Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 7ROfkLS1P4B53GmvAgG00AfgFAVyzNM0/xjUNPyT4Sg=
Subject key identifier: 25:A1:27:33:C4:F8:B0:04:3C:EB:14:B5:BD:E6:11:05:54:13:05:A3
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019D9B5128AFD4B23A6BBBEC120465967D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 07CA
Signing time: Fri 17 Apr 2026 12:01:20 +0000
Manifest this update: Fri 17 Apr 2026 12:01:20 +0000
Manifest next update: Sat 18 Apr 2026 12:01:20 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: GgIx6xQ3LXkTaCOM4NId1Z6W/NE6YJnPngPkJB8OwaI=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:28:af:d4:b2:3a:6b:bb:ec:12:04:65:96:7d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Apr 17 12:01:20 2026 GMT
Not After : Apr 18 12:01:20 2026 GMT
Subject: CN=25a12733c4f8b0043ceb14b5bde61105541305a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:21:7d:bc:58:57:e2:da:b8:4a:fe:9b:67:
77:d1:61:5f:7b:0b:a0:21:e5:c3:1a:0c:27:08:d3:
66:0d:f7:e5:76:31:fa:c0:f4:7f:3a:8f:14:4e:b9:
d2:1c:3e:6a:79:0f:da:1f:c2:14:09:75:d0:c2:d1:
46:32:76:98:2d:f3:01:17:44:79:1d:6d:9e:df:d7:
4e:6c:f7:58:77:d0:1f:4e:8c:48:76:fa:8c:95:ea:
74:06:58:15:ba:2b:69:19:42:7b:3b:7a:e4:bb:71:
e5:e2:05:13:7f:c5:5c:29:4d:81:e4:ac:d3:ce:2e:
c3:02:32:0e:ce:db:dd:02:89:13:3b:d6:92:1f:21:
f5:dd:f0:fb:17:58:b5:09:cf:15:68:52:e9:67:78:
80:5f:e0:8f:6b:75:da:40:ef:93:fa:ec:5e:f2:13:
7f:09:92:7d:54:57:2d:bc:4c:cb:41:ea:49:c8:2e:
1e:16:3e:aa:c8:12:e0:55:07:7e:2a:d7:77:ea:81:
2a:da:fe:48:0a:da:22:e2:35:c8:18:8b:be:de:cc:
1d:8e:60:94:bc:56:65:6c:b1:bc:8e:4e:54:b8:3b:
89:bc:14:9a:15:d6:f8:66:f5:30:d9:b3:7b:75:6b:
05:6a:af:b5:3d:71:c2:32:68:26:c2:28:3d:79:cc:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A1:27:33:C4:F8:B0:04:3C:EB:14:B5:BD:E6:11:05:54:13:05:A3
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1d:75:14:bc:bc:19:18:7c:6a:00:2e:d7:ad:fc:5c:05:11:
82:83:62:5d:d0:6a:d7:36:19:7e:85:42:bc:2c:0e:0e:6a:6e:
f3:f7:db:6b:29:af:2a:4b:96:aa:5c:86:ff:7a:9a:c3:43:27:
7d:ce:e2:f3:f4:6f:c7:0f:91:80:78:2e:b9:e6:90:2f:3a:17:
89:bd:21:4f:c6:80:c1:8f:81:e8:67:5a:ff:83:19:8e:f2:58:
11:92:80:fc:f7:ab:41:d1:3d:f9:43:ca:a4:5c:4f:75:ec:9a:
ba:eb:5d:31:f3:14:da:8a:9a:17:11:7f:b8:96:94:ae:c1:5f:
0b:81:35:4d:fd:a7:6d:72:ab:58:54:39:95:ab:64:44:7b:a5:
e3:53:0b:92:ff:8e:57:5d:53:a8:53:3e:49:21:e3:a6:2b:68:
41:ab:a7:b1:01:be:64:23:79:04:37:5f:c4:c0:62:42:fd:60:
01:57:80:94:50:88:b9:4f:c8:10:5a:63:0a:b4:8d:fc:fd:7e:
34:58:40:60:b2:84:14:72:1c:79:b3:bd:30:18:6d:9f:7f:ba:
48:25:ab:4d:cb:9a:09:9a:6b:2f:33:6b:b3:6c:98:d2:6a:66:
da:2b:1f:fc:ca:a4:09:a9:58:87:81:33:97:d5:1f:93:b9:3a:
b7:c8:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:12 2026 by rpki-client