Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: JQzXdYP3sUe4531VfWfJXaEe/D2e2X4DWs04S5y64RI=
Subject key identifier: 85:40:C8:F1:D8:A0:A4:3A:FF:3A:50:3F:E2:15:27:BE:4C:B8:20:D5
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 01A1833E6F4F7649556D9F27ED1C37E184FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 06AA
Signing time: Wed 28 Oct 2026 16:01:09 +0000
Manifest this update: Wed 28 Oct 2026 16:01:09 +0000
Manifest next update: Thu 29 Oct 2026 16:01:09 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: YDvdzLzBllN/WujsLHXBMoC+gGSLJca/foH8d4SLSiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:6f:4f:76:49:55:6d:9f:27:ed:1c:37:e1:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Oct 28 16:01:09 2026 GMT
Not After : Oct 29 16:01:09 2026 GMT
Subject: CN=8540c8f1d8a0a43aff3a503fe21527be4cb820d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:7a:94:77:21:b7:53:d7:7f:90:ab:61:05:
ec:8c:43:0e:3e:a3:ed:6c:64:f7:d8:32:04:91:f1:
42:9a:fb:a7:45:c7:b6:20:3d:6c:6b:f0:3a:8f:d8:
d9:3d:5d:75:b4:d8:e5:8b:f8:d3:6e:f9:41:ff:f4:
59:aa:fd:4c:82:74:9e:4c:61:96:ad:39:51:57:67:
b5:c5:48:1b:3a:b5:cd:0a:4b:04:f9:d7:5e:90:06:
be:94:e4:71:ab:a5:62:0a:f1:8e:02:06:fa:69:3a:
5f:ec:99:2d:8a:ee:38:14:ac:68:62:64:f8:a9:5d:
ff:d7:e6:1c:5c:6c:cd:96:58:a2:72:1e:03:89:7e:
41:4e:cb:ad:09:8b:cc:87:b7:91:c6:22:6e:b7:0f:
f6:46:15:27:97:4a:b8:ca:b2:43:67:ef:e0:4c:8b:
41:e2:af:6b:cd:da:2f:1b:cd:51:f6:b7:23:45:54:
9f:8c:52:18:cb:4d:21:1f:21:df:22:7c:6e:dd:dc:
92:30:05:5d:14:41:d2:26:a2:44:31:0a:67:9d:03:
16:e1:ef:3d:7f:3c:90:a3:14:cd:cd:b1:aa:e3:54:
d3:77:70:dd:1f:07:42:7d:59:39:5a:b3:a7:52:52:
de:77:2e:25:9b:f1:76:97:a7:ee:5c:14:ba:9b:b8:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:40:C8:F1:D8:A0:A4:3A:FF:3A:50:3F:E2:15:27:BE:4C:B8:20:D5
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:80:03:30:48:09:80:17:39:c8:44:11:ee:d4:ce:0d:fc:90:
7f:6f:47:76:9c:ff:47:88:e6:6b:72:71:1f:f6:bc:17:93:54:
58:d5:4e:83:16:64:a9:b3:b2:da:71:69:27:22:dd:61:9a:65:
f0:10:e8:c4:b3:7d:20:d8:15:bd:44:1a:01:28:0d:06:9f:f4:
b7:9f:4e:aa:6f:c0:63:4e:ff:7c:dc:f1:72:0a:c1:6b:36:d4:
c4:39:45:db:25:62:2d:44:0c:c1:6e:b0:ef:d4:56:9e:20:f5:
89:89:8b:93:84:f0:e5:44:ec:4f:e4:6c:be:8b:1b:d8:26:ee:
e2:c0:ca:db:9d:ed:df:9e:31:b4:14:71:00:74:8a:f1:e8:ab:
c8:a0:28:b3:59:f1:f5:11:13:b6:61:1f:99:53:0d:38:73:b0:
53:b6:eb:62:7d:26:46:f3:6d:0c:b5:d9:9e:ac:31:64:2a:22:
03:be:c1:34:f5:24:fc:88:97:cf:e1:6d:65:ff:76:b3:65:c8:
f9:38:77:cc:af:32:12:de:19:7a:f2:80:d1:0f:86:3b:54:53:
4b:cf:8c:57:0a:c2:89:8b:a3:74:fd:93:08:a2:fb:70:b5:9d:
e7:5d:78:88:83:d7:f3:9f:67:af:22:79:ab:1f:b6:01:99:e1:
bb:28:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:40:13 2026 by rpki-client