Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 6aCCG1cJSsL7QSzn6buEVwy/Yn1Wth97hweWnuP46+A=
Subject key identifier: 37:A2:65:AE:43:66:37:6C:77:55:C3:AD:CB:B0:BB:E9:5B:8A:86:CC
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019FAC76E7831757B6032A3C470649D076C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 08DC
Signing time: Wed 29 Jul 2026 06:01:41 +0000
Manifest this update: Wed 29 Jul 2026 06:01:41 +0000
Manifest next update: Thu 30 Jul 2026 06:01:41 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: NX/U22rZPQ70rm6yWqfcOENGTGCl11Rj4VKTrl7HPk4=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:e7:83:17:57:b6:03:2a:3c:47:06:49:d0:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jul 29 06:01:41 2026 GMT
Not After : Jul 30 06:01:41 2026 GMT
Subject: CN=37a265ae4366376c7755c3adcbb0bbe95b8a86cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:b6:3e:94:76:9e:50:52:6d:b1:86:7d:2f:
bf:01:6d:99:7e:c8:b2:3d:25:13:ec:8d:1c:fd:db:
47:e2:3d:47:a3:ce:87:19:2a:c9:b6:5b:5e:82:a4:
bb:08:94:d3:f6:ff:c9:d8:11:a8:d3:19:7d:70:4a:
8a:b5:97:90:66:25:0b:1f:a4:fa:1f:ce:37:97:bb:
9d:49:3f:93:60:56:6f:d6:04:1b:37:a4:cf:c2:fb:
5f:2f:9c:b1:60:89:f8:ef:38:a4:e0:32:9f:fa:41:
07:84:72:10:52:f5:d2:67:72:7b:04:0d:5a:c6:78:
41:58:45:10:59:6f:38:a0:6e:2c:2b:79:d8:7d:a2:
7b:42:51:b3:de:6d:66:33:c5:12:b2:cc:70:c2:a3:
22:5b:ec:b9:4b:d1:4b:b5:a1:df:35:85:4d:fe:e0:
84:19:ab:fa:73:4b:0d:cb:2f:01:98:35:47:4a:49:
bd:01:47:97:54:85:7c:cf:d3:1b:6f:c4:9b:17:3c:
bb:d2:0b:eb:f9:08:7b:a6:ca:7a:79:51:c0:b6:58:
95:a4:fc:a4:d5:9e:b3:f5:64:88:6f:3a:84:b7:2f:
9c:35:2e:02:09:e6:03:f4:25:ab:fc:39:b1:ba:6b:
fd:a4:e8:ac:93:4c:64:f6:e2:80:46:bf:a5:6d:85:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:65:AE:43:66:37:6C:77:55:C3:AD:CB:B0:BB:E9:5B:8A:86:CC
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:78:f2:82:2f:8e:13:ad:a8:4b:93:7e:f8:59:09:39:50:40:
12:6e:28:b4:ec:6d:56:78:dc:d9:1e:ee:a7:72:70:bf:d6:98:
5e:28:32:a4:b6:06:4a:bb:3e:56:02:c1:68:79:67:30:dc:1b:
24:e8:16:26:bc:54:ba:c8:aa:28:47:12:f4:48:ed:bf:ee:0c:
e7:5c:3e:e6:97:be:90:86:7e:19:d4:4d:c7:51:63:1a:64:5c:
07:bf:31:58:07:e6:4b:d1:d4:40:eb:1e:c5:7d:8b:97:14:a4:
05:63:9d:e5:5b:fa:ad:ab:36:af:00:a2:05:d0:e1:16:a3:55:
84:db:09:91:cf:dc:ff:3c:a4:13:f3:8d:70:e1:83:73:98:51:
46:bf:20:36:fd:af:9b:6d:50:33:cd:36:60:05:b0:6c:91:22:
4e:82:d3:ab:63:66:6f:06:82:7a:ee:dc:fc:79:4a:a4:67:bd:
10:2a:9e:69:4f:a6:44:f3:7f:b1:4d:0a:5d:8d:42:14:f7:fa:
20:3b:b4:a5:5d:2e:71:3d:e5:af:14:00:71:8d:18:e8:41:f8:
2d:d9:62:3c:86:2e:f8:86:bb:6e:d4:e0:f0:80:6a:2a:ad:b2:
96:2c:25:57:b7:57:b3:a9:f4:ba:8d:9f:5b:66:9e:64:eb:8c:
7a:74:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:25:55 2026 by rpki-client