Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: cjRMtdpE26uF5f8xmvffMaL5A2I4mVOr8+eRJFKuU1Q=
Subject key identifier: D5:BC:41:00:91:C2:4C:FA:CA:72:35:3F:85:87:75:B9:7D:E4:17:9B
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019EC25B975E3FC0B47BE5D5B4252776998E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 053D
Signing time: Sat 13 Jun 2026 19:00:42 +0000
Manifest this update: Sat 13 Jun 2026 19:00:42 +0000
Manifest next update: Sun 14 Jun 2026 19:00:42 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: yOUBPPlepB62x7E34Z8f63o3Td+h1A+wk/x+FOeII7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:97:5e:3f:c0:b4:7b:e5:d5:b4:25:27:76:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jun 13 19:00:42 2026 GMT
Not After : Jun 14 19:00:42 2026 GMT
Subject: CN=d5bc410091c24cfaca72353f858775b97de4179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:84:44:ab:0e:55:fb:6e:1f:e3:2d:ed:8f:
cc:d3:52:d0:97:92:c9:85:dd:82:e3:5c:f4:ff:7e:
3f:cc:be:8f:b2:ab:54:e0:b3:3b:ce:67:48:83:9a:
de:be:c9:74:2a:81:79:13:2a:f9:b9:d5:4a:7f:50:
ee:23:fc:cd:d9:a3:5a:1d:f9:fd:e6:f6:2e:48:69:
10:c7:1d:94:5f:a6:c9:b1:4a:b7:16:ac:98:09:ae:
a7:af:17:7c:65:96:a8:60:b8:90:d3:19:dc:48:2d:
9b:c0:88:4f:8b:6c:4c:a8:a2:85:d1:09:ed:a8:ba:
e8:bf:c7:08:3e:df:21:4f:d4:94:3f:1e:87:0f:a7:
85:00:e9:0b:22:f5:fb:f0:dc:6e:d4:03:9b:3b:a1:
c4:6b:38:5a:d8:80:c5:b9:b1:9d:34:75:54:7c:c4:
ff:e6:54:21:cc:ad:40:3b:2f:41:2d:f0:05:ee:9d:
45:96:3b:7e:ff:05:1a:1b:d1:47:92:1f:fe:55:2e:
51:10:1b:5e:7c:ce:b8:f5:2f:7c:59:fe:d5:f9:99:
44:cd:ca:6d:2c:fe:ef:0a:1b:50:cc:21:69:49:f3:
61:b7:f6:da:b7:30:cf:6a:99:8e:ef:e5:f0:e5:b3:
f6:c3:81:62:86:4b:da:f9:ce:87:a1:62:79:d3:06:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:41:00:91:C2:4C:FA:CA:72:35:3F:85:87:75:B9:7D:E4:17:9B
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7b:c2:73:3c:46:02:69:13:54:87:a5:ed:cf:4d:2a:0c:85:
9f:e7:41:b4:22:51:c6:6e:b1:8f:70:66:e9:e6:d5:c2:7a:ae:
e2:67:8f:f2:eb:5d:4f:54:aa:b7:7a:20:86:cc:75:73:cb:7b:
9c:d3:6b:f3:81:a7:89:f5:23:6f:68:94:93:6c:77:9c:62:2d:
73:8e:9a:30:9e:a4:d1:a3:f4:4a:6f:3f:e9:26:e4:a2:63:e0:
cc:f8:76:c4:7b:2a:bf:60:d3:8b:38:3a:f8:12:c9:7d:fd:35:
4e:ab:67:05:ce:29:18:f5:79:c5:bd:f1:0e:2c:00:c8:c6:6b:
99:db:72:a0:e4:f8:3f:c7:2c:31:e1:8f:17:d4:fb:0c:b0:4f:
84:f6:fa:91:c4:0f:65:c6:d4:a1:2a:ca:c1:3b:8b:41:ab:59:
19:9f:7d:e8:fc:a9:4c:11:70:43:89:81:69:88:aa:83:a1:14:
82:77:88:03:86:69:0d:44:e1:8a:5d:a6:67:6a:5f:69:9b:2b:
9d:75:67:ec:60:a3:7f:16:4e:b9:c2:84:57:b3:55:d2:71:73:
32:37:e1:55:60:95:dd:ce:ff:94:3f:15:24:78:f4:d1:41:c3:
d5:83:09:4e:4d:24:d3:58:7f:f4:0a:07:66:e3:41:32:62:e5:
01:c6:fd:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW5deP8C0e+XVtCUndpmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3
MmI1NzgwHhcNMjYwNjEzMTkwMDQyWhcNMjYwNjE0MTkwMDQyWjAzMTEwLwYDVQQD
EyhkNWJjNDEwMDkxYzI0Y2ZhY2E3MjM1M2Y4NTg3NzViOTdkZTQxNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz2ERKsOVftuH+Mt7Y/M01LQl5LJ
hd2C41z0/34/zL6PsqtU4LM7zmdIg5revsl0KoF5Eyr5udVKf1DuI/zN2aNaHfn9
5vYuSGkQxx2UX6bJsUq3FqyYCa6nrxd8ZZaoYLiQ0xncSC2bwIhPi2xMqKKF0Qnt
qLrov8cIPt8hT9SUPx6HD6eFAOkLIvX78Nxu1AObO6HEazha2IDFubGdNHVUfMT/
5lQhzK1AOy9BLfAF7p1Fljt+/wUaG9FHkh/+VS5REBtefM649S98Wf7V+ZlEzcpt
LP7vChtQzCFpSfNht/batzDPapmO7+Xw5bP2w4Fihkva+c6HoWJ50wavTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW8QQCRwkz6ynI1P4WHdbl95BebMB8GA1UdIwQY
MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt
MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1
LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3vCczxG
AmkTVIel7c9NKgyFn+dBtCJRxm6xj3Bm6ebVwnqu4meP8utdT1Sqt3oghsx1c8t7
nNNr84GnifUjb2iUk2x3nGItc46aMJ6k0aP0Sm8/6SbkomPgzPh2xHsqv2DTizg6
+BLJff01TqtnBc4pGPV5xb3xDiwAyMZrmdtyoOT4P8csMeGPF9T7DLBPhPb6kcQP
ZcbUoSrKwTuLQatZGZ996PypTBFwQ4mBaYiqg6EUgneIA4ZpDUThil2mZ2pfaZsr
nXVn7GCjfxZOucKEV7NV0nFzMjfhVWCV3c7/lD8VJHj00UHD1YMJTk0k01h/9AoH
ZuNBMmLlAcb9iw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:20:55 2026 by rpki-client