Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: rxascLk29ASBYfIkoCnV/H4bmTlAzyv12IlcsVBvQf0=
Subject key identifier: AE:7C:76:26:68:94:BF:FC:95:A9:EE:D6:C8:52:D6:64:6E:ED:69:63
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 01A1268BE968590139201B29C2E0F2EBE06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 067A
Signing time: Sat 10 Oct 2026 16:01:05 +0000
Manifest this update: Sat 10 Oct 2026 16:01:05 +0000
Manifest next update: Sun 11 Oct 2026 16:01:05 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: ooC2Nob9pOVpngjrLrWAwR3xpq2VvCduyHfScLkpCb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8b:e9:68:59:01:39:20:1b:29:c2:e0:f2:eb:e0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Oct 10 16:01:05 2026 GMT
Not After : Oct 11 16:01:05 2026 GMT
Subject: CN=ae7c76266894bffc95a9eed6c852d6646eed6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:64:2a:fd:19:12:f1:78:7b:dc:37:c3:61:
0f:9c:64:2c:f9:3a:01:64:49:ce:2d:73:13:c5:45:
03:11:5f:85:7b:12:4c:f9:cf:05:bb:53:b8:8c:55:
02:23:e7:91:60:b1:74:85:6f:75:49:8c:5c:9d:41:
ca:30:16:8d:5f:fd:91:05:41:8a:b9:b1:e1:de:79:
02:55:1e:b1:6c:44:31:91:c5:34:c9:c7:73:c6:93:
e5:ff:7c:13:35:a4:44:6d:e9:ad:2e:b9:b3:e9:67:
b5:9c:dc:b2:14:1a:30:98:81:69:66:f1:90:f7:59:
c1:9b:31:b3:2a:da:8b:3e:8d:6d:ba:0a:db:d4:9e:
18:72:1e:73:cc:4f:3d:f3:9f:21:71:77:65:7b:2b:
63:80:e9:2e:35:0e:33:46:5c:de:d2:71:b7:f0:71:
53:69:03:cf:2d:53:f7:e8:15:cf:35:b3:33:47:00:
96:6d:ec:98:d0:08:d4:88:fa:00:7e:c9:fc:64:cb:
fe:92:57:81:73:00:09:2f:b8:5c:67:f9:a8:fe:6c:
c7:50:13:d9:5d:cf:02:55:50:55:25:c4:ee:d6:df:
3e:9b:30:61:a5:37:b4:49:ed:f2:ce:66:13:56:96:
2d:16:a6:c8:4a:17:93:4a:67:6f:3b:be:9b:93:bc:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:76:26:68:94:BF:FC:95:A9:EE:D6:C8:52:D6:64:6E:ED:69:63
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:c9:2f:f8:e0:b1:5f:0e:62:22:cd:a5:34:94:f3:c3:f1:
63:31:1d:53:c9:49:3e:ad:68:cf:66:cf:6e:10:17:fc:43:e2:
59:92:2e:61:7c:54:db:1b:9a:db:4a:e8:dc:09:0c:77:ab:91:
e0:73:80:09:9b:e1:70:d2:27:a6:a2:2a:f0:67:33:3c:a4:d6:
5c:0a:40:d0:bf:b2:0b:ba:c9:6d:4e:bf:0f:f2:04:e0:4b:77:
89:33:38:f9:e2:10:43:e6:d6:f7:12:de:c4:b4:e4:37:8c:11:
15:bb:09:ba:b3:72:e4:72:ae:6f:95:68:c0:a2:72:d1:3a:0a:
a8:b0:e6:22:dd:c9:0e:58:a9:39:da:5f:7e:8c:61:7b:a6:8d:
46:01:9a:82:b9:28:e1:89:ac:72:9d:53:f5:1b:7f:04:14:60:
a8:fa:90:07:09:60:d4:f0:89:ae:07:72:12:09:30:b2:82:e7:
d2:6a:9b:b3:d6:84:b6:36:22:1c:70:00:43:cf:21:c4:e0:04:
49:d5:53:3a:50:7b:8f:aa:d4:02:97:a4:64:55:17:c2:e7:78:
3f:bb:7f:a6:2a:0e:89:58:55:3a:ce:58:ca:74:73:65:03:96:
9b:2e:1d:55:b6:c3:cb:b6:4c:29:49:6a:24:ce:82:75:3f:24:
ad:85:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:35:17 2026 by rpki-client