Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: a2PxRJDncezl14mWiFvzvMnMycfYhl1s0ryf/dO+gi8=
Subject key identifier: 6C:16:92:5B:8C:D3:5E:3E:A6:51:05:93:8B:8E:1C:83:3D:73:85:16
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019CAFECBE8457FD281BE24F06BEF6B80556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 0427
Signing time: Mon 02 Mar 2026 19:00:53 +0000
Manifest this update: Mon 02 Mar 2026 19:00:53 +0000
Manifest next update: Tue 03 Mar 2026 19:00:53 +0000
Files and hashes: 1: XUebERbWFz0VzzOPVclokPtH7ZI.roa (hash: etgcVhxSEjllJBOIBBKIy18UocYNVDG++pFKb9lFGWM=)
2: Y66UbTTLpbAqCBvMHynaZXB7I7g.roa (hash: YXu6+ED9r1lcgi1tW7PjncfqdS8ytXCfpiDpwPC9OQo=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: zW0ntZm83BAs3HOa01X1MH8Qc4s56zREY11QVkKFKkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:be:84:57:fd:28:1b:e2:4f:06:be:f6:b8:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Mar 2 19:00:53 2026 GMT
Not After : Mar 3 19:00:53 2026 GMT
Subject: CN=6c16925b8cd35e3ea65105938b8e1c833d738516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:1e:55:45:ff:80:66:17:64:7f:f1:27:58:
01:f9:c9:b5:f9:e0:f8:f3:ae:c9:83:db:e2:0c:7e:
72:78:d6:df:19:bd:29:54:ec:20:77:ad:56:43:9f:
1c:89:45:b9:50:01:a6:1f:58:15:a0:83:f9:da:c3:
d9:92:db:b0:91:20:18:84:d4:7f:bb:72:ea:3e:93:
cd:10:72:de:ea:e4:e7:94:21:87:4c:19:b7:d1:bb:
78:f3:d6:3d:5b:9d:69:c1:66:60:2b:18:cd:4c:f5:
ed:6f:08:3d:29:70:81:16:6a:15:af:20:e4:f1:cb:
e2:2f:d2:6b:14:81:9d:5e:66:e8:38:c6:f9:c5:02:
a5:0f:a3:b9:f7:06:cd:be:d9:1e:e7:85:4b:f0:21:
35:31:d4:4a:1e:85:c9:0d:7d:e0:c0:f5:d6:3b:bd:
51:ac:2c:b4:2e:c5:da:a3:51:e3:24:07:94:2a:d4:
c9:95:3a:c3:9c:66:d4:8e:ee:9c:e6:ea:43:30:e8:
ad:86:c0:2a:d7:68:a0:5e:95:1b:28:71:36:96:dc:
37:92:02:50:4d:cb:43:36:e6:7c:f7:5d:a0:53:38:
ff:34:4c:67:f2:ff:48:1b:32:f7:66:73:3d:8e:8c:
c6:12:d1:52:c8:4a:58:28:ed:ee:08:93:41:80:85:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:92:5B:8C:D3:5E:3E:A6:51:05:93:8B:8E:1C:83:3D:73:85:16
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:4d:dd:d8:c5:47:bc:69:13:04:38:c2:97:41:5a:fc:a5:
c5:80:6c:85:62:4e:0f:bb:e5:d9:4c:93:34:c1:8d:61:17:f3:
6f:75:e2:66:74:b0:22:2d:02:99:7b:72:22:70:b6:f7:6b:99:
62:4a:b3:5d:dc:e0:29:ff:d0:07:36:89:b0:e3:10:c0:b6:95:
89:ab:7c:49:4a:22:d3:11:cb:2b:10:ab:fd:1e:29:e7:ef:40:
22:4c:e0:e1:1c:91:f6:27:fd:51:17:cf:be:38:24:3f:09:ee:
a4:eb:a0:b9:87:b4:82:10:3e:6e:31:b3:65:8a:53:00:57:bd:
0c:ce:32:b2:c9:e9:c0:32:3b:07:7d:7b:80:85:54:92:a4:4d:
ae:5a:36:01:29:0f:56:c2:64:0c:77:88:12:58:7a:de:b9:04:
68:83:8d:75:1d:9c:ec:aa:22:d8:24:2d:3b:b1:05:fe:91:20:
f6:4e:d2:aa:43:6b:c0:f5:f3:e7:50:30:32:08:21:15:e3:96:
93:b0:15:f6:36:9f:86:ed:4d:37:c0:20:c8:a8:56:0e:76:fe:
55:00:34:59:2c:83:90:59:6f:64:a0:18:d8:71:88:3c:2c:98:
e9:62:7e:80:5a:43:56:6e:73:b0:26:c2:dd:22:75:29:a0:2f:
42:20:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:23 2026 by rpki-client