Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: pDBipNQXQ5xwIyIvdXwa/U5pvtpt9JMkUudcQkm/uJI=
Subject key identifier: 21:50:4B:61:6F:FE:B6:AF:23:1E:2E:D1:C2:40:83:FD:8A:80:A1:58
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019F30DEF699DF86B7AF0AA3AA030B0FAAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 089C
Signing time: Sun 05 Jul 2026 06:02:26 +0000
Manifest this update: Sun 05 Jul 2026 06:02:26 +0000
Manifest next update: Mon 06 Jul 2026 06:02:26 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: M279fgmjVM7jbPjhZF5DkanbiT2lJXkr5vPVxJ+kZuU=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:de:f6:99:df:86:b7:af:0a:a3:aa:03:0b:0f:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jul 5 06:02:26 2026 GMT
Not After : Jul 6 06:02:26 2026 GMT
Subject: CN=21504b616ffeb6af231e2ed1c24083fd8a80a158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:60:31:22:2a:bd:6a:ef:92:75:d4:b6:b8:
44:c6:b8:48:75:2b:a9:c2:da:9a:bb:91:72:82:c5:
e4:7d:d5:0e:7d:14:b4:5e:f0:e5:2d:4b:5f:9c:40:
36:68:a5:17:81:2d:b2:b1:53:f8:57:05:5e:21:98:
0b:85:bb:81:73:11:f2:21:30:16:43:9f:29:f7:5d:
1b:d1:fe:21:5c:f5:41:31:d4:f3:54:42:e0:7c:7d:
bf:42:e8:47:44:4d:75:b4:56:8c:48:63:ca:8f:c7:
a0:2d:6a:44:bb:a2:d4:47:d1:ac:c1:1c:0a:99:9d:
a4:ae:26:ff:31:bb:64:33:8d:b4:99:4c:16:0d:4b:
7e:60:7a:90:df:86:9c:80:d7:69:d2:ae:58:9f:ac:
a6:0b:63:91:ce:3f:1c:ef:f3:6d:6c:98:a9:30:96:
d9:a2:00:ec:33:c7:10:0f:b8:9b:c7:a2:35:64:97:
9c:27:c4:54:9b:ca:d9:45:2c:c7:a8:2e:e9:c4:56:
32:21:9e:96:8c:c0:1e:76:f2:cb:66:96:c0:71:19:
a0:07:84:3e:35:ea:f3:de:51:ce:d5:8a:ab:66:bd:
27:e1:bf:41:a9:56:11:10:d3:03:0f:59:5f:ea:b9:
b9:9e:c3:6a:17:50:09:df:37:e5:ff:e7:12:0c:c9:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:4B:61:6F:FE:B6:AF:23:1E:2E:D1:C2:40:83:FD:8A:80:A1:58
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:5b:9f:fa:56:97:20:2c:93:63:74:19:76:4d:9d:73:b5:
15:80:f1:5d:2e:3e:99:a9:7e:5d:68:4e:b0:d7:49:96:84:1b:
f1:cd:00:ea:3a:ef:c1:d4:df:e9:b1:58:2f:21:be:b4:32:24:
8e:d2:27:c4:96:b0:f3:5a:5e:7e:14:06:ca:b5:e6:37:a4:50:
79:03:6a:bf:5c:1f:b5:7b:da:62:70:b8:97:5b:1f:d1:b8:25:
b6:c6:7c:1f:cd:53:08:cb:c6:9d:44:bd:cc:c5:9e:a2:1f:ad:
19:32:25:09:6e:6f:42:85:b7:eb:34:03:c4:a5:81:19:27:89:
fd:e7:09:6c:e7:03:f9:52:94:f0:be:ad:4c:4c:0e:a1:7d:3c:
ad:60:a4:ef:cb:fc:7b:e7:d6:52:f6:aa:6d:51:5f:b1:b5:30:
92:fa:7e:4d:ff:51:ee:fc:fd:fb:a7:d9:c1:00:11:31:27:74:
68:64:08:db:b5:d9:47:a4:33:86:64:78:0a:c2:5d:93:69:eb:
56:f0:01:ee:3f:3f:bd:e8:7e:fd:fa:bf:2d:75:bc:39:45:77:
7f:f5:bc:19:80:65:07:fe:d1:24:2f:17:ce:cd:62:26:b8:56:
06:8c:b6:44:cc:dc:9c:c9:68:00:7a:fd:88:4b:91:79:ee:a9:
9c:5c:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:39:12 2026 by rpki-client