Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: /kfijVIz+MmU8iQ7hkfqSPFpRdnHERXsTF905Ky87vQ=
Subject key identifier: 95:84:3C:F4:57:F8:96:EC:79:B0:13:43:53:9E:D6:B9:C1:0D:1D:36
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 019D265F225856887AB18E8E2F87DFB98B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 11C3
Signing time: Wed 25 Mar 2026 19:01:01 +0000
Manifest this update: Wed 25 Mar 2026 19:01:01 +0000
Manifest next update: Thu 26 Mar 2026 19:01:01 +0000
Files and hashes: 1: KSbA9cQaQrEqqJ9Vk5u4pl14-MA.roa (hash: xWE05jJQHZZKnurMgtEYX+1igOzBte1K+N47A2wHl2g=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: Y5Fdxkvnn8QVOzqGIi0DhghhpfkmWAiKfKvWhQ6GjRk=)
3: iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa (hash: /XuM1/LN4ogIjwLDnxCjibzUafyv79hq4kOMwib5+d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:22:58:56:88:7a:b1:8e:8e:2f:87:df:b9:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Mar 25 19:01:01 2026 GMT
Not After : Mar 26 19:01:01 2026 GMT
Subject: CN=95843cf457f896ec79b01343539ed6b9c10d1d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:41:dc:3e:3f:06:e4:5a:8b:9f:5a:4e:a0:
0c:99:18:e7:3e:4d:ac:76:b1:7c:e7:7d:5f:a6:52:
e9:40:86:fc:dd:1b:06:22:b3:cf:9e:9a:b6:4c:c7:
76:f2:0f:bb:6d:cc:64:13:06:fc:e8:fe:dc:58:d9:
f7:83:e0:9c:05:a5:45:c5:f0:46:78:a6:91:8e:5e:
79:77:6f:aa:e5:f6:38:01:05:9b:75:6d:db:d8:7a:
f6:73:90:05:63:33:be:6b:a1:1a:5c:15:a7:b1:db:
a3:1b:2d:d8:ae:5e:f9:a3:55:f7:ae:64:32:72:65:
42:35:0a:22:1f:b7:c6:ce:da:5f:d0:86:6c:77:61:
61:b2:77:b6:61:bd:b9:d1:e4:5c:2c:f2:c5:e6:b4:
90:0a:ce:ee:93:b3:6b:ee:a2:36:3f:60:1b:ae:2b:
ba:e8:77:08:16:cb:98:39:81:6e:b1:29:a3:2c:e0:
50:28:56:31:aa:cd:56:af:d3:05:4d:7c:0f:64:95:
5c:71:4f:cb:76:07:b3:f5:be:52:ef:48:ac:f3:9c:
5f:65:cf:cf:b1:25:26:e5:d8:07:d8:9f:e1:bc:eb:
48:3e:12:51:d8:3f:c6:d9:87:7b:84:cd:52:fd:0d:
fa:4a:3c:8f:c1:01:0f:02:0b:ff:0a:52:54:31:8a:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:3C:F4:57:F8:96:EC:79:B0:13:43:53:9E:D6:B9:C1:0D:1D:36
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b8:ad:ee:02:48:33:08:80:38:e4:0c:66:f5:a4:92:0c:30:
58:77:50:d3:25:fa:cd:01:41:63:8a:59:51:31:d1:13:cf:9f:
ba:6b:e0:11:b1:c2:c2:91:dc:ac:4b:07:41:a6:3e:33:d6:13:
3c:25:7c:e8:16:b8:0a:70:e5:59:db:36:13:b1:11:ee:15:33:
1a:b9:d3:c8:e1:36:aa:fd:99:1e:27:b1:36:49:1c:45:f8:df:
fb:b3:ac:33:9b:bb:c0:14:03:f4:77:df:95:c7:96:15:30:0e:
bf:e6:a2:ba:78:d1:8d:30:d5:d2:24:a2:9b:17:0c:5c:c7:13:
11:81:6a:2d:35:54:9f:d1:b7:16:90:d3:9c:dd:7f:82:b5:4d:
72:97:64:16:e5:dd:c9:81:1d:37:1e:1f:ea:a9:50:1d:d2:15:
80:14:4b:3f:26:ee:b5:fd:2c:14:7d:64:ce:a4:0b:f9:b2:87:
63:9d:32:ae:08:54:3d:9f:4c:a5:a6:52:07:a6:15:f6:a0:85:
1c:9f:84:9e:99:c5:03:39:7f:0f:01:9b:65:87:4c:aa:c1:dc:
60:b8:78:0b:da:db:e4:1c:40:73:24:79:1f:af:7e:86:59:82:
06:a7:da:4d:d6:3a:a1:fd:17:b4:b2:cd:d2:b9:f7:ba:52:ca:
5d:94:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:01 2026 by rpki-client