Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: tdqREc/HtZEBC/6rXZvJ0OoSC4lfkuHwSxyPRLOqzyA=
Subject key identifier: 3E:A7:98:57:FE:9C:39:6A:46:EE:37:CB:89:5A:9B:40:C5:C3:CB:9D
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 01A17FD066AB321A1E83AB9B417DBA93D46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 09CE
Signing time: Wed 28 Oct 2026 00:02:06 +0000
Manifest this update: Wed 28 Oct 2026 00:02:06 +0000
Manifest next update: Thu 29 Oct 2026 00:02:06 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: izrSTeFHdRBahNB2b9fDb4TMPdyzNS0no6VSRfDGuho=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 00:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:66:ab:32:1a:1e:83:ab:9b:41:7d:ba:93:d4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Oct 28 00:02:06 2026 GMT
Not After : Oct 29 00:02:06 2026 GMT
Subject: CN=3ea79857fe9c396a46ee37cb895a9b40c5c3cb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:1f:4f:92:a1:55:f8:f6:89:dc:ae:3f:1c:
0e:a3:5c:dc:0b:b6:8f:e0:6d:36:b4:77:f6:38:2c:
03:09:e4:de:50:af:50:54:e6:fd:35:70:8a:ec:ba:
46:a9:e4:8d:87:f7:7d:7e:78:ec:78:df:02:1e:f6:
e6:25:bf:b8:c6:2e:56:0d:fc:4c:c2:f7:7e:6f:f2:
f9:58:af:6f:19:b6:ab:68:60:1c:b4:62:ce:73:50:
b1:ab:32:6e:cc:b0:e5:57:19:24:41:6c:90:68:89:
6c:66:d2:87:5c:13:77:de:fd:8b:75:22:d2:7e:4d:
10:34:10:2f:f2:06:a7:b1:b4:ec:a3:14:51:0a:65:
8d:4d:81:d0:88:b7:8a:77:ab:8e:12:37:dc:34:7b:
71:24:10:7c:a7:f3:12:64:92:ca:f8:40:88:6e:e4:
48:89:0c:f2:df:0a:56:b1:93:c2:5f:29:56:93:0f:
03:b3:1f:73:03:fe:ce:76:77:46:ae:9a:98:88:c3:
8b:b9:3b:2f:7f:65:f0:1c:cc:2a:fd:07:f9:d1:cc:
63:4a:0d:79:8a:5b:ae:9d:37:0f:0e:d1:09:0f:27:
8d:fa:87:ff:80:3a:00:38:e8:8e:4f:ee:13:e6:cc:
43:40:82:88:69:ff:50:61:74:15:06:b2:b9:e7:82:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:98:57:FE:9C:39:6A:46:EE:37:CB:89:5A:9B:40:C5:C3:CB:9D
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:4b:4c:43:fd:a1:27:2f:24:c6:af:44:7f:ee:15:a6:23:
c3:67:82:96:05:f9:47:24:48:c0:ac:16:43:af:ac:97:96:a1:
98:06:d2:82:37:f8:a5:bb:d5:fd:4f:a7:3c:3d:d5:92:8c:3c:
04:a1:43:22:03:13:e8:97:fe:47:b1:c9:5c:68:45:1d:52:26:
ca:70:c5:7f:04:73:55:00:d9:a0:8c:26:90:9b:ed:e9:07:5d:
ee:51:7f:74:b7:94:d2:c1:c9:67:8e:aa:f5:35:57:32:68:b7:
b0:66:35:b3:03:93:1f:56:bc:61:b1:67:b1:b6:88:b8:4f:6f:
e1:1a:76:68:c5:e2:ea:38:0a:da:3d:d8:6f:8b:29:bd:fe:1e:
19:f6:89:82:13:44:9c:b4:91:c7:b8:36:d6:0c:88:e1:65:f7:
67:32:46:53:d1:53:42:82:e1:44:6c:da:20:95:15:b3:cc:41:
1e:91:81:72:9d:e6:8e:ee:4a:03:dd:72:d4:d7:6e:d9:e2:93:
8b:92:1f:1f:2b:1f:3e:7b:29:fe:cc:ca:99:71:17:02:85:f4:
aa:dc:e0:ce:12:f8:8c:29:95:4a:a3:b4:26:a2:4e:ff:2e:a0:
89:5d:73:19:19:36:4c:9d:e3:b2:30:44:af:00:80:b3:2d:e8:
37:8e:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:09:09 2026 by rpki-client