Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: O1vJMA1ds3UTUzFqEZnDuGymLjiEZagYoL9CGu1yDhc=
Subject key identifier: 05:76:96:15:32:83:69:CA:DA:F1:91:2F:E9:90:B1:93:9B:7D:54:34
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 01A0E550D539BE0692115DA72A6FCAF4B9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 097E
Signing time: Mon 28 Sep 2026 00:01:14 +0000
Manifest this update: Mon 28 Sep 2026 00:01:14 +0000
Manifest next update: Tue 29 Sep 2026 00:01:14 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: +WJZd6rdGM7jFiy1akZG18nF2nMOIoD72OxICb96/SA=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:50:d5:39:be:06:92:11:5d:a7:2a:6f:ca:f4:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Sep 28 00:01:14 2026 GMT
Not After : Sep 29 00:01:14 2026 GMT
Subject: CN=05769615328369cadaf1912fe990b1939b7d5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:76:23:a5:7d:9b:0c:ec:62:6d:39:96:4e:
a8:67:53:33:1b:88:29:be:51:27:bc:4c:18:f9:89:
d6:3f:98:e6:c1:40:1a:94:b4:8f:16:9f:24:3d:4f:
1c:cf:2d:40:af:87:cd:bc:34:4b:0e:a8:c8:36:af:
0a:a0:3b:82:5a:62:4b:dc:2c:c2:f5:a1:f5:ef:7c:
9c:7a:d8:c0:ea:3a:f0:ab:bd:05:6f:2e:4a:fd:ab:
f5:3c:e9:1e:fb:48:07:5f:28:2f:f1:07:4e:40:97:
5e:fb:26:67:ad:d0:da:21:8a:64:0e:9d:e0:44:85:
ae:78:37:bc:b6:1d:d4:c0:5f:86:12:c7:8a:fe:55:
f3:86:b1:86:9d:0f:31:84:ff:b2:da:d0:21:3f:ae:
6c:d9:8c:70:99:4e:45:b6:b9:4c:38:0e:41:b3:2c:
82:02:d7:f3:4f:81:bb:47:3b:7d:51:b6:bd:69:5c:
a2:ab:cd:1e:ec:ac:8e:43:0c:ff:17:d6:be:ca:21:
d5:a3:7d:ce:0d:5c:6b:e9:d0:a2:c3:6f:04:8d:cf:
00:e2:af:c7:73:31:d1:c5:91:6a:b0:8e:47:c1:79:
85:9f:24:01:6d:d2:a6:cf:3f:1f:f7:d0:13:9d:05:
e9:43:8a:15:9a:42:22:6d:54:83:a6:d1:18:5b:08:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:96:15:32:83:69:CA:DA:F1:91:2F:E9:90:B1:93:9B:7D:54:34
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d2:92:44:53:78:bb:c7:ef:54:ee:ca:2d:6d:db:e9:d2:26:
d8:e4:56:4b:87:d2:dd:69:0c:e2:a0:64:e5:f2:8f:02:e4:f3:
d5:f8:78:f3:55:ea:2b:47:e9:70:f5:8b:11:10:f3:3d:05:b9:
f0:67:60:ff:39:85:51:d8:c8:54:52:87:8c:b6:66:a5:b3:42:
dc:a8:48:96:73:7f:86:4a:1c:40:f3:0c:e6:5f:c1:e4:e4:ae:
06:36:b2:9b:02:36:1b:de:68:04:d5:da:ac:d3:bd:f7:5b:75:
8c:4b:dc:f5:7e:1f:66:0f:73:f5:e5:8e:b8:1e:29:d7:b2:67:
fd:ca:07:7a:d9:50:0b:9d:80:fe:7f:4f:07:f5:c6:a6:b3:26:
77:5a:2f:df:9d:4d:bf:be:bb:64:81:91:38:fe:59:15:e9:da:
85:db:e8:3d:bd:5e:f9:49:31:a7:65:d0:61:81:d9:4c:cc:ac:
af:f2:17:53:c7:07:6c:f5:e2:20:d8:b7:e9:54:90:00:3e:06:
04:94:4b:79:0a:0d:0a:c1:2a:99:fa:b8:d0:45:80:74:ed:73:
46:c4:ad:ff:a8:fb:d0:99:db:75:bf:7c:87:3e:84:39:e4:b7:
ad:0b:50:69:a3:5e:78:1b:ae:d0:d9:cf:84:cb:ed:87:38:f4:
d5:6c:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:59:01 2026 by rpki-client