Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: PMhqXOD6ku7dyzbU5txX9XPOWvZAeK9SrMIqqbDdUrM=
Subject key identifier: DC:B7:11:82:BE:EE:B6:00:2F:D0:72:40:49:7C:6D:87:68:9D:5F:16
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019CAD5A33DD0D75FC73E4632E633AF9AFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 07B6
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: W/O2qPGLe//H4EqnCGXeED3VZWVZkWeeqCtbeH1bZE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:33:dd:0d:75:fc:73:e4:63:2e:63:3a:f9:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=dcb71182beeeb6002fd07240497c6d87689d5f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:2b:59:cc:72:14:ae:8f:e2:9b:96:32:e9:
48:79:bc:be:4d:69:b9:ab:3e:0d:7a:0f:bc:26:de:
07:5e:d0:34:ac:48:93:24:8f:45:83:31:0f:b6:61:
9f:a8:8e:97:bd:6b:fc:fd:6a:b2:01:6c:de:d3:b4:
c0:5f:b0:1c:6e:d4:cd:49:7d:f0:5d:36:0a:08:64:
42:4d:f2:9b:88:d2:88:99:18:ce:71:21:87:17:09:
7a:46:9c:94:51:b3:0f:3e:41:bd:98:60:c4:60:d5:
f4:f3:9f:14:77:ae:d8:ba:e1:d8:44:0c:87:d8:01:
eb:66:fa:66:4e:62:5e:73:47:d9:21:dc:32:88:b9:
e5:43:ce:a8:ee:c3:ce:a9:6d:64:4c:14:2d:62:45:
85:77:83:12:fd:d8:1d:11:4d:78:d9:58:6f:57:a3:
e9:ba:d6:27:69:cf:14:33:57:17:01:5c:4f:29:6c:
91:87:a3:8f:d5:cb:c4:60:82:27:8f:c3:9a:35:d9:
b5:05:94:f5:f9:58:e5:68:bd:9f:a9:41:95:e0:ef:
32:6f:a0:d7:c4:e5:04:31:b1:2c:e1:bb:36:59:cb:
26:6e:1f:c1:5e:82:88:ff:a3:79:a1:11:09:7e:04:
9a:68:e5:ee:49:38:a9:b9:71:14:f4:de:c1:20:60:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:11:82:BE:EE:B6:00:2F:D0:72:40:49:7C:6D:87:68:9D:5F:16
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:25:43:5b:c8:69:09:04:69:8f:a2:2c:d8:da:81:b3:00:
4c:6b:11:fc:ba:ff:f3:80:5c:a3:b6:18:5b:33:41:0c:60:ab:
f1:97:d2:35:7c:d2:52:3d:03:a4:93:57:e1:81:f2:73:a0:87:
27:e6:0f:99:2f:61:99:d4:e8:cf:ef:bd:4c:10:e7:61:51:9b:
b1:01:87:33:aa:fd:e7:6b:75:50:b4:55:ff:96:40:26:f0:51:
14:c6:99:53:5c:64:01:fe:fb:b1:e8:3d:23:5b:8e:8e:61:a6:
77:f1:d1:a7:8d:6c:36:c6:65:71:70:56:5a:17:b6:74:b2:03:
9c:e4:ee:5e:80:dc:be:98:df:7b:eb:df:12:ca:b6:60:6a:04:
5c:ef:bc:dc:76:21:b0:55:4e:37:63:0d:eb:71:31:13:11:e9:
2b:32:83:e9:cd:89:3a:38:fb:2f:bd:33:4c:4c:3d:52:cf:df:
c3:6d:0a:99:7b:03:55:68:2d:4e:c8:7f:68:54:e1:ae:c5:fc:
b9:ef:98:1b:2a:35:2d:dc:39:7b:2c:6b:95:89:e0:1f:2f:b2:
8d:8f:37:af:84:d5:1e:29:a3:95:2b:81:16:4a:ba:6b:b9:e6:
0f:dd:47:5c:97:63:45:de:7e:94:f3:a3:67:ff:d2:c0:7d:73:
13:c7:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:41 2026 by rpki-client