Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: UUDzKyvc6Cum2ShZ+paEMKUUkArpnFHGSUCHQdvzw+E=
Subject key identifier: 3A:4E:0D:B8:1E:18:05:A6:4B:7E:6E:44:B3:20:73:D0:B6:C8:9C:66
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019CB3C9BCEEED402BC9FFB1CDE370DBD74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 0429
Signing time: Tue 03 Mar 2026 13:01:08 +0000
Manifest this update: Tue 03 Mar 2026 13:01:08 +0000
Manifest next update: Wed 04 Mar 2026 13:01:08 +0000
Files and hashes: 1: XUebERbWFz0VzzOPVclokPtH7ZI.roa (hash: etgcVhxSEjllJBOIBBKIy18UocYNVDG++pFKb9lFGWM=)
2: Y66UbTTLpbAqCBvMHynaZXB7I7g.roa (hash: YXu6+ED9r1lcgi1tW7PjncfqdS8ytXCfpiDpwPC9OQo=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 3jWcgy5nyOiNA3OSabFk/yJIDPsFKwgPHR16B+Hs0Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:c9:bc:ee:ed:40:2b:c9:ff:b1:cd:e3:70:db:d7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Mar 3 13:01:08 2026 GMT
Not After : Mar 4 13:01:08 2026 GMT
Subject: CN=3a4e0db81e1805a64b7e6e44b32073d0b6c89c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:db:f4:07:19:a0:45:29:c5:03:96:a5:27:5f:
9d:d8:3a:6f:d6:54:dd:9c:34:4a:df:e4:b8:ba:c9:
2f:e7:0b:e9:ee:84:10:a5:aa:23:5d:64:1b:53:c8:
db:b8:5b:92:d7:7a:1d:79:04:cd:7e:8b:78:fd:b7:
c3:a1:ac:9f:51:c6:fb:03:7b:ad:8e:a5:d2:9c:67:
dc:00:95:8a:4b:82:1c:06:d3:c1:0f:b1:0e:f4:0f:
41:e6:a7:dc:9a:35:ea:cb:9d:26:ae:30:38:4f:ce:
8b:d7:d7:c0:42:46:75:ef:a4:33:a2:ae:66:be:4e:
2e:39:e6:1a:27:32:91:d0:ac:23:c9:60:63:d1:02:
17:fb:85:0c:a2:15:a9:1e:39:47:5f:20:38:74:14:
bd:33:7f:6a:3c:28:e5:83:4d:f5:6a:1f:b8:85:89:
a1:ae:e3:1c:b9:35:81:91:6e:54:b1:8f:22:34:b3:
69:97:c1:7c:62:dd:e1:8e:5f:ba:6d:2e:20:5a:4c:
ca:4b:6b:19:c3:66:09:4b:3b:8a:e0:18:5c:dd:15:
96:14:a4:5a:c0:25:4a:dc:73:e4:98:e4:36:89:4d:
72:92:dc:8a:da:b3:70:74:b7:ac:ad:7e:fb:84:30:
6d:0d:05:c8:73:3d:b5:05:bf:89:ed:3e:fc:1d:7d:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4E:0D:B8:1E:18:05:A6:4B:7E:6E:44:B3:20:73:D0:B6:C8:9C:66
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:cb:8d:75:a2:60:c3:4b:20:ae:89:46:ea:b7:c6:f8:d4:
5c:20:9f:8c:65:00:71:ed:b7:73:36:47:2f:95:ed:15:64:84:
e8:ca:73:d4:db:7c:e7:98:e0:6d:bc:09:b8:f0:86:86:85:9a:
f9:f5:bf:8d:76:b2:7c:e0:3c:33:b8:aa:7d:c1:e8:99:fc:31:
aa:f4:ae:46:aa:53:2f:59:e0:e5:04:e2:83:72:ac:46:7f:09:
32:f0:ea:a9:bd:88:7b:0f:88:21:9d:74:b8:76:33:6c:f9:fa:
ec:9a:39:ab:56:ee:8c:4b:65:d0:ce:87:62:bd:31:09:2f:25:
54:44:8a:18:e3:8f:0b:e3:3b:ac:9d:95:35:4b:5e:4c:f6:f5:
47:e9:cd:13:a1:36:1a:f4:70:8f:ea:d9:03:0b:df:c5:f9:06:
76:ef:66:0e:30:b0:97:1e:59:0c:93:a4:31:1f:96:2d:cd:89:
ec:6a:85:2c:74:48:75:a9:bf:b2:66:1b:74:ba:64:c6:aa:80:
f7:6f:ef:9d:74:cd:ab:2b:90:2f:9a:ec:8a:35:72:5c:bd:88:
95:bd:ba:3b:81:da:cb:5b:3b:1e:1e:eb:62:67:c9:14:00:8e:
31:4a:db:e2:1e:f3:f8:2b:67:2c:91:b7:27:43:f0:84:fe:73:
db:02:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 17:00:09 2026 by rpki-client