Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: r0/aiGtR2BI+qgBOvhMeo1jebOXw3cszJQAbM0uRsas=
Subject key identifier: B2:48:4E:8A:B6:D2:0F:7A:38:B1:BC:02:03:7E:3E:35:04:97:D5:9B
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 019F905A75E9CE0DC5C5DF54397DDE5284F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 1303
Signing time: Thu 23 Jul 2026 19:01:15 +0000
Manifest this update: Thu 23 Jul 2026 19:01:15 +0000
Manifest next update: Fri 24 Jul 2026 19:01:15 +0000
Files and hashes: 1: KSbA9cQaQrEqqJ9Vk5u4pl14-MA.roa (hash: xWE05jJQHZZKnurMgtEYX+1igOzBte1K+N47A2wHl2g=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: uANdPBfacSMhIHbsW4qREJtD1sJllgAzlpOnNatCU5I=)
3: iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa (hash: /XuM1/LN4ogIjwLDnxCjibzUafyv79hq4kOMwib5+d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:75:e9:ce:0d:c5:c5:df:54:39:7d:de:52:84:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Jul 23 19:01:15 2026 GMT
Not After : Jul 24 19:01:15 2026 GMT
Subject: CN=b2484e8ab6d20f7a38b1bc02037e3e350497d59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:75:37:e9:ec:f4:90:c3:35:8a:9e:2c:a5:
00:0f:54:ac:27:df:df:75:fd:27:5f:e3:68:2f:dc:
ec:c2:6f:fb:36:d7:dd:ac:ff:36:93:84:d6:79:68:
72:26:20:70:d0:5e:44:76:c2:c3:2c:16:74:7d:dc:
3a:32:d7:7d:0f:5f:a8:28:4f:8a:cc:b4:ca:c0:ed:
2a:c3:78:84:66:bd:65:5f:cf:f0:3c:82:76:54:f3:
86:f6:85:ea:45:cf:a0:4a:05:01:d7:3b:60:1a:61:
8a:21:47:9a:1f:2a:e4:65:65:f4:34:c0:98:3d:d3:
43:89:76:d1:e6:e6:08:6a:af:e5:5c:1a:af:8a:68:
7f:e0:ee:eb:2b:d2:96:08:cb:97:62:22:72:40:de:
6e:52:57:c3:aa:b8:53:1b:a2:8a:f1:a7:9d:4d:64:
af:80:f1:8a:1f:a5:4d:ba:98:2a:e0:cb:d7:bb:62:
2e:0d:7b:f7:ea:7a:02:7e:e8:a8:64:5f:3e:3d:ea:
45:5e:97:e6:29:cb:cc:60:23:98:a0:ee:52:35:00:
3a:3c:e1:50:99:41:55:d0:8f:54:7c:67:8b:e3:05:
d8:c0:ec:53:fa:cf:1c:bd:47:55:ad:2d:c3:cf:33:
69:a8:24:95:05:39:4d:f8:d9:63:a1:bd:68:85:ba:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:4E:8A:B6:D2:0F:7A:38:B1:BC:02:03:7E:3E:35:04:97:D5:9B
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ec:c1:52:7b:eb:41:4b:3f:af:e7:6a:a2:88:b4:4e:ba:86:
1c:6b:cf:75:df:a4:eb:ff:2e:47:74:de:bd:cc:91:f9:3f:5e:
5a:0b:9d:f4:cd:2a:80:fd:e4:dd:fe:a5:47:e4:23:95:c6:b6:
cf:08:5d:f5:45:3a:a5:a5:e1:6c:1d:35:d8:4a:42:7d:0e:c3:
e7:8f:a1:6f:4b:b5:43:55:11:5f:b2:89:b8:f3:32:a3:f7:b7:
90:99:93:9d:38:f9:60:09:32:2a:6d:08:aa:e7:dc:6d:79:01:
3d:05:70:e0:73:7d:d9:be:49:1e:fa:61:75:b1:60:3a:80:c1:
23:8f:86:23:a0:56:aa:22:e4:6a:3c:dc:80:5b:ad:42:1b:2f:
9b:aa:0e:5b:49:ac:f8:cd:7e:07:1a:05:00:02:38:c2:75:d7:
47:9a:19:23:e0:ff:3f:3a:dd:e6:b8:fb:4d:04:2f:b0:be:15:
49:42:4c:a7:16:e7:6a:c9:b8:1c:f2:d9:21:aa:58:f3:4b:67:
3f:bb:be:31:09:49:d9:d5:72:40:1c:0d:ef:e9:bf:8c:b6:ce:
53:31:c7:78:0e:ed:0e:f9:23:2f:9d:e0:00:ec:f6:4f:f0:4a:
03:97:53:f1:12:79:4c:67:32:52:e0:95:7c:f6:0b:80:70:a8:
3c:c6:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:24 2026 by rpki-client