Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: wA5/i7f8Y8L2PP7tpNveeYxAoX9txfGCCRGO2cn5lFQ=
Subject key identifier: E0:3C:52:9A:12:C4:4F:30:1C:41:B9:F4:C5:86:0D:BD:4A:14:FB:22
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019F1378B71E98504964A363A23304892973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 08F4
Signing time: Mon 29 Jun 2026 13:01:46 +0000
Manifest this update: Mon 29 Jun 2026 13:01:46 +0000
Manifest next update: Tue 30 Jun 2026 13:01:46 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: 7rDqt+BVSkwRwKJKP60Q8Cwx4yNBJdwkl03Su27Hpvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:78:b7:1e:98:50:49:64:a3:63:a2:33:04:89:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Jun 29 13:01:46 2026 GMT
Not After : Jun 30 13:01:46 2026 GMT
Subject: CN=e03c529a12c44f301c41b9f4c5860dbd4a14fb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:dc:43:2b:d3:6b:3d:71:c1:d5:8a:c9:f5:
bc:80:6c:01:5d:62:1a:c8:f8:db:c1:b4:21:d7:6e:
2a:7b:c2:b6:a6:e2:a4:ea:4c:ae:06:2b:fc:7e:11:
0b:82:f2:22:de:7c:ba:6d:0e:4e:e2:5f:0b:b6:29:
6f:fc:85:70:56:54:a2:db:94:5b:18:9f:b9:46:b5:
12:59:9f:55:74:8f:90:de:24:12:94:71:08:ae:ae:
38:a0:f9:d8:d4:3a:6e:e8:a3:1c:dd:0c:53:88:8d:
30:25:08:16:24:4d:50:78:0d:7a:b4:02:93:52:a4:
5c:90:02:8c:4f:99:65:ed:76:8a:a4:f9:6e:34:ff:
1d:11:67:f2:0a:f5:95:03:60:c9:5d:d6:4a:f0:5e:
06:ee:f3:5f:be:07:34:14:c1:69:a7:52:66:04:9d:
2e:13:25:34:68:99:00:9d:6f:5b:a6:0d:9c:8d:18:
05:8e:7b:09:6a:7b:25:57:41:26:20:80:20:fb:ba:
22:26:76:4c:fb:a1:76:59:77:97:a3:5b:90:3a:8b:
6c:da:b6:72:d7:74:39:3e:8e:e0:fb:73:c3:30:44:
cb:ce:9e:ff:40:37:1f:c0:39:8c:74:0a:fb:65:ec:
b0:a4:d8:8e:91:98:6f:71:67:a9:8f:1a:12:ec:8a:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3C:52:9A:12:C4:4F:30:1C:41:B9:F4:C5:86:0D:BD:4A:14:FB:22
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:71:a0:ed:54:25:f7:71:1f:08:55:71:d6:7d:7e:ed:51:0f:
26:82:f1:6f:9a:3d:6e:e7:be:42:8a:bb:f4:67:ba:9e:fd:df:
6a:ee:86:c9:21:a2:95:b3:b2:ad:38:81:22:f1:16:4e:74:57:
04:6b:93:cb:0e:b4:bd:21:77:a4:86:c1:e6:5f:a9:34:59:e3:
96:e2:11:6d:13:22:cb:85:37:7f:ef:dc:da:88:9b:5f:93:5f:
07:cb:16:12:12:ce:2b:69:7d:a4:c8:e1:83:35:cb:2f:56:5b:
f0:38:c6:37:35:ed:d9:13:ae:bf:17:48:c2:85:5d:14:9c:22:
76:62:53:65:3a:30:d0:24:08:68:96:91:3b:f8:a2:87:89:1b:
d5:37:d0:87:2b:92:18:16:ee:a8:10:b1:7a:60:35:30:e2:83:
a7:4f:42:a9:d4:ae:28:bd:e0:f8:6d:bb:56:80:87:e1:b3:77:
e7:2b:ec:dc:bd:3c:d4:01:71:1f:72:f9:ae:0f:dd:ae:e6:51:
cb:24:15:9e:db:4d:34:c3:55:71:33:a7:00:ee:a2:bc:d5:58:
d9:91:b7:bc:1a:64:fe:d6:75:ec:6a:69:a7:ce:17:88:93:05:
47:c1:45:80:8b:e5:43:b4:d8:db:3d:2e:59:c4:9c:e2:e4:d5:
57:ca:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:55:15 2026 by rpki-client