Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: s07bxeVqpcOg82J1ZTqGxs1p4eZ3fp4jmv4h/k8kBi4=
Subject key identifier: 88:AF:04:06:DD:CB:1D:68:51:D6:E7:8A:EC:18:28:78:13:3D:2D:05
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019E20237D56006ABD6DCB6D815310D28E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 04E9
Signing time: Wed 13 May 2026 07:00:57 +0000
Manifest this update: Wed 13 May 2026 07:00:57 +0000
Manifest next update: Thu 14 May 2026 07:00:57 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: lUpcxV+9xbgkG3Gl0NTihx4HIE6BNF2KboMq0r8thD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:7d:56:00:6a:bd:6d:cb:6d:81:53:10:d2:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: May 13 07:00:57 2026 GMT
Not After : May 14 07:00:57 2026 GMT
Subject: CN=88af0406ddcb1d6851d6e78aec182878133d2d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:bf:7f:b1:09:cd:d3:e9:cc:0c:ef:12:24:
a5:3f:76:1f:9f:3f:6d:e7:6d:33:ac:69:ac:51:56:
7e:e6:80:ea:e5:17:a3:cb:59:a7:4c:f2:41:fc:30:
f4:3b:37:1f:d8:4d:60:60:04:9b:3b:03:d5:84:27:
3b:eb:e0:57:93:66:78:e3:ad:2a:44:dc:fe:fe:15:
29:36:8d:fa:86:e5:f9:8d:44:68:43:3d:cd:f6:a2:
cf:b7:42:8f:2b:e2:a2:af:37:8a:5c:3c:18:3d:02:
3e:06:7c:22:0b:a7:4f:c4:dc:ce:09:b8:a2:3d:47:
21:5b:3e:44:93:e3:80:e3:f5:91:f4:c0:62:f8:d6:
0e:5a:e2:88:66:6a:89:e9:bc:37:c9:27:09:1e:a3:
de:a5:63:36:2f:a6:6f:97:d4:1d:23:b8:51:02:f0:
93:2a:2c:f0:63:bd:df:a2:65:23:76:fa:82:6e:22:
74:af:02:30:0d:1f:46:a8:af:6e:24:68:dc:b7:8b:
b4:e8:9f:63:1c:d1:dd:d5:94:df:09:e9:2c:78:b2:
a8:e3:44:9a:fc:15:51:55:1f:00:67:26:30:67:ba:
ca:ab:07:41:b0:11:bf:1d:13:59:88:35:6a:05:2b:
18:f7:a2:df:8a:ba:ab:0c:72:39:d5:f2:3c:06:6a:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:04:06:DD:CB:1D:68:51:D6:E7:8A:EC:18:28:78:13:3D:2D:05
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f2:e3:ce:0e:24:5a:e1:fa:08:49:f3:33:72:c1:96:2c:33:
95:da:6a:15:c3:c8:7e:c2:30:43:2d:21:44:37:58:9a:49:71:
8e:0e:8b:58:f9:df:e8:dd:5f:02:62:3f:72:92:e3:2e:40:19:
52:6f:00:ef:71:19:5a:04:c6:66:8c:5c:a6:e6:b7:b7:64:bf:
cf:b4:c9:c7:65:db:5c:ef:22:99:c9:4d:08:4e:69:a5:5e:8d:
4b:28:05:fa:de:99:fb:7c:08:15:1e:dd:36:74:e1:c8:a1:06:
cb:b5:b4:a9:3d:0e:39:f3:f7:86:e6:7c:ca:96:f7:25:08:11:
a1:ac:46:c6:3e:0d:81:bb:3a:f8:7f:1d:79:7d:cd:37:55:3f:
7c:82:2c:6a:22:63:1a:ac:8c:05:6f:c6:8f:ee:ed:cc:d2:fe:
56:e8:e2:ef:32:81:90:ce:7b:8d:60:a0:b6:ae:ed:fa:b1:31:
70:77:2e:9a:28:91:ac:09:c8:ce:e3:aa:c7:09:c7:d7:c0:3e:
dc:1a:97:10:79:a1:f3:a8:38:5a:aa:78:ad:18:6a:22:ce:52:
7b:cf:8b:a6:81:1e:91:11:bc:57:e0:81:8a:ba:36:4b:8e:fd:
aa:f0:bc:a7:51:fd:ab:87:be:e2:e6:5c:bb:a2:53:85:55:31:
05:90:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:18:38 2026 by rpki-client