Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: 2BXkkitEQ40XI7zqOVbnUJZwTxkECtGBx71fxA2wVhM=
Subject key identifier: A6:7C:8A:DA:90:36:95:2C:08:DD:16:A5:21:A6:7D:A8:51:11:64:B8
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019F94DBB577DCFBC21E43B69EF4E5D7AF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 05AA
Signing time: Fri 24 Jul 2026 16:00:54 +0000
Manifest this update: Fri 24 Jul 2026 16:00:54 +0000
Manifest next update: Sat 25 Jul 2026 16:00:54 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 4ZEjnA1ZGoVV9u2WWsFqMRbwSVCtAH+LKhhqbYPn9qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:b5:77:dc:fb:c2:1e:43:b6:9e:f4:e5:d7:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jul 24 16:00:54 2026 GMT
Not After : Jul 25 16:00:54 2026 GMT
Subject: CN=a67c8ada9036952c08dd16a521a67da8511164b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:03:4b:7c:64:b1:54:35:51:4d:04:e8:5c:
32:30:6c:4b:1d:0b:ea:63:40:aa:72:cb:2c:fd:5e:
11:73:fc:27:c1:23:8c:03:f5:c3:72:8e:38:34:31:
ef:dc:bb:a4:59:84:89:b7:86:a6:ff:32:cd:68:30:
55:6b:b5:83:13:53:18:62:d4:ff:7f:d3:62:d8:6d:
a1:89:c5:95:5d:ca:41:7f:01:03:5b:ff:f5:e6:4d:
73:e6:bb:86:0c:34:b0:eb:f8:96:10:16:af:68:f0:
b7:14:2e:e1:ea:ac:42:52:1a:83:ca:8d:97:03:48:
80:ff:d1:aa:8f:cf:5b:4f:d6:33:74:e2:46:6f:1b:
46:a9:f3:e3:30:d1:5d:f4:c2:a8:af:2d:fb:01:57:
f1:6e:3b:eb:23:9d:cd:a6:3e:b9:92:d6:83:ee:f7:
24:48:fa:8e:00:f6:75:eb:0e:e6:33:fc:1c:40:a7:
69:2c:93:0b:4b:5d:4d:12:25:83:ac:b3:2e:c2:50:
66:8f:13:c6:f6:36:10:bc:8b:d7:80:f8:61:c6:61:
37:34:d7:2a:29:91:47:a0:5b:d0:2c:4d:d3:12:a1:
4c:2e:1d:06:dc:b3:88:71:ad:ea:b0:90:bf:87:97:
2b:00:9c:81:fa:15:2c:e9:7b:8c:6f:9f:78:5b:0c:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:8A:DA:90:36:95:2C:08:DD:16:A5:21:A6:7D:A8:51:11:64:B8
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9b:f3:44:e2:5a:2c:37:8c:e4:7f:9d:00:22:13:51:54:d6:
ca:5f:76:49:fe:cb:93:4e:55:04:20:1d:7f:9a:5b:c8:60:0e:
03:c4:e1:28:cb:10:fe:65:55:c8:33:3e:e2:17:90:c7:e7:9b:
4d:39:92:b2:3c:e7:5b:3f:65:a7:d3:f4:77:92:d8:79:87:3e:
c8:78:6b:b0:f2:84:65:fb:54:b1:8f:f9:a2:97:63:70:c7:73:
58:d4:f1:0d:76:2d:06:19:c3:d4:d7:c5:08:38:aa:55:6c:86:
49:36:63:19:c4:41:9c:94:8f:93:13:1f:f2:f3:7c:37:de:8b:
18:95:c9:46:37:84:f0:ac:25:3e:28:f7:32:e6:bc:38:4d:76:
5c:32:28:6a:b5:1f:9e:94:ea:44:d3:b2:56:21:13:27:d6:04:
a8:f2:b8:dd:b8:99:8e:fd:47:de:e6:e4:b1:71:3a:d8:25:d0:
df:76:16:bb:0a:29:79:ba:83:ee:f0:ee:f5:2c:c2:b1:da:6e:
13:04:f0:7f:12:11:fb:36:3f:1d:5c:3a:15:ec:70:88:8e:7e:
e6:82:97:d5:fa:25:5d:c4:71:2e:1b:7f:ba:88:c2:0e:af:bf:
60:e4:06:6e:9d:a7:1d:a6:b5:a0:9b:44:20:af:72:eb:bd:c6:
8f:0e:40:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U27V33PvCHkO2nvTl16+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3
MmI1NzgwHhcNMjYwNzI0MTYwMDU0WhcNMjYwNzI1MTYwMDU0WjAzMTEwLwYDVQQD
EyhhNjdjOGFkYTkwMzY5NTJjMDhkZDE2YTUyMWE2N2RhODUxMTE2NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4sDS3xksVQ1UU0E6FwyMGxLHQvq
Y0Cqcsss/V4Rc/wnwSOMA/XDco44NDHv3LukWYSJt4am/zLNaDBVa7WDE1MYYtT/
f9Ni2G2hicWVXcpBfwEDW//15k1z5ruGDDSw6/iWEBavaPC3FC7h6qxCUhqDyo2X
A0iA/9Gqj89bT9YzdOJGbxtGqfPjMNFd9MKory37AVfxbjvrI53Npj65ktaD7vck
SPqOAPZ16w7mM/wcQKdpLJMLS11NEiWDrLMuwlBmjxPG9jYQvIvXgPhhxmE3NNcq
KZFHoFvQLE3TEqFMLh0G3LOIca3qsJC/h5crAJyB+hUs6XuMb594WwwwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ8itqQNpUsCN0WpSGmfahREWS4MB8GA1UdIwQY
MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt
MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1
LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapvzROJa
LDeM5H+dACITUVTWyl92Sf7Lk05VBCAdf5pbyGAOA8ThKMsQ/mVVyDM+4heQx+eb
TTmSsjznWz9lp9P0d5LYeYc+yHhrsPKEZftUsY/5opdjcMdzWNTxDXYtBhnD1NfF
CDiqVWyGSTZjGcRBnJSPkxMf8vN8N96LGJXJRjeE8KwlPij3Mua8OE12XDIoarUf
npTqRNOyViETJ9YEqPK43biZjv1H3ubksXE62CXQ33YWuwopebqD7vDu9SzCsdpu
EwTwfxIR+zY/HVw6FexwiI5+5oKX1folXcRxLht/uojCDq+/YOQGbp2nHaa1oJtE
IK9y673Gjw5ACA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:30 2026 by rpki-client