Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: xUTRWl9OvvYNnFQMnr02LWbSEn2ag6x6TQV9y71fNdI=
Subject key identifier: AB:E6:6E:95:AD:C4:C4:FA:A1:36:AF:4B:DF:88:03:59:16:B9:56:D0
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 01A137ECF2AF20A2D15E4DFB86B57E1BB35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0A10
Signing time: Wed 14 Oct 2026 01:00:37 +0000
Manifest this update: Wed 14 Oct 2026 01:00:37 +0000
Manifest next update: Thu 15 Oct 2026 01:00:37 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: CO0WrNAFCJiSD12bRuy/WLzr1RCDOsxnm1t+P3pwum8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ec:f2:af:20:a2:d1:5e:4d:fb:86:b5:7e:1b:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Oct 14 01:00:37 2026 GMT
Not After : Oct 15 01:00:37 2026 GMT
Subject: CN=abe66e95adc4c4faa136af4bdf88035916b956d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:f0:43:02:81:79:b0:66:4f:b7:bb:95:cd:
a5:d8:07:ab:aa:bc:72:01:20:ed:92:c1:ba:d5:ee:
d9:5e:a6:c3:fd:67:34:80:c4:34:51:e7:61:c8:f7:
cf:4a:6f:7c:5a:8b:fb:7b:68:39:b9:8e:ac:83:16:
56:0c:dc:f2:2f:8f:a6:01:de:6a:ab:c2:83:a3:69:
e5:aa:0b:f3:fe:6a:10:43:a3:7c:21:43:58:cb:c8:
01:09:b0:c7:64:36:19:0b:e2:0c:12:91:1b:46:aa:
08:a4:54:8c:43:dd:83:56:11:7c:a5:a6:e4:d3:ed:
9b:b4:c6:70:be:26:c2:88:75:1e:c9:70:09:29:eb:
21:c9:7e:bc:9e:01:b4:99:46:67:37:fe:81:40:7e:
59:6e:5d:22:e9:98:53:69:5d:0a:e4:23:94:32:70:
ed:2d:47:fd:ef:e5:ec:87:cc:6c:0b:7d:7e:a7:2b:
88:a4:59:7d:01:01:d7:c9:9c:c0:82:7c:7c:97:7d:
e3:d9:4e:3e:7f:f0:d0:9e:94:05:13:80:2a:58:e2:
ab:28:17:84:c3:3a:b0:2c:ed:db:0c:61:b5:99:2f:
b7:6b:de:63:57:7a:35:d8:d5:bd:3d:9f:ec:b3:5d:
e3:b1:74:b3:c6:69:83:fd:0b:4c:3b:a6:2f:4d:c0:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:6E:95:AD:C4:C4:FA:A1:36:AF:4B:DF:88:03:59:16:B9:56:D0
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:20:ea:f6:80:ed:80:f2:94:3d:74:ee:37:67:be:9d:26:
c3:dc:41:fb:1c:a5:00:0a:23:0f:4b:35:2b:a9:45:04:c5:32:
eb:70:f1:87:b9:c2:c7:3a:eb:77:a4:6f:34:1f:89:f0:ba:04:
44:d8:26:cb:4d:11:e9:40:03:6b:fe:7f:12:23:db:ac:d8:0d:
a8:a9:5a:66:7f:8a:af:b5:b1:a3:1c:54:f5:00:51:73:06:e7:
a6:81:80:14:ed:99:c1:f1:46:64:2f:89:b8:26:b3:a8:81:e9:
1c:1a:02:7c:3c:74:c7:66:d9:89:a3:d4:68:b2:7b:5f:9f:47:
c2:11:c0:96:6d:fd:b4:16:b1:8b:5c:39:5b:26:0e:1a:ad:58:
c4:41:c6:34:31:e1:50:f1:64:a0:7b:d8:49:62:4f:a6:0c:5c:
77:d6:67:d7:6c:5a:87:42:b8:fd:2b:ee:0e:96:e0:83:d6:09:
ad:5a:9f:ec:dc:53:d9:52:b0:98:c3:da:ac:24:89:c3:65:c8:
4c:55:db:60:d2:ed:3f:28:aa:93:a6:b7:23:12:a5:49:ba:9d:
af:45:e3:e8:42:a0:1f:ba:e9:54:b1:2a:96:30:c5:b3:41:78:
9d:da:cb:5b:c0:e9:b5:ad:48:3c:5b:b1:f1:39:ae:6b:08:bd:
97:9a:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:41:29 2026 by rpki-client