Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: znCdV5Ok2ahD4f5XMS4uwJxsl4/LEXJLKUyVLBhKoVM=
Subject key identifier: D8:6E:64:AB:FD:02:00:46:89:C2:94:69:98:F6:2D:4C:33:1E:97:4D
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019EC2CA3691BA01F8C609A43E2D91CF2C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0863
Signing time: Sat 13 Jun 2026 21:01:32 +0000
Manifest this update: Sat 13 Jun 2026 21:01:32 +0000
Manifest next update: Sun 14 Jun 2026 21:01:32 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: zLi4nXu4Ko3GgSRVSsxNkls8EyDOkMvd1GdrF/mF6D0=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:36:91:ba:01:f8:c6:09:a4:3e:2d:91:cf:2c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jun 13 21:01:32 2026 GMT
Not After : Jun 14 21:01:32 2026 GMT
Subject: CN=d86e64abfd02004689c2946998f62d4c331e974d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:bf:fc:97:16:42:dc:e8:10:0e:ea:11:0a:
3a:f3:53:59:c0:ba:1a:77:90:14:8c:de:1c:f2:02:
3a:9a:1e:c5:78:de:11:40:7a:63:d8:5f:d8:7b:ed:
c6:9a:e0:1f:55:7c:60:d3:64:aa:84:5d:77:15:a4:
8e:4a:de:f5:47:8f:08:0c:a0:38:0d:12:d0:00:0d:
08:9c:89:dd:41:7f:f6:d0:38:e3:4e:87:4b:d9:e7:
f1:58:59:a9:b0:45:a9:54:74:d2:07:72:15:1a:d5:
73:3c:57:06:8e:09:d2:1d:a5:47:60:a8:3d:cd:45:
0e:52:b2:8c:2f:a7:bf:c6:56:2f:de:14:9e:e7:0c:
ae:ce:e9:20:06:84:1c:2e:b1:bb:b4:b7:06:3d:5f:
04:73:23:38:e1:15:3a:66:7d:89:39:da:74:82:da:
19:ff:87:5c:0f:86:75:9b:1f:1c:8e:9a:aa:a4:4e:
e6:28:0d:77:05:a0:4a:9f:3c:49:88:41:18:a8:f3:
71:32:7b:35:9a:b5:0e:a6:f1:f1:19:43:3f:92:e0:
34:bb:79:01:e8:ae:58:34:fa:4a:dc:74:22:09:cb:
2e:5b:56:bd:1b:ef:a3:17:59:b5:e4:19:b9:53:67:
3f:61:50:d3:bf:f2:03:05:8c:55:3c:d7:ef:da:f1:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:64:AB:FD:02:00:46:89:C2:94:69:98:F6:2D:4C:33:1E:97:4D
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:29:29:e0:a5:b5:c0:9c:c0:1f:58:d6:19:68:c5:90:f5:99:
a2:85:c5:8b:8e:35:f3:bc:f8:a8:63:6e:f0:8b:22:32:70:78:
87:1c:12:13:c4:a8:c9:1f:4e:28:52:dd:c4:9c:be:02:34:e0:
53:ea:24:37:dd:d7:96:37:7d:bc:d4:5d:04:fd:01:8f:62:54:
4c:ca:77:40:e0:fe:7c:24:62:91:47:c1:a2:f1:b7:da:6d:60:
c0:ca:bb:91:56:b8:63:9c:8d:b4:05:38:0b:a5:a0:54:78:11:
59:1e:64:0b:37:ef:81:f9:a8:8b:e0:02:5b:97:33:0e:d0:25:
5f:61:51:f9:8b:ce:c2:77:d6:6b:a5:72:fc:78:11:d6:d6:1b:
ba:d3:f5:c6:f7:5b:22:4b:e9:44:44:8c:3a:c9:0f:a8:4f:9c:
87:07:0d:90:c1:40:82:6f:d4:cd:55:6a:7c:ea:8f:9f:49:78:
d1:26:6b:c5:ae:46:83:b6:e6:d9:bd:5b:14:71:f2:72:05:af:
a2:27:37:65:7b:3e:7f:1d:a8:9f:35:82:a3:d8:84:cf:53:ba:
e4:ff:74:0c:39:9c:c1:b3:3c:9c:f6:3d:9b:7d:a7:a0:4f:f8:
53:84:af:52:39:b3:6c:ce:36:40:52:a6:3a:9b:47:da:f9:e4:
ec:91:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:08 2026 by rpki-client