Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: uzhNELLd6vkv4LqDV9BrElOghAwq4ioTRoz6aFIW4KM=
Subject key identifier: 8F:4A:D9:AE:43:2F:0D:2C:4D:06:97:83:92:72:D4:FF:05:30:2A:EF
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019CADC8172792D0E6D3869F68EFC0371CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 074F
Signing time: Mon 02 Mar 2026 09:01:37 +0000
Manifest this update: Mon 02 Mar 2026 09:01:37 +0000
Manifest next update: Tue 03 Mar 2026 09:01:37 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: uYijMyMK4ratCQTx4l1FqhcupbHFwnbzYr3wh34pLfQ=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:17:27:92:d0:e6:d3:86:9f:68:ef:c0:37:1c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Mar 2 09:01:37 2026 GMT
Not After : Mar 3 09:01:37 2026 GMT
Subject: CN=8f4ad9ae432f0d2c4d0697839272d4ff05302aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:33:0a:08:f8:7e:17:48:6f:73:7d:87:84:
52:d3:77:e0:bf:4d:a9:52:8b:5b:c3:48:69:5e:c8:
2e:6d:26:0f:20:87:52:7e:f9:ed:01:e6:12:9b:c7:
81:17:41:a0:8b:c6:7f:0f:c7:53:fe:3a:0c:8d:00:
29:97:c4:7d:09:30:0d:d4:a6:4e:70:cf:2c:d3:6b:
67:ed:4d:21:0a:5b:56:34:2b:52:f8:d4:60:6f:59:
9a:33:d0:62:85:0e:a8:23:c2:09:36:ab:0b:94:fe:
8c:c3:f9:a3:7e:de:2c:a5:15:ad:6a:79:d6:d1:56:
21:43:89:4d:f6:4b:2f:95:b3:b7:c6:57:1f:0d:37:
58:cc:61:81:73:5a:7f:d7:34:97:af:6b:1b:10:ef:
ae:0f:df:a3:ef:41:a7:23:3f:54:61:25:91:05:44:
7c:ef:5a:30:29:db:ab:3e:9a:fa:7b:25:b3:20:61:
ae:3d:17:cf:ed:bb:89:f1:f4:1b:36:43:94:ea:57:
67:10:cc:10:86:a9:2e:c8:11:ab:5b:7b:84:eb:2c:
30:b9:7b:a5:dd:0f:68:84:05:df:13:fe:c1:ae:d9:
e4:a5:13:af:19:62:e5:0c:f4:60:ca:bf:2c:cc:3b:
2c:69:a8:38:08:93:02:b9:81:8d:63:08:a1:3c:1f:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:D9:AE:43:2F:0D:2C:4D:06:97:83:92:72:D4:FF:05:30:2A:EF
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:db:c5:c1:27:e5:5d:a3:55:44:37:ac:7b:94:8e:30:49:36:
43:45:53:80:4b:10:1c:78:f4:6c:34:3c:95:be:bb:09:3d:2d:
90:57:b0:5e:fc:2e:fa:27:82:3c:cf:a9:b5:4d:98:50:e7:53:
83:14:80:5e:ff:74:29:bf:5d:7a:74:6a:39:3b:2e:d1:66:66:
b7:fb:58:43:de:8e:5d:f1:d1:a4:04:fb:e3:9b:c7:52:53:96:
61:a2:1f:25:8c:17:dc:a4:5f:e2:57:5b:15:9d:2c:74:3e:7b:
9d:bb:a3:f6:bd:fc:30:aa:0b:02:d4:27:12:4e:b1:7f:4b:b7:
05:62:17:71:7e:cd:41:26:22:dd:fe:f2:b1:05:60:12:b7:8c:
cc:de:43:d3:98:65:34:8f:8b:3f:1e:87:26:2d:c7:0b:17:77:
a8:10:a8:ec:63:94:71:52:90:37:69:a7:17:62:81:2d:17:eb:
42:a3:29:59:d2:7c:7d:00:b6:20:5d:db:75:32:5a:34:4d:30:
26:66:eb:92:c8:81:8a:94:5e:b4:b4:57:32:c2:7d:10:73:50:
cd:7a:d5:34:fe:fa:03:c2:ca:23:a0:bd:fa:15:0e:54:f2:96:
cd:d9:c4:46:fb:bb:2a:eb:9a:b6:a6:ba:fb:41:48:98:37:ac:
ed:19:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:09 2026 by rpki-client