Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: EmbCPindhWZ5z4jnYCBosiEQ5sz8vsp7WGoCDpMjCc0=
Subject key identifier: 73:8A:7A:0B:3D:65:55:98:A3:3E:47:F9:DD:C0:22:63:88:9C:96:16
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019F6E3C762CD9F0240A602EA73708D70549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 0596
Signing time: Fri 17 Jul 2026 04:01:23 +0000
Manifest this update: Fri 17 Jul 2026 04:01:23 +0000
Manifest next update: Sat 18 Jul 2026 04:01:23 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: kpjMeODDz7WuDEmQ7uV7q7S/Y+6M+i3pc+48u3n5gJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:3c:76:2c:d9:f0:24:0a:60:2e:a7:37:08:d7:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jul 17 04:01:23 2026 GMT
Not After : Jul 18 04:01:23 2026 GMT
Subject: CN=738a7a0b3d655598a33e47f9ddc02263889c9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:c2:dc:8f:72:1b:b7:78:df:e3:1b:de:70:
ab:e8:e1:8b:44:b4:8e:06:d1:e4:ca:ad:47:e0:11:
9a:75:48:ff:a5:4e:1e:e5:0f:fe:d3:3c:03:3e:c6:
0c:d4:87:56:4d:7d:72:3a:a0:d0:71:7d:be:c8:8a:
dc:6d:f2:1a:92:af:e8:67:ee:18:34:fa:02:ee:ed:
7e:a3:d7:f0:07:b8:55:0a:b1:d2:89:c0:7a:d3:6d:
c8:60:9d:1d:be:69:24:82:a2:39:f0:00:19:86:8a:
99:3c:de:72:0d:de:46:a4:07:7f:65:91:9c:7b:6c:
41:2f:db:6a:5d:01:9f:2a:c2:a0:39:bb:69:d6:9c:
48:43:79:16:23:65:70:60:4b:a1:6c:0d:3c:11:93:
f5:80:f4:db:5d:e4:7d:9e:64:a3:91:29:3a:bc:a7:
92:fd:61:b6:31:53:9f:eb:0e:6a:f0:49:c0:af:aa:
99:a1:34:36:f8:d7:fd:26:00:c1:7f:04:9e:19:7b:
cb:bb:36:7a:ac:cb:ea:be:8f:f4:f2:ad:74:1e:0d:
56:67:80:17:70:7f:19:36:50:32:c1:a9:34:e7:f4:
f5:c4:6e:2c:eb:d0:9f:cf:57:66:d4:e4:dd:5a:ac:
6c:ef:44:ea:ca:ee:4c:8f:d4:b7:9b:b4:16:aa:22:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:7A:0B:3D:65:55:98:A3:3E:47:F9:DD:C0:22:63:88:9C:96:16
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:c4:71:b8:5b:3c:8a:18:15:7f:45:e5:89:4c:91:85:f5:
34:c9:2e:92:71:4d:cb:6d:b1:f5:29:66:aa:fc:49:bc:4e:51:
de:c5:e8:69:86:65:a4:fc:25:f4:22:b6:4f:c3:c2:8e:f4:ae:
83:ba:5e:d7:4c:4c:c5:cf:18:0d:e7:f7:5d:83:96:55:a0:77:
d6:47:53:f8:44:77:28:20:e2:57:7e:fb:a9:f9:61:16:ba:d5:
32:55:68:b9:5e:a5:e8:2a:48:2c:76:78:38:47:9b:92:d7:2d:
6b:10:4f:bf:9c:98:67:4a:37:b9:48:d4:a2:6f:ba:ea:8b:e9:
d0:af:e9:39:23:f1:ce:62:7b:51:93:48:cf:82:7c:8c:a7:ff:
b1:fe:74:42:9a:52:b3:57:fe:61:c0:fe:d2:2b:bd:c1:e6:2a:
d0:2f:5e:aa:d9:f5:b3:a3:0c:da:4d:41:15:a8:8a:b3:f3:6f:
1f:46:a1:99:e9:bf:76:8c:7e:aa:34:66:f3:11:03:21:6f:cb:
61:41:4a:95:e7:5a:15:e4:8f:cf:64:c9:92:58:46:79:c4:1b:
7a:25:1c:a6:a0:c3:8f:6d:59:1b:6d:36:e0:c6:ab:bd:7d:a1:
30:1e:02:7d:4c:4a:b1:66:27:17:99:ae:50:4a:14:c3:30:0e:
92:ef:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:56:02 2026 by rpki-client