Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: oUcDOC8xYC/KJUp//IIJKFW7ifVJoeBlKmN5azw4jq8=
Subject key identifier: 28:D8:91:DF:F5:4D:33:AC:31:66:A5:40:DC:9A:91:29:C7:30:1E:A0
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019D9EBF38DCFF4D30018F1B8D3956F6B274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0833
Signing time: Sat 18 Apr 2026 04:00:25 +0000
Manifest this update: Sat 18 Apr 2026 04:00:25 +0000
Manifest next update: Sun 19 Apr 2026 04:00:25 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: L9TUOykvooR8aLy4yKC8Q8sD8wMdBMLH7JCew570JC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:38:dc:ff:4d:30:01:8f:1b:8d:39:56:f6:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Apr 18 04:00:25 2026 GMT
Not After : Apr 19 04:00:25 2026 GMT
Subject: CN=28d891dff54d33ac3166a540dc9a9129c7301ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:6f:17:db:ab:af:1a:f3:f0:d5:3a:2d:48:
44:1b:88:e6:73:08:d1:cf:55:3e:97:6b:63:0a:76:
f6:fe:c8:95:3f:41:dd:89:ea:0b:65:33:97:7f:3a:
a8:bc:3f:c4:a0:c3:8a:c3:8d:c0:f5:a7:ba:84:e7:
0f:34:2f:c8:8f:8d:93:f3:0c:18:8f:31:d5:0e:71:
62:41:1e:eb:d3:37:c9:3a:dd:bc:11:5c:6d:f6:15:
2e:20:39:47:fd:88:cb:e4:59:14:1b:73:9e:7b:69:
2f:0f:dc:b5:60:57:9f:4b:c3:e9:42:a0:55:de:62:
60:59:a3:9f:1c:f6:d5:7b:1c:79:94:b4:fb:c5:e4:
6c:96:66:c8:cf:a0:94:96:54:28:c1:b1:b1:e5:f2:
88:63:93:81:c8:bc:87:98:03:66:52:1f:1d:c7:68:
d5:e9:bb:70:4e:49:b2:23:f3:c0:72:2d:7c:37:d1:
13:4c:fc:94:62:c6:7f:c3:ec:a3:4f:ec:25:11:0f:
e5:7b:24:27:b0:40:6b:c9:6d:f9:c8:8d:0a:84:f8:
99:38:bf:c6:c8:5a:6b:98:35:2c:ad:78:52:84:97:
47:ba:aa:97:2d:16:22:5c:fc:f6:d2:c6:32:46:35:
85:cb:12:49:53:ba:23:71:44:99:cd:95:c6:3e:47:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:91:DF:F5:4D:33:AC:31:66:A5:40:DC:9A:91:29:C7:30:1E:A0
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4b:d0:86:15:0a:6c:1e:9d:0a:31:5f:7e:c9:84:20:d2:ec:
59:72:4a:2b:90:a1:df:84:5d:aa:3f:f2:eb:41:49:2a:b7:a1:
0d:97:a7:60:5c:74:1f:ea:ed:a7:74:27:f7:52:26:c9:6c:0b:
f5:c8:22:ff:2d:b5:7c:f5:08:4e:64:a9:76:45:0e:17:05:e0:
d2:86:f3:b1:f4:d3:33:5c:0b:b0:30:f2:55:33:e7:49:b0:d1:
ad:5a:41:38:f4:b3:07:8a:ab:4f:a5:d3:27:6e:fa:a1:bd:ec:
3b:26:c1:10:4c:28:bc:3d:77:3f:4d:58:6e:12:d9:70:31:5c:
1f:bb:c1:e2:c2:39:78:d7:53:72:d8:ec:9e:94:a6:9e:1d:d2:
4b:30:cf:d6:b9:88:c5:4f:9f:9a:d6:37:93:c5:73:12:c4:12:
ca:b2:48:ad:7b:48:96:33:28:9e:6c:32:3f:0d:75:da:b4:60:
ff:50:43:80:f0:19:88:54:98:68:10:6a:8e:f0:d0:b6:2b:8e:
b6:30:a3:6d:9a:f8:f4:a6:48:85:0c:1a:31:76:ef:06:45:2f:
a7:6f:be:fe:5b:83:f7:d0:91:be:b7:82:40:48:05:19:1f:64:
2c:c5:43:12:9c:bb:af:fd:fc:ca:90:ee:91:50:59:3e:78:6e:
0d:32:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:18:59 2026 by rpki-client