Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: PXBH2rNPKoobIE8fzx/PCgGGCSi0DrBx9+NL5rEQT3Q=
Subject key identifier: 6D:D7:C6:9B:AE:3C:C2:93:3E:0C:64:59:33:AE:A0:0E:EA:27:D2:B3
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019E732E1084A1D88C327F3D45B46C7D2B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 0514
Signing time: Fri 29 May 2026 10:00:58 +0000
Manifest this update: Fri 29 May 2026 10:00:58 +0000
Manifest next update: Sat 30 May 2026 10:00:58 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: ZPFocMyICVezpYxKZLipvzTM95Jd6y5pgu8Yw7gqTFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:2e:10:84:a1:d8:8c:32:7f:3d:45:b4:6c:7d:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: May 29 10:00:58 2026 GMT
Not After : May 30 10:00:58 2026 GMT
Subject: CN=6dd7c69bae3cc2933e0c645933aea00eea27d2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:a7:34:cf:ea:06:b8:ad:65:f7:df:8b:25:
58:13:2f:57:7d:48:81:45:62:83:b8:60:fb:95:86:
a0:e5:0e:04:93:4f:04:f3:1c:d3:83:e7:8a:1a:52:
ce:e8:65:a2:02:bd:84:18:0d:29:5d:3d:8c:9a:10:
02:bb:89:21:f5:8c:84:1c:3f:6a:36:96:03:92:c4:
e6:5e:c5:ec:2e:ba:4f:3a:e2:ed:38:23:42:53:1a:
82:ac:48:49:07:70:4a:ec:ff:78:93:50:c5:9e:67:
a7:bc:83:57:42:8b:99:3e:bf:08:d7:f7:b9:16:99:
76:8f:6e:1b:b4:59:12:71:b6:e5:aa:c8:d5:db:53:
b8:69:69:a9:48:3c:b7:15:0c:04:c2:3b:6a:df:a5:
55:75:20:89:4d:01:2f:c5:d7:05:00:a1:f9:03:48:
cd:3b:ce:99:aa:0a:ce:f9:54:9e:fc:31:22:59:f7:
d1:07:19:cc:8e:cd:bc:bb:4b:ce:56:51:47:bb:e1:
b2:e3:4f:4d:aa:2f:71:d1:85:93:fa:d5:49:70:d4:
71:53:b0:01:5e:f9:2c:f9:bb:45:fb:62:7b:66:18:
23:56:a3:01:75:eb:6d:51:1b:6d:0b:bc:38:80:1a:
55:29:96:3d:9d:9b:1e:a0:98:69:f1:9a:d5:25:15:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D7:C6:9B:AE:3C:C2:93:3E:0C:64:59:33:AE:A0:0E:EA:27:D2:B3
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:90:d4:ae:d7:90:07:f1:9f:fb:48:c3:4a:43:94:42:80:af:
bf:56:88:d1:84:fd:06:89:9e:a0:c6:c4:84:5d:88:e1:67:82:
fb:f9:62:01:fd:0a:d7:2c:a4:d0:2e:a5:8c:0b:96:19:e1:67:
58:f3:ef:33:c9:47:89:a9:a7:80:1c:96:36:6d:91:9d:4b:ba:
09:23:02:dc:47:ca:8a:fd:3a:98:d7:6f:ce:e5:89:59:7c:20:
36:f9:63:3a:00:03:72:9f:4d:1e:69:f3:77:42:4a:39:e7:50:
f1:c1:f0:e8:2e:f1:ea:79:b7:6f:c9:0d:c5:73:65:48:be:70:
a7:14:3f:58:a3:5e:bc:ac:7f:81:37:49:43:61:58:6a:a4:bd:
79:c7:dc:1d:42:25:12:c3:ac:7f:63:4e:38:e3:96:f8:23:03:
7a:c3:a9:5b:2a:c6:f8:b3:97:66:9d:a5:1e:51:9c:e2:c4:91:
b2:fa:e8:98:e5:72:0d:89:ae:9a:a0:0d:b3:e2:ff:8f:eb:4f:
d0:83:58:16:16:44:2a:92:2b:cb:17:f2:9b:a1:1e:af:d7:00:
73:bf:a3:b1:33:73:33:a3:2d:a0:82:d9:74:4d:89:fa:74:d2:
7d:96:63:58:1a:e7:bd:f1:4a:bb:78:9d:2d:31:b1:77:08:99:
e3:90:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 14:28:21 2026 by rpki-client