Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: FtcDQx/wQ/nbgxaoqCi2Z96NhtFrvLBaDjmxyM6fl6Y=
Subject key identifier: 93:5F:D7:58:E7:DA:D3:79:52:46:45:A5:97:22:A0:98:1B:5A:22:10
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 01A13033A4DB8C1AD3F2B248ABFD15658A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0A0C
Signing time: Mon 12 Oct 2026 13:00:53 +0000
Manifest this update: Mon 12 Oct 2026 13:00:53 +0000
Manifest next update: Tue 13 Oct 2026 13:00:53 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: rO3EsE0OROWeyWu9GSpYfHau+yP+1Lyyu5fs3vg2jIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:33:a4:db:8c:1a:d3:f2:b2:48:ab:fd:15:65:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Oct 12 13:00:53 2026 GMT
Not After : Oct 13 13:00:53 2026 GMT
Subject: CN=935fd758e7dad379524645a59722a0981b5a2210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:84:1a:60:69:e0:0f:0b:4c:d4:9a:5c:e1:
bb:30:b0:0f:c5:16:21:a8:68:5b:e9:cd:f0:a4:88:
1e:14:19:c5:26:34:c9:6b:de:66:4c:6c:9b:ea:9b:
d2:7c:bc:34:ef:1a:3f:81:02:ca:db:7a:39:f1:8a:
a8:db:42:f7:1c:84:93:72:f8:1b:36:93:5f:7a:50:
17:10:cb:0d:1b:1c:df:ca:16:62:12:eb:4d:0e:b7:
69:b8:16:b0:aa:d9:8e:a4:3e:97:da:d6:62:94:3a:
39:4f:6f:21:b0:df:80:ed:6f:a5:e5:97:2f:33:c5:
34:82:42:01:ac:12:9e:ab:8d:06:b2:72:af:b9:35:
0e:33:b5:92:f4:00:82:41:e6:31:8f:d5:96:be:cf:
ad:f6:25:5c:f2:af:c1:94:7c:d3:a6:b5:35:b9:ef:
5f:f7:ad:59:4f:e6:f4:50:a6:29:15:eb:ad:16:6b:
16:4c:fb:ad:ba:ba:1e:51:0b:7d:8a:03:d2:5a:85:
94:22:b8:05:a2:34:7d:1d:a6:72:36:a3:d7:ed:de:
72:df:cc:7f:27:29:58:8c:dd:a0:94:63:8f:b9:09:
22:8d:c2:3f:66:2e:82:74:4e:a1:76:91:40:72:10:
bd:55:4d:16:e4:4e:a3:bb:56:e0:c5:7b:fa:11:4a:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:D7:58:E7:DA:D3:79:52:46:45:A5:97:22:A0:98:1B:5A:22:10
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e0:62:fe:38:69:46:a7:fc:7f:a1:21:ab:b3:84:bc:10:bc:
37:64:9f:73:d0:7e:bd:1f:03:b5:f9:9c:b0:68:92:b0:e2:09:
35:9e:22:ce:5e:c6:1e:64:90:3c:37:f3:ce:aa:12:ef:c6:1b:
3c:6a:bb:72:e0:1b:23:68:bb:51:23:15:33:0f:a4:50:58:85:
8a:c9:42:77:5f:90:68:80:07:c5:62:0b:b9:76:c1:54:df:41:
8d:32:b7:03:49:50:61:44:51:68:68:17:ad:09:f6:ca:f3:e3:
a1:aa:72:01:8e:72:2a:80:17:68:51:36:b3:ea:75:fb:b6:39:
d2:75:d9:db:69:bf:d2:b7:df:12:fa:36:76:c2:d2:22:36:7b:
ca:c6:11:9c:6c:d5:1c:5a:e0:ac:e2:e1:75:c2:ba:f6:8f:81:
48:f0:71:6d:38:b2:66:de:9d:c9:e7:fb:43:02:4d:cf:7b:96:
1f:7d:60:fd:71:9f:58:f8:af:45:5e:57:85:0c:4e:12:4c:0d:
ca:6c:6c:b1:76:7e:7d:44:29:6d:1e:ef:5c:26:cf:7d:3e:80:
3d:49:14:c4:be:a4:13:5c:44:42:2f:a5:e3:4b:2c:d8:69:95:
f1:34:48:90:66:86:70:0e:3c:8b:85:f3:7d:96:ac:a6:ec:4a:
8a:fd:ff:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwM6TbjBrT8rJIq/0VZYpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky
YjkyMGIwHhcNMjYxMDEyMTMwMDUzWhcNMjYxMDEzMTMwMDUzWjAzMTEwLwYDVQQD
Eyg5MzVmZDc1OGU3ZGFkMzc5NTI0NjQ1YTU5NzIyYTA5ODFiNWEyMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxuEGmBp4A8LTNSaXOG7MLAPxRYh
qGhb6c3wpIgeFBnFJjTJa95mTGyb6pvSfLw07xo/gQLK23o58Yqo20L3HISTcvgb
NpNfelAXEMsNGxzfyhZiEutNDrdpuBawqtmOpD6X2tZilDo5T28hsN+A7W+l5Zcv
M8U0gkIBrBKeq40GsnKvuTUOM7WS9ACCQeYxj9WWvs+t9iVc8q/BlHzTprU1ue9f
961ZT+b0UKYpFeutFmsWTPuturoeUQt9igPSWoWUIrgFojR9HaZyNqPX7d5y38x/
JylYjN2glGOPuQkijcI/Zi6CdE6hdpFAchC9VU0W5E6ju1bgxXv6EUpi7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNf11jn2tN5UkZFpZcioJgbWiIQMB8GA1UdIwQY
MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt
M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1
LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+Bi/jhp
Rqf8f6Ehq7OEvBC8N2Sfc9B+vR8DtfmcsGiSsOIJNZ4izl7GHmSQPDfzzqoS78Yb
PGq7cuAbI2i7USMVMw+kUFiFislCd1+QaIAHxWILuXbBVN9BjTK3A0lQYURRaGgX
rQn2yvPjoapyAY5yKoAXaFE2s+p1+7Y50nXZ22m/0rffEvo2dsLSIjZ7ysYRnGzV
HFrgrOLhdcK69o+BSPBxbTiyZt6dyef7QwJNz3uWH31g/XGfWPivRV5XhQxOEkwN
ymxssXZ+fUQpbR7vXCbPfT6APUkUxL6kE1xEQi+l40ss2GmV8TRIkGaGcA48i4Xz
fZaspuxKiv3/xw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:30:15 2026 by rpki-client