Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 1VT8zq3pdy+nxrFB3leW4URkO2bE0o+FIiNCwPXd9oU=
Subject key identifier: 9C:70:14:70:3F:B6:A1:AD:9F:6B:BC:E9:37:24:CF:A4:BE:6F:0C:C8
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019D38D3A37A8775F02140F9513528D1B316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0797
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: KnYt40bq+skINMt8c24RjE+NVuLkT3tpBVFDHzlVSsM=)
3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a3:7a:87:75:f0:21:40:f9:51:35:28:d1:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=9c7014703fb6a1ad9f6bbce93724cfa4be6f0cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:4f:f0:4c:f5:f4:43:71:cb:2d:93:57:f2:
00:b5:30:68:00:b9:50:e4:64:4e:1b:d8:8f:5d:e8:
29:ee:e7:5c:d8:94:96:02:42:37:a5:d7:c8:3c:e7:
62:90:fe:5f:54:6b:d4:27:dc:d0:a6:4f:c9:7d:30:
4e:02:f5:35:3e:b3:0d:b4:72:f1:fe:24:87:c2:71:
c9:56:ee:1c:32:f5:57:1b:49:c8:fd:21:4b:d5:83:
41:6d:b3:ba:57:dd:94:5a:27:97:d8:b7:0d:e9:13:
71:05:e1:9b:48:c1:e2:f0:17:39:86:37:61:a2:0a:
38:da:88:88:e6:28:69:a6:29:a0:21:6c:7c:dd:c8:
85:dc:42:35:da:99:72:8f:64:49:4e:ec:0c:a0:86:
fb:a7:3f:bc:ef:8f:cd:ba:17:fc:33:bb:7b:21:6b:
85:52:32:9f:1d:8c:1f:78:c8:00:03:a7:fd:92:25:
a2:d0:64:d7:36:4c:e8:bb:fe:f8:6e:2f:2c:52:ba:
1a:c4:cb:fc:b3:9d:02:7a:31:3f:46:a7:6b:5c:76:
75:6f:ee:c4:a5:69:3a:45:f1:0f:e7:70:59:2a:5f:
a9:54:26:76:a6:c7:e5:ad:a7:3e:65:f2:e6:a8:58:
fc:46:eb:18:5e:9b:ab:cf:91:8b:6d:f7:3d:47:d2:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:14:70:3F:B6:A1:AD:9F:6B:BC:E9:37:24:CF:A4:BE:6F:0C:C8
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ef:a3:55:65:56:95:1f:2b:cd:7a:28:4b:0e:25:d9:2b:34:
2d:c3:eb:d2:0a:28:e3:6e:9d:0d:70:75:13:87:26:cb:26:42:
da:9e:fb:28:df:92:45:a1:38:94:77:f3:5f:1a:de:89:bd:3b:
67:16:c4:10:73:4a:69:53:15:1e:8c:dc:b3:b9:0e:5c:96:f0:
a6:02:08:30:44:34:f9:48:36:a2:48:a3:a7:8c:c2:17:c5:62:
3e:5e:32:00:40:73:34:99:63:2b:70:25:b5:8f:8c:56:8d:ef:
e2:1a:cb:13:b7:95:9a:86:21:78:d1:37:64:94:7c:06:23:a5:
22:49:96:25:f2:85:9a:9e:cb:32:91:bc:64:2d:67:fd:5f:5f:
1d:c4:01:de:93:a0:ef:0f:49:6a:12:47:33:7b:dc:b5:23:49:
5d:c2:8d:d7:a4:96:c1:2e:b2:d4:f7:ec:b5:ce:2c:78:04:7f:
dd:95:47:22:02:c3:86:33:8e:e0:fe:93:12:90:91:05:fb:a5:
a5:43:42:30:41:30:80:c4:0f:9b:80:94:2d:17:38:b2:45:90:
86:6c:4e:bb:19:0b:28:6f:e6:c6:1e:6e:b8:1a:c6:4f:4d:dc:
ec:a0:50:52:1f:92:b4:1d:8a:cb:34:bf:d0:11:69:cd:81:c0:
29:fc:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:18 2026 by rpki-client