Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: DXQhsGtfTY02tPZdJBiPlbtMbm9HPLv9zcMIUur+DAg=
Subject key identifier: 10:A0:44:BE:9E:FB:E2:71:9F:44:C9:EE:64:51:26:D4:8C:23:72:D1
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019D2AE14835F1CDE80160DE39C09EE053CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 046A
Signing time: Thu 26 Mar 2026 16:01:40 +0000
Manifest this update: Thu 26 Mar 2026 16:01:40 +0000
Manifest next update: Fri 27 Mar 2026 16:01:40 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 9YgVvTG3eSeW3kSmUV53up9Vh3CqprzKSHqu4APAs9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:48:35:f1:cd:e8:01:60:de:39:c0:9e:e0:53:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Mar 26 16:01:40 2026 GMT
Not After : Mar 27 16:01:40 2026 GMT
Subject: CN=10a044be9efbe2719f44c9ee645126d48c2372d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3f:86:a5:a0:93:96:a5:ae:f3:9c:87:07:eb:
05:7a:64:a0:2b:da:31:9a:43:82:d7:73:f7:fd:95:
1e:98:9d:05:dc:fb:37:aa:4f:81:03:52:89:58:80:
6f:e7:cd:90:43:e9:db:48:dc:4c:5a:be:e9:99:24:
57:5a:b0:6f:0c:8e:ee:b8:9c:6b:37:22:b1:34:02:
66:27:f8:00:7c:86:e0:0c:14:24:4c:25:18:f3:ba:
70:92:d7:43:3a:25:d6:67:14:35:51:2a:d6:d3:3b:
83:47:f7:37:5e:a6:9d:14:02:58:66:75:bf:13:03:
a5:43:98:f9:9d:38:96:8d:2d:18:71:33:e8:76:42:
60:00:d7:0b:bd:4c:7e:c5:42:53:f2:db:8b:ac:4c:
23:e3:be:c0:57:68:04:17:4c:e7:cc:56:09:22:fa:
f1:bb:09:9b:2d:35:d8:e6:6f:04:a8:df:bd:1e:6b:
cb:86:2b:9d:22:f0:ad:02:6b:85:d7:92:ea:b9:98:
b7:47:f9:de:d2:ee:cd:47:8c:8f:a9:7e:f7:99:aa:
a0:11:c5:ed:cb:9c:af:b1:c9:9f:89:e9:83:e2:1f:
b6:9c:9e:3a:5a:d9:61:db:32:c7:1c:e7:a0:94:b5:
16:f6:3c:22:bc:50:6f:54:52:ed:41:5f:6e:31:52:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:44:BE:9E:FB:E2:71:9F:44:C9:EE:64:51:26:D4:8C:23:72:D1
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:37:b2:dc:a2:ed:41:7c:76:a7:e7:a6:e9:90:78:a5:b5:ba:
7c:0c:21:d7:32:4f:aa:96:b9:d2:22:0d:82:64:9a:16:fb:32:
59:b7:91:49:54:6a:4e:40:93:9c:31:df:d3:7e:4d:33:b6:c8:
90:53:fa:87:ca:28:41:ee:0a:94:dc:3e:22:c9:28:fb:92:ff:
08:c5:77:6d:4a:6d:8c:1e:71:02:e1:6a:96:b8:cc:be:86:3c:
ea:1e:71:58:3e:79:4f:a8:92:60:0e:27:9f:71:fc:50:0f:91:
1a:97:4b:09:f9:38:57:05:3c:85:52:ff:4d:92:3d:ba:a9:e7:
dd:a6:51:10:4b:50:82:96:b4:6e:59:7e:2c:38:98:ed:e7:44:
e7:bb:f8:22:3d:50:83:00:2a:ea:97:f4:e5:a3:c0:bb:43:50:
29:10:9a:fe:e1:36:3b:64:cb:87:89:9d:ab:6c:bc:32:e8:3a:
58:73:42:8a:a9:6b:ac:f5:3c:8c:f7:ce:37:d7:51:87:38:33:
ca:ce:2c:7a:62:bc:ce:96:7a:db:32:77:00:56:e9:d0:52:33:
77:31:f3:9c:5e:44:65:c1:d8:fc:32:89:5a:e9:b2:bb:bb:99:
4e:9d:5a:32:39:47:62:a2:db:43:f7:32:69:f2:25:69:d0:cf:
4b:12:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:04 2026 by rpki-client