Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 0Lp/2JiYS32Q5A23qTOhVJ3BJnVzYex8+qowLCuOXBQ=
Subject key identifier: B7:E2:EE:9D:95:C7:A6:82:F9:30:E0:9C:AD:C4:63:71:1B:8F:39:46
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 01A01A8AD463BF8C7D5183798EFCF765BEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0915
Signing time: Wed 19 Aug 2026 15:01:40 +0000
Manifest this update: Wed 19 Aug 2026 15:01:40 +0000
Manifest next update: Thu 20 Aug 2026 15:01:40 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: gI6N3mBOzZLR5mAYDc/rVpjTl8gu2BtBsuJNCDJGkh4=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:8a:d4:63:bf:8c:7d:51:83:79:8e:fc:f7:65:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Aug 19 15:01:40 2026 GMT
Not After : Aug 20 15:01:40 2026 GMT
Subject: CN=b7e2ee9d95c7a682f930e09cadc463711b8f3946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:5a:f8:23:80:9e:a5:78:36:9a:bb:73:cd:
5d:0a:27:a1:80:88:34:92:23:66:88:1c:97:50:fe:
fe:a2:6e:ff:53:d1:20:53:ae:58:ca:53:fc:e4:ef:
bf:6f:fb:7b:c7:84:43:76:11:6d:da:42:be:59:72:
b8:d9:4f:5c:73:e1:9e:ef:04:ca:72:da:64:84:99:
79:93:0a:cb:b5:e5:c0:9f:04:14:c6:47:1d:5f:1e:
2f:22:17:bb:27:d9:ce:2a:1f:ed:ff:0f:2d:c9:bf:
0b:1a:26:e7:68:fa:3b:b5:51:a7:df:00:c7:bc:27:
92:01:e1:61:a0:19:01:b4:2b:ac:9a:09:8a:40:04:
a6:99:7c:6d:ee:af:2c:5a:e9:0f:a1:82:75:47:e0:
c7:01:b9:a5:4f:14:aa:d3:5d:e9:c1:64:45:18:3b:
8b:a3:a7:1d:53:03:70:fd:21:2e:45:17:bc:ae:fe:
c9:2a:33:ef:d8:b4:71:49:c8:0c:2c:87:f0:8b:a5:
31:f9:4b:84:d7:81:24:8c:72:f0:ea:ec:c8:ac:ec:
34:f1:bb:22:11:a2:ca:20:6c:b8:f8:85:5a:a6:9f:
91:ba:3d:6d:73:69:bc:cf:27:b9:e8:8c:05:f7:23:
40:91:85:dc:2a:c5:21:8b:43:24:15:7a:22:31:9a:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:EE:9D:95:C7:A6:82:F9:30:E0:9C:AD:C4:63:71:1B:8F:39:46
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:5f:b3:3c:1e:96:64:f4:04:11:2c:46:e6:af:87:b4:7c:
aa:00:c5:c2:0e:d8:a1:de:0d:1e:29:28:a4:89:1e:b0:27:e6:
b9:d8:58:36:ec:10:0f:43:35:84:06:78:6c:5b:0d:e0:f5:56:
2f:b7:55:0f:b0:fe:3a:a3:01:21:08:98:76:60:37:07:c8:53:
cd:ce:88:a6:16:89:cc:d7:5a:8d:c3:c8:ca:56:73:26:6a:47:
0a:ba:f5:1e:20:47:9c:be:6a:cd:b7:ac:8d:ad:86:1b:6d:ba:
a4:9a:da:35:8f:c0:e0:cb:7c:ef:2a:21:32:61:f6:1f:c1:4d:
8d:c7:53:2a:7e:45:23:d2:d0:8f:73:5a:15:a5:4b:9d:8a:20:
65:fc:cf:42:d9:8d:40:46:cd:53:78:a4:67:e8:2e:3f:ae:60:
b9:28:45:73:33:10:46:b8:52:38:ad:6b:2c:9b:85:a2:60:5c:
94:31:21:74:9a:c5:10:f7:07:d7:1c:be:a5:7c:90:c8:5a:b9:
d2:47:74:0c:92:0d:4e:62:00:3e:76:cb:8d:bc:d8:3f:40:49:
86:31:d7:60:35:4d:0c:60:92:99:ae:42:3c:44:43:26:65:a6:
10:93:24:17:65:1e:9c:7d:d5:6a:e2:27:a3:5c:72:79:f4:89:
46:26:86:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:15 2026 by rpki-client