Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: a38STNNvAYSTa9ufjlJhpX5srTQOof9nlFlZwPPIYeg=
Subject key identifier: 70:69:5D:63:94:5D:ED:B9:13:34:41:A8:94:8B:21:A6:9A:47:68:A9
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019FAC0822C941A8C72C7A98D49B092C12EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 05B6
Signing time: Wed 29 Jul 2026 04:00:41 +0000
Manifest this update: Wed 29 Jul 2026 04:00:41 +0000
Manifest next update: Thu 30 Jul 2026 04:00:41 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 18BWnCVIEN+G0HeCxKIzMrrQd80Zrzy/pOPz5IaUZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:22:c9:41:a8:c7:2c:7a:98:d4:9b:09:2c:12:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jul 29 04:00:41 2026 GMT
Not After : Jul 30 04:00:41 2026 GMT
Subject: CN=70695d63945dedb9133441a8948b21a69a4768a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:0f:e5:fe:43:7e:22:96:9c:bf:7e:45:d7:
a9:d7:c7:ed:c8:2a:b0:cb:eb:20:07:22:76:fc:6a:
53:63:2e:9e:24:9a:64:d4:d6:74:eb:77:29:47:8d:
c0:33:1c:ff:a8:04:4e:45:b3:fa:bb:cf:41:3c:fc:
9c:95:84:a3:cb:84:55:75:23:c0:12:0b:47:59:0e:
0f:1d:cf:46:be:2d:93:88:83:22:ca:34:b7:f4:4d:
7c:e0:a3:30:b0:d2:1b:5a:96:ac:8b:87:9d:a7:3b:
96:c9:e6:85:90:0b:c8:2c:d6:52:9b:99:62:0c:24:
55:90:62:43:00:dc:22:c0:ae:ef:b6:73:40:fd:be:
52:74:8d:05:e3:4a:6c:85:9c:fd:94:4b:07:1a:0c:
8d:8d:c6:37:bd:71:b8:29:80:1c:68:d4:68:4e:6f:
23:66:93:c3:2e:5c:af:0a:da:39:05:28:af:fa:de:
31:55:dd:77:fa:28:01:a1:a6:7f:37:38:5d:8e:32:
2d:00:11:3f:e0:11:ef:8e:a8:6a:59:0d:78:ad:10:
8f:e1:1a:67:d7:9d:8b:25:08:d3:f1:7f:09:31:98:
80:51:5b:97:7b:84:6d:1b:7e:93:ef:ba:f3:b0:96:
fe:03:06:67:aa:e1:ec:c4:5e:91:ef:25:64:a3:80:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:5D:63:94:5D:ED:B9:13:34:41:A8:94:8B:21:A6:9A:47:68:A9
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:50:2a:b2:41:26:fc:45:ff:e7:3f:f4:4a:9a:ff:3d:56:40:
96:f2:0a:50:45:bc:bf:9a:64:09:50:45:2e:f8:4e:a0:36:fd:
5e:aa:be:9f:b8:49:10:5e:3b:de:54:26:28:da:3f:8d:bb:e7:
54:2e:9f:e7:4a:c2:1b:fb:70:9a:bf:13:cf:41:87:da:9c:59:
94:44:f7:51:ec:ad:5d:4c:77:27:97:bf:40:24:02:3d:e9:88:
ba:7e:12:e0:6e:87:38:1a:b3:01:d3:d6:9e:80:5d:e7:cf:de:
41:09:1f:f5:99:84:51:3f:df:12:00:13:10:ba:18:61:40:d2:
1e:c3:e1:8b:38:68:90:80:59:1b:e1:f6:8c:b6:f5:b5:68:58:
0b:d1:86:9b:dd:78:49:5f:45:47:32:c9:f0:b2:38:26:a2:b1:
4d:e8:cd:8f:74:94:ee:1c:65:77:76:7c:c3:98:35:8c:f4:4c:
e4:07:56:90:4b:7d:3f:64:7e:72:75:a0:5b:21:b1:ad:9d:c9:
e2:5e:e3:9a:a4:1c:7d:3d:2b:fd:03:21:c3:f7:b5:39:84:58:
2f:b8:fe:7e:e5:6a:46:5e:c9:e4:33:4e:31:ba:9b:ea:08:db:
04:b5:27:1e:57:4f:4b:5f:0c:14:f8:cb:53:c2:f1:83:65:5d:
6a:66:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:22:00 2026 by rpki-client