Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: h5SDM3DkpL3J44wmUflnQGBWTBR3Q5QxFhSangSihts=
Subject key identifier: D0:52:20:C6:5D:66:F8:80:FE:06:E0:B3:F0:04:3D:18:1C:18:09:A2
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019D9AE27CA7275F077F31A394DDB05898AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 04A4
Signing time: Fri 17 Apr 2026 10:00:27 +0000
Manifest this update: Fri 17 Apr 2026 10:00:27 +0000
Manifest next update: Sat 18 Apr 2026 10:00:27 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: wRC+K3b8KQngoU/gsGiy1Qt5bl9lIDyuXKDbUaZ8V6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7c:a7:27:5f:07:7f:31:a3:94:dd:b0:58:98:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Apr 17 10:00:27 2026 GMT
Not After : Apr 18 10:00:27 2026 GMT
Subject: CN=d05220c65d66f880fe06e0b3f0043d181c1809a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:f0:12:42:cd:9f:50:12:aa:fd:c3:78:53:
c8:d6:57:bd:d6:23:5d:35:51:15:3a:9b:63:cf:df:
be:ea:70:54:5e:31:99:2c:4a:6b:2d:fc:2c:0c:04:
5e:ea:47:ff:26:52:75:07:ad:71:65:d7:d0:ed:f9:
0b:a1:75:26:ad:2a:a6:7f:33:f8:c8:ef:48:0c:db:
fa:47:75:5f:ac:8e:91:1a:1f:f2:d1:85:b3:9a:1e:
e1:33:b9:6c:6e:87:56:82:47:fe:31:10:4a:30:2a:
8a:e6:0b:9f:46:8a:29:41:8c:cf:d2:23:71:02:b7:
36:7f:11:42:a4:31:ca:0a:f5:1b:96:db:cc:76:a4:
a1:a5:0e:32:eb:51:fe:8d:1f:95:ed:bf:fe:c6:47:
3d:ea:ce:9e:0c:59:52:77:eb:ab:57:2b:e5:ab:2e:
80:65:be:ed:59:8c:87:da:fe:cb:a1:dc:3b:c1:a9:
c3:76:9a:6e:80:8a:0c:1a:07:f9:db:25:b4:d8:2b:
58:9e:e0:67:1c:c6:10:ac:ee:c5:10:ff:10:04:71:
7e:a6:c0:a0:27:b3:7f:8d:f1:d8:08:55:c5:c3:39:
63:39:cb:cd:00:36:ac:03:4f:ad:e1:4c:38:84:9b:
8f:10:8d:b3:2c:65:b2:cd:7c:91:5d:fd:5b:9b:92:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:20:C6:5D:66:F8:80:FE:06:E0:B3:F0:04:3D:18:1C:18:09:A2
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:f7:c3:f3:9d:2a:14:2f:a1:1f:9a:5d:29:69:92:56:98:
17:cf:b3:72:b5:e1:8f:7b:9e:b7:f6:11:0b:7c:a5:2c:c4:49:
fd:02:86:d2:36:da:6c:a4:a1:ad:b5:62:ec:32:26:a7:b6:7e:
22:18:8c:76:a9:bb:a2:cc:ea:fe:69:90:03:fb:83:59:5b:ad:
1f:25:5c:6f:82:f7:38:9b:f7:ef:e4:a2:34:f0:f4:69:51:07:
2d:6f:a3:12:9e:f4:2e:1b:60:e0:fc:c4:bf:66:88:6e:b2:82:
a1:f6:f4:75:db:95:bc:e8:8b:28:f1:13:f0:ba:6a:f2:be:69:
00:bd:6b:58:ff:aa:8f:d5:0a:5e:6d:55:fa:fd:4f:13:42:43:
64:66:f2:c6:83:4d:3a:8d:35:ae:77:fc:82:95:7d:96:0a:2d:
0b:ff:e9:fd:66:ff:fa:33:b3:e0:43:d3:b4:77:63:89:a2:26:
e7:af:8d:7a:0b:87:46:44:0d:2d:b5:72:c0:59:88:d3:4a:6d:
ca:dc:be:06:7f:a0:91:10:4e:e5:39:e4:2b:7a:39:19:f0:52:
88:85:12:92:d5:6f:e4:dd:b8:f1:18:18:03:41:fa:5b:4a:0f:
2e:4a:06:df:7d:08:0f:33:37:47:85:da:88:b1:fb:88:29:e2:
4c:c6:51:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4nynJ18HfzGjlN2wWJisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3
MmI1NzgwHhcNMjYwNDE3MTAwMDI3WhcNMjYwNDE4MTAwMDI3WjAzMTEwLwYDVQQD
EyhkMDUyMjBjNjVkNjZmODgwZmUwNmUwYjNmMDA0M2QxODFjMTgwOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRLwEkLNn1ASqv3DeFPI1le91iNd
NVEVOptjz9++6nBUXjGZLEprLfwsDARe6kf/JlJ1B61xZdfQ7fkLoXUmrSqmfzP4
yO9IDNv6R3VfrI6RGh/y0YWzmh7hM7lsbodWgkf+MRBKMCqK5gufRoopQYzP0iNx
Arc2fxFCpDHKCvUbltvMdqShpQ4y61H+jR+V7b/+xkc96s6eDFlSd+urVyvlqy6A
Zb7tWYyH2v7Lodw7wanDdppugIoMGgf52yW02CtYnuBnHMYQrO7FEP8QBHF+psCg
J7N/jfHYCFXFwzljOcvNADasA0+t4Uw4hJuPEI2zLGWyzXyRXf1bm5Kc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBSIMZdZviA/gbgs/AEPRgcGAmiMB8GA1UdIwQY
MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt
MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1
LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7f3w/Od
KhQvoR+aXSlpklaYF8+zcrXhj3uet/YRC3ylLMRJ/QKG0jbabKShrbVi7DImp7Z+
IhiMdqm7oszq/mmQA/uDWVutHyVcb4L3OJv37+SiNPD0aVEHLW+jEp70Lhtg4PzE
v2aIbrKCofb0dduVvOiLKPET8Lpq8r5pAL1rWP+qj9UKXm1V+v1PE0JDZGbyxoNN
Oo01rnf8gpV9lgotC//p/Wb/+jOz4EPTtHdjiaIm56+NeguHRkQNLbVywFmI00pt
yty+Bn+gkRBO5TnkK3o5GfBSiIUSktVv5N248RgYA0H6W0oPLkoG330IDzM3R4Xa
iLH7iCniTMZRtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:00 2026 by rpki-client