Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: cp1ZgCxw9g03VBxJT+Lpdl8MvB+TxahHWODJ/J3z9IA=
Subject key identifier: 82:98:CB:6E:BA:2B:CF:27:CC:C2:D5:1E:9B:32:38:C0:D5:CA:4D:6A
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019E3D891DFB99418EAEFBDC58B6232E04F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 081E
Signing time: Tue 19 May 2026 00:00:56 +0000
Manifest this update: Tue 19 May 2026 00:00:56 +0000
Manifest next update: Wed 20 May 2026 00:00:56 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: L5JrAZduZWgpZ0wrEzQhp9lOnJ+jWN3h9qjNJ3OHL7k=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3d:89:1d:fb:99:41:8e:ae:fb:dc:58:b6:23:2e:04:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: May 19 00:00:56 2026 GMT
Not After : May 20 00:00:56 2026 GMT
Subject: CN=8298cb6eba2bcf27ccc2d51e9b3238c0d5ca4d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:2f:29:96:ea:b6:12:a1:e2:0c:ad:d6:ad:
0c:30:90:c8:aa:e4:fc:43:14:50:74:ab:80:a7:c8:
c0:40:5e:fd:d5:8d:22:5e:54:9f:fe:9f:c6:ef:ec:
84:69:cd:c8:0f:2e:ad:29:27:41:29:82:6a:7c:aa:
ad:9a:d4:58:9b:9a:aa:56:93:12:1f:8d:eb:41:45:
8a:8d:22:3e:e4:75:c2:83:6a:ba:14:14:21:6d:2a:
3b:2c:48:d6:41:b6:79:02:b2:ac:40:ec:87:25:6f:
62:ce:37:51:dd:d6:14:d6:c9:ec:7c:1c:34:e5:4f:
a9:d5:e3:42:bf:a8:45:6e:2e:56:fc:a1:87:f6:d2:
75:a6:91:ec:e0:9a:c7:6b:0d:f0:63:ff:05:d7:88:
33:91:36:6a:e5:e7:22:d6:70:e2:89:0c:51:fe:8e:
8a:8a:bc:11:ac:73:9b:71:50:49:5b:4e:c8:5b:3b:
b0:44:5b:88:d4:e8:18:c6:d1:8f:3c:c8:03:71:15:
19:70:15:31:71:c0:16:55:50:bc:32:4e:57:fb:d7:
3d:8f:66:09:26:a6:a5:2a:da:28:9c:b6:90:b6:6a:
06:4c:aa:fa:78:83:4f:c9:34:80:58:23:bd:52:66:
92:5a:f9:14:1a:fe:4c:e2:ee:ca:27:0c:ab:1d:ad:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:98:CB:6E:BA:2B:CF:27:CC:C2:D5:1E:9B:32:38:C0:D5:CA:4D:6A
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:3d:25:18:f4:17:36:85:78:d5:36:40:ae:86:1d:2d:7c:
b8:87:7a:61:a9:75:5c:a4:4e:a8:0a:00:7c:08:d0:2c:3f:41:
0a:bf:16:90:0f:ac:c4:3f:79:bf:d0:c9:21:d5:14:b6:e8:9d:
05:17:72:87:92:3d:f0:d2:8f:c3:e0:05:ad:b6:fa:0c:14:47:
ab:69:b6:c1:9b:65:da:70:76:f2:62:dc:6f:a7:ae:b5:c1:e7:
61:74:8c:46:03:0a:1c:06:a0:21:d8:57:00:f1:7d:9c:64:77:
43:63:7d:3c:e4:27:e2:ff:ba:a6:af:c3:4a:6c:cd:c8:48:13:
1f:91:54:f8:e9:aa:85:cd:b7:45:d5:82:38:dd:45:15:08:1b:
40:63:28:26:c6:25:be:e3:73:ce:f0:99:b3:69:89:d9:66:12:
a2:62:74:b2:56:91:33:b2:ec:f1:f7:ed:8b:cb:a6:f0:67:8c:
f7:f9:4c:fc:ad:bf:5e:91:fc:22:72:5f:5f:9e:66:7b:bc:fd:
ce:7a:9a:2d:da:e9:20:28:1f:92:ca:cb:e3:00:ec:36:04:0b:
fb:79:9f:5d:3c:7a:40:7c:50:41:cd:c9:c6:f0:91:86:73:65:
d6:43:bd:fa:26:f7:ff:6e:a3:1f:46:dc:6a:3f:34:5c:2d:0d:
98:39:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 10:23:52 2026 by rpki-client