Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: 1YEM0jPLKodLBRCLNf2omYjpHk6AL1JdKDpogrffiS8=
Subject key identifier: 3D:7A:5C:A4:74:E1:B0:F0:B7:33:67:31:5F:11:DF:32:45:05:57:8A
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 01A002EFDF87D4DD90E8E064B973A04EE15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0970
Signing time: Sat 15 Aug 2026 01:01:09 +0000
Manifest this update: Sat 15 Aug 2026 01:01:09 +0000
Manifest next update: Sun 16 Aug 2026 01:01:09 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: xcO4O+cPZjW+YpeNJkHuiQDxIzK5vlHNiY3kZc03W30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:df:87:d4:dd:90:e8:e0:64:b9:73:a0:4e:e1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Aug 15 01:01:09 2026 GMT
Not After : Aug 16 01:01:09 2026 GMT
Subject: CN=3d7a5ca474e1b0f0b73367315f11df324505578a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:32:1a:a4:9a:f2:d4:e9:fa:39:11:d5:57:
96:1e:fe:77:aa:ee:b4:07:07:be:11:db:44:f8:19:
ca:1f:42:9b:d9:31:5e:c8:7d:d0:3a:35:54:29:54:
dd:ca:dd:06:68:65:73:d6:a7:06:d4:34:5f:32:47:
86:28:5c:ec:ff:34:cc:97:51:96:12:12:c9:28:6d:
5c:d0:dd:cb:1c:71:2b:b3:59:f0:79:66:e9:86:9b:
4e:f0:63:05:69:85:f3:f8:71:fa:09:9f:4b:b1:9d:
f3:3f:ef:3d:e6:be:48:cf:3c:ad:97:9a:37:22:00:
de:5b:08:31:55:26:a7:de:c5:9d:b3:f8:fd:cf:34:
4a:19:68:b9:f1:c7:29:ae:b3:fd:e4:c3:00:39:d4:
ed:75:90:95:ac:37:56:06:bb:d2:d7:13:f7:7c:af:
2b:00:41:9b:51:ba:5b:e3:30:fd:89:19:1f:46:68:
b3:cf:bd:ac:38:7c:f2:39:00:3c:f7:6e:0a:df:68:
86:05:06:1f:5d:fd:b4:d1:ce:df:04:0a:f9:73:36:
21:e4:ec:35:08:f3:06:6f:ab:de:47:90:67:85:86:
84:f9:d5:06:3d:7d:3e:22:8b:b6:bf:2b:be:4d:2c:
fd:41:6e:69:ea:8f:78:64:ff:0d:b9:43:c5:23:00:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:5C:A4:74:E1:B0:F0:B7:33:67:31:5F:11:DF:32:45:05:57:8A
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:d9:c2:6b:58:29:ac:fe:ab:26:31:70:2f:7a:42:77:c8:
33:c1:75:b4:41:11:08:ad:9b:bc:33:5d:34:32:fb:48:d5:88:
9e:a6:35:b4:33:b3:26:88:85:0b:fa:53:2f:77:9a:10:3c:71:
9b:76:ac:14:41:c7:59:97:9f:8b:10:c8:a2:d4:d1:c3:f8:31:
12:93:80:bf:7f:02:b9:cd:d2:ed:02:31:63:49:5e:01:5f:ef:
0a:7f:19:d0:5a:94:87:b2:28:f9:9a:2b:80:c8:b7:eb:fb:be:
9c:d1:c3:52:bb:ca:ec:6d:37:b3:b2:82:1f:41:e9:4c:80:55:
da:25:89:28:41:e0:2e:1d:83:45:c7:02:01:10:a2:9c:c5:fb:
25:58:4c:bc:d5:33:5e:f9:dd:b7:9b:92:2f:81:56:00:0d:4d:
30:d2:27:1f:e7:43:93:cc:2e:82:05:60:d5:c8:5c:a7:cb:bf:
58:96:a2:cc:7f:c5:e1:86:d2:3f:88:60:be:8f:4e:c7:28:ab:
33:29:53:83:cb:36:d7:c2:ac:fc:e7:db:f7:f5:9a:9b:8f:2b:
04:b2:02:88:ef:d3:ca:cf:b8:b7:fa:27:9a:8a:e7:55:91:bb:
e2:9c:6e:49:98:93:cd:d5:b5:d9:16:54:eb:e3:d4:b4:b0:56:
1f:68:64:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC79+H1N2Q6OBkuXOgTuFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky
YjkyMGIwHhcNMjYwODE1MDEwMTA5WhcNMjYwODE2MDEwMTA5WjAzMTEwLwYDVQQD
EygzZDdhNWNhNDc0ZTFiMGYwYjczMzY3MzE1ZjExZGYzMjQ1MDU1NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdoyGqSa8tTp+jkR1VeWHv53qu60
Bwe+EdtE+BnKH0Kb2TFeyH3QOjVUKVTdyt0GaGVz1qcG1DRfMkeGKFzs/zTMl1GW
EhLJKG1c0N3LHHErs1nweWbphptO8GMFaYXz+HH6CZ9LsZ3zP+895r5Izzytl5o3
IgDeWwgxVSan3sWds/j9zzRKGWi58ccprrP95MMAOdTtdZCVrDdWBrvS1xP3fK8r
AEGbUbpb4zD9iRkfRmizz72sOHzyOQA8924K32iGBQYfXf200c7fBAr5czYh5Ow1
CPMGb6veR5BnhYaE+dUGPX0+Iou2vyu+TSz9QW5p6o94ZP8NuUPFIwCdbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD16XKR04bDwtzNnMV8R3zJFBVeKMB8GA1UdIwQY
MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt
M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1
LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrTZwmtY
Kaz+qyYxcC96QnfIM8F1tEERCK2bvDNdNDL7SNWInqY1tDOzJoiFC/pTL3eaEDxx
m3asFEHHWZefixDIotTRw/gxEpOAv38Cuc3S7QIxY0leAV/vCn8Z0FqUh7Io+Zor
gMi36/u+nNHDUrvK7G03s7KCH0HpTIBV2iWJKEHgLh2DRccCARCinMX7JVhMvNUz
Xvndt5uSL4FWAA1NMNInH+dDk8wuggVg1chcp8u/WJaizH/F4YbSP4hgvo9Oxyir
MylTg8s218Ks/Ofb9/Wam48rBLICiO/Tys+4t/onmornVZG74pxuSZiTzdW12RZU
6+PUtLBWH2hkCw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:58:49 2026 by rpki-client