Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: R+Eib+tZnTQ1b2tlJ+3kG+9pvXZ0I4SVkvxt/RmtlX4=
Subject key identifier: 48:C5:9B:04:F7:0B:CB:DB:4C:8F:07:0F:21:01:4E:51:8A:0F:49:4E
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019D38666039D7738CA0049218EF50AE6329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 07FE
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: Bl2jRohgOl6LvbwTW9LfGElCJo0MhCASOTzMqzpEyew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:60:39:d7:73:8c:a0:04:92:18:ef:50:ae:63:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=48c59b04f70bcbdb4c8f070f21014e518a0f494e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:13:49:06:22:22:04:3c:33:b5:18:45:45:
48:42:5c:9d:1c:b2:0a:3f:2a:e2:e2:cb:c9:e6:db:
f4:53:f9:ed:47:c9:b0:92:90:3d:81:72:bc:01:74:
2c:59:68:de:f7:9e:36:30:f5:8e:41:1a:9e:7b:5f:
a8:72:bb:7a:58:d7:6f:3d:ae:54:0b:93:0f:47:ae:
80:f6:4c:82:6d:f2:a7:ad:4c:23:f4:e0:7d:be:af:
d5:39:d9:e6:54:47:4b:25:f9:fe:9b:23:a8:3e:bc:
6a:ef:6f:21:0b:6d:95:7d:6a:ff:f8:6e:99:d7:34:
01:84:f5:4e:6f:98:63:b4:cb:b5:bd:a5:75:7c:51:
4d:76:7d:a9:97:fe:84:cf:9c:00:65:12:29:2b:eb:
99:20:94:bf:3f:82:04:58:ea:10:48:eb:c2:83:61:
e0:7e:8e:d8:80:70:06:ad:d3:23:85:5b:cb:f7:2c:
45:35:21:6d:d1:e1:e4:48:a7:09:7f:53:c6:9c:d0:
1f:c1:2d:54:0f:dc:83:bf:0d:84:5a:d2:2a:37:b0:
a5:25:8a:d6:c3:be:f9:59:1e:f1:43:c7:1a:22:d7:
aa:b8:6e:6c:d0:d9:9b:fc:3b:f8:85:d7:1e:d6:2e:
42:d0:d1:6c:63:19:1a:0a:fb:d0:f0:aa:5a:34:29:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:9B:04:F7:0B:CB:DB:4C:8F:07:0F:21:01:4E:51:8A:0F:49:4E
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:38:47:8f:f5:f2:0f:16:5e:c3:0c:8d:eb:a6:92:42:70:bf:
d1:01:46:0e:09:bc:93:88:4b:23:dd:03:05:90:b5:99:08:a4:
19:9a:da:7a:1f:f7:43:31:cb:65:dd:5e:c3:a3:3e:c5:47:b0:
a4:8c:aa:d0:c0:71:c2:c5:8a:c8:79:eb:81:70:23:bb:c2:a0:
be:26:54:95:00:18:b4:2c:76:f6:0a:ac:bc:6f:79:8b:ae:72:
a6:8a:8d:74:87:6a:ee:e9:0b:6e:6d:cb:3d:89:7b:16:72:ef:
f2:f9:35:a5:36:fa:d1:d8:d1:b9:52:32:b8:44:77:bd:ce:3a:
78:d3:b5:77:61:7e:de:5c:cc:39:aa:e4:95:93:28:79:74:a8:
90:e5:d6:b9:6a:33:81:d2:91:c5:83:1a:b4:d9:e5:75:25:88:
56:dd:f4:d7:70:18:2f:9c:ad:2f:4e:00:8d:7d:39:26:d1:f0:
bd:84:a0:35:60:59:84:81:78:07:e6:50:8f:62:20:c0:4e:2d:
98:8a:e5:24:47:07:e8:23:c8:68:9a:f3:a2:c2:cf:0a:c5:4f:
a0:c3:3e:e4:6e:e9:68:c7:28:d0:17:30:10:13:83:dc:20:01:
20:db:8b:fa:39:b1:57:b3:40:bd:0a:12:b2:a7:43:97:a5:6a:
d2:54:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:54 2026 by rpki-client