Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: TFWgcwnAFfWshm6wcSUKfzRlI0Uk/nIH8bakpcQR9Ho=
Subject key identifier: 24:3F:11:D6:A7:FF:69:9F:60:C0:73:49:FA:61:ED:00:51:D2:B7:F4
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019E29CBE9EF3352531BA3350D40483BB79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 087B
Signing time: Fri 15 May 2026 04:01:29 +0000
Manifest this update: Fri 15 May 2026 04:01:29 +0000
Manifest next update: Sat 16 May 2026 04:01:29 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: jjbMJ+rxzHWKl+DycFTyhLlIq+kSKcRXTzJSLACmiDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:e9:ef:33:52:53:1b:a3:35:0d:40:48:3b:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: May 15 04:01:29 2026 GMT
Not After : May 16 04:01:29 2026 GMT
Subject: CN=243f11d6a7ff699f60c07349fa61ed0051d2b7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:99:f1:24:60:52:09:39:c3:3c:9e:67:e1:
a3:2e:f5:2c:00:fd:3a:98:48:42:ac:d7:01:3d:e0:
99:83:bb:1f:51:58:be:9b:cb:35:d2:25:07:77:6e:
7b:b9:de:42:ae:40:f6:4e:b4:9a:28:7b:d9:97:c5:
53:1b:53:7b:f5:d2:41:1d:25:5b:35:50:b6:b2:6d:
d5:75:72:82:a2:49:69:63:03:6b:87:59:b5:8f:1e:
42:c8:31:c7:a3:31:58:46:4e:7c:3f:12:14:0a:8b:
18:1e:0d:8d:b8:a2:c2:c9:23:79:8e:c9:60:e2:09:
17:66:91:93:3f:0d:71:63:f7:db:6a:99:30:fe:43:
c6:2a:68:53:9e:92:27:a8:2f:d6:88:45:d4:38:62:
fd:c9:7b:85:23:08:a7:43:47:29:d9:99:f4:c5:cd:
e3:f8:ff:ff:c2:e2:e3:5e:06:e7:f2:f5:d8:c5:a1:
c2:8c:ae:da:ea:57:85:60:1b:c1:fd:27:f5:f7:6f:
b5:10:0d:83:09:29:5e:02:65:a5:34:b5:bc:bd:e8:
05:ae:7d:2a:e4:88:d4:a9:48:a3:45:8a:5f:01:7f:
2d:67:91:15:1c:68:89:26:c8:8b:a4:49:55:f0:30:
0b:84:bc:fb:51:bc:74:d4:cc:4f:23:3b:f7:28:f5:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:11:D6:A7:FF:69:9F:60:C0:73:49:FA:61:ED:00:51:D2:B7:F4
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e2:71:c5:3d:6c:e9:65:26:8b:77:33:96:4f:85:fe:a5:2b:
7d:49:7a:9c:8b:9b:fe:81:77:73:56:74:bb:61:77:c3:12:d3:
97:76:78:f6:d6:d4:23:b9:99:10:1d:57:d3:9e:cf:b9:6f:bc:
26:ab:12:e5:18:fc:12:a8:2c:f9:12:e5:e0:91:cf:f1:c9:c8:
22:26:4c:f1:6a:49:14:a5:43:31:e4:33:c8:6e:f4:5b:ce:5b:
b2:4c:b2:d1:c2:e4:2c:52:84:ae:5b:32:8e:0c:a4:30:01:8c:
02:85:f7:b5:af:a8:13:c6:0f:da:07:17:28:15:af:08:80:6f:
97:cd:69:09:71:b9:a1:f0:be:e8:24:22:e2:36:2d:9b:a5:c2:
fb:f2:84:db:ae:da:67:34:a2:6e:1b:0d:a7:58:a4:3f:41:3a:
c7:ea:6e:28:ae:13:54:4e:4b:d0:4c:85:ae:92:28:a7:47:b6:
13:b5:c0:8f:88:b9:1e:50:bb:c8:00:8d:c0:eb:4f:cd:e9:c7:
a4:8b:f0:fd:51:cf:b0:39:dd:e4:2f:8b:f0:5e:fc:73:72:b9:
a4:fa:73:e3:6e:6b:e1:3f:05:f0:f5:c7:5f:8f:d4:51:92:7b:
38:cf:54:7a:12:a6:40:c4:28:e7:06:e6:3d:07:95:08:07:44:
f5:4a:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:22:13 2026 by rpki-client