:8a:f5:7c:47:c9:4c:d1:0a:3c:31:c4:5c:
5f:90:24:8f:ac:c7:22:d8:99:2c:32:6f:70:84:33:
24:b9:e2:50:8b:85:7c:2b:8c:57:9b:5c:ad:c3:28:
3b:ea:b3:a4:ed:93:0f:90:73:75:70:5f:ba:71:49:
bd:a7:e8:c7:b0:74:b9:30:14:30:9c:39:a2:a3:74:
84:99:08:51:ba:43:3b:2f:bb:56:7d:d2:9f:63:c8:
0f:e3:72:85:ba:31:0d:84:ef:bb:03:13:64:18:bb:
bb:ab:84:b7:9e:24:99:8a:21:c9:3e:49:d1:1b:5b:
0b:c0:d9:f3:31:80:38:e4:95:61:11:95:64:0c:1b:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5D:D6:CD:3D:B2:A3:51:DD:CE:D2:41:05:AD:47:7E:59:1F:99:5D
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:11:20:8c:97:5a:7e:c7:e9:9c:91:1b:10:72:f8:7b:c7:
b3:c1:ab:f1:e2:b8:37:23:cc:9a:14:6a:a1:c9:34:da:3d:7d:
f8:94:d4:c7:44:d2:9f:aa:d2:df:1a:10:53:88:85:02:18:52:
6e:c2:cb:b6:75:fa:db:13:f8:fa:96:72:20:4d:c7:04:58:fa:
38:13:47:99:ab:ab:d0:1d:26:01:2b:f0:27:23:b3:fc:4a:57:
13:93:c4:c2:2e:00:57:92:eb:d7:91:8b:4c:ef:56:e0:c5:4e:
ab:8e:bd:64:89:78:ed:ef:e5:7c:02:d6:ba:d6:8f:a0:ea:5d:
75:24:7f:46:aa:92:d1:31:22:19:fd:61:b4:38:e1:6b:93:e9:
2e:32:24:1e:17:f5:c5:e7:3e:8c:65:80:1a:aa:33:3f:27:43:
c5:4b:f2:07:75:8c:bc:47:da:4d:e9:00:53:99:17:4c:5a:a7:
99:ea:8b:ba:c1:81:e8:71:b0:e3:20:8a:a9:2f:ce:1c:f8:1e:
9c:32:84:50:67:fb:46:39:6e:78:61:86:f1:36:5d:39:ac:44:
d1:9c:96:c4:a7:78:a7:b0:70:3e:19:9a:2a:3d:b8:30:ef:53:
e6:bb:fe:37:a1:a4:d9:1a:aa:16:ac:6d:60:f9:93:7c:00:43:
8f:43:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:47 2026 by rpki-client