Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: tM+JpoVuQxnQb23lMsu0txfioRc5Z/LgUbYKRbJCn44=
Subject key identifier: BA:02:AC:23:0B:39:C7:79:87:9E:6C:4E:12:D2:37:A7:AA:B5:A7:15
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 01A06D2708279B6791618A695B5F35B30041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 061A
Signing time: Fri 04 Sep 2026 16:01:09 +0000
Manifest this update: Fri 04 Sep 2026 16:01:09 +0000
Manifest next update: Sat 05 Sep 2026 16:01:09 +0000
Files and hashes: 1: 1H2QVYiLmvjq433JzJls0lvkAtY.roa (hash: 4TEMHT1jL2lV+pVn5RrleTtxpm6ysXvIiYWFjICajRc=)
2: 9LY0Xdq5F7qeYG3cx5Z1n9pfLCA.roa (hash: pqcj2JOG2xfTR3RsbK+J8HIIiXJvpxb/HmSW6fspQ+s=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: GaLNMoszGCXgeOtTgHBYCMVBmzdEvNBjiSuw4w0v51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:08:27:9b:67:91:61:8a:69:5b:5f:35:b3:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Sep 4 16:01:09 2026 GMT
Not After : Sep 5 16:01:09 2026 GMT
Subject: CN=ba02ac230b39c779879e6c4e12d237a7aab5a715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:51:74:4e:a9:8c:b4:e5:1b:ea:1f:c3:2e:
16:cd:f8:a1:15:79:34:77:37:96:44:2f:b9:1c:04:
66:fc:ed:a7:31:78:3b:a2:ff:a4:58:06:d1:14:95:
dc:de:b6:65:f3:38:a4:19:92:2b:c5:0a:74:b9:c6:
18:bc:a2:b7:95:d1:38:f2:fd:73:60:23:e9:41:f6:
7f:e1:af:2f:b7:4b:15:35:ad:0f:93:5d:40:52:5e:
98:42:af:de:4e:27:15:38:65:38:fe:6b:bb:0a:94:
b1:6b:56:41:94:43:3d:d0:4d:c3:95:86:57:4a:5c:
fb:34:2d:2e:4a:13:29:b3:7f:b4:bf:df:40:4b:ea:
54:2c:34:44:5b:e1:13:71:a0:d2:ba:e0:be:96:82:
3b:e5:fa:df:40:ab:be:ef:4b:3b:f0:37:bf:61:69:
c7:58:99:a8:ed:78:1c:3b:41:6e:e0:6e:d7:dd:9f:
e2:37:0d:f7:2d:46:e8:4a:97:33:a0:d6:74:62:ff:
5d:a1:8e:9c:65:a1:80:f3:78:46:9a:96:52:b1:12:
f6:79:36:ff:86:a4:7b:73:c8:89:35:10:ee:31:22:
e0:c2:68:ff:4b:5b:c9:c8:47:5d:b0:42:84:8c:09:
c7:e7:fe:c3:0e:1c:35:b7:74:13:d8:04:97:47:35:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:AC:23:0B:39:C7:79:87:9E:6C:4E:12:D2:37:A7:AA:B5:A7:15
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d8:f2:9b:50:d5:5f:51:b1:ca:98:a5:5d:7e:4b:dd:e9:f5:
00:91:b8:85:12:09:92:75:b1:28:87:ad:3d:01:98:67:3f:55:
a0:27:98:d7:e2:60:b2:6f:d4:e8:8a:7a:78:2c:4d:73:41:1d:
bf:02:4b:ec:ba:8b:63:ea:0b:12:7a:c4:19:29:02:dd:cd:d5:
10:9c:9a:b1:e6:e4:6f:71:8f:f2:56:fd:ae:51:f0:cf:64:42:
20:72:e5:c0:9c:0b:29:ff:a0:e9:8b:45:22:90:d6:91:92:0f:
f3:c3:e1:20:be:e6:31:08:76:9a:d1:87:aa:4a:ff:11:99:17:
c1:3a:e1:cc:bc:d4:a9:66:60:68:ed:74:b7:4e:99:2a:c2:49:
c3:69:f9:19:9b:6d:68:1b:30:ea:43:c0:d8:93:24:86:89:57:
e6:eb:dc:f8:0d:5d:3e:1e:fa:fe:9f:bf:24:87:3c:af:96:2c:
0f:c3:b1:35:cd:be:60:e6:be:0e:17:74:ae:5c:10:c7:37:57:
05:a7:ec:68:27:c2:a1:fa:06:63:6e:73:3c:4a:1d:6e:f0:d0:
12:c9:af:40:3b:cf:77:e1:81:d2:9e:89:de:e2:fc:ed:92:13:
d2:b5:67:4c:50:b5:f1:7e:fb:cd:6d:ae:39:47:a3:45:07:d5:
d2:ae:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:59:48 2026 by rpki-client