Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: chq1FkUqMY6Mb0C511b+4O6WqxzzTWFu/cZE8Nr/AJU=
Subject key identifier: AF:BF:00:62:C4:6E:55:85:C1:D7:ED:74:FF:06:9C:5E:9B:BA:FC:11
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019FADF74F8161336813D81629A9AD60EF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0944
Signing time: Wed 29 Jul 2026 13:01:33 +0000
Manifest this update: Wed 29 Jul 2026 13:01:33 +0000
Manifest next update: Thu 30 Jul 2026 13:01:33 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: JbRUUJWf3FZmgladY8tX6AUXcun1JG2V1EFK362sFxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:4f:81:61:33:68:13:d8:16:29:a9:ad:60:ef:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Jul 29 13:01:33 2026 GMT
Not After : Jul 30 13:01:33 2026 GMT
Subject: CN=afbf0062c46e5585c1d7ed74ff069c5e9bbafc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:c7:e8:dd:2a:0f:e4:6c:82:24:57:a6:a6:
11:d7:2c:c5:bb:d1:2f:e7:30:74:30:a3:22:3f:81:
0f:41:2d:f1:f8:b6:97:89:31:0d:48:82:36:c8:9e:
fa:5e:13:7f:63:e9:d6:d4:b4:7c:9e:d0:17:b5:e6:
f5:d4:c7:dc:ff:10:7b:8e:bb:81:c1:cf:c7:c5:ec:
33:83:33:63:89:b5:26:12:b9:50:fd:1b:9d:b7:bb:
c0:d8:6e:1e:16:81:d8:11:30:04:20:df:f1:bd:1c:
15:4b:44:4b:63:0c:12:bd:9a:d3:26:f8:a0:4f:25:
d9:14:c9:5d:e7:e7:77:cc:78:d5:49:17:88:bf:c8:
fd:d2:fb:44:20:59:53:6e:db:a0:74:78:a9:90:93:
af:cd:23:3e:b0:d2:86:05:a9:12:e9:81:38:b4:eb:
62:a5:14:7b:b5:ed:e7:c6:8d:d1:fc:34:99:70:03:
47:04:4c:42:f7:29:63:37:bd:40:a7:0b:f0:ba:a5:
df:27:88:5b:fe:42:c6:29:81:0e:0c:18:18:95:fd:
78:1e:41:a0:28:d5:51:bd:f6:f0:6b:f9:0f:e6:2c:
75:ca:13:8f:c0:15:96:99:33:3b:9b:cd:6a:c5:c1:
cf:74:5b:72:7a:71:bf:c9:61:05:fe:f6:26:5a:ad:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:00:62:C4:6E:55:85:C1:D7:ED:74:FF:06:9C:5E:9B:BA:FC:11
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a4:9e:c9:c8:cb:ce:b1:3c:77:9c:e0:84:22:22:79:6d:67:
c1:1f:61:98:15:d6:a1:0e:b5:c2:21:f4:4f:e3:39:39:b5:bb:
ab:52:d5:ed:cd:25:57:6e:4a:40:fc:cf:a4:f3:e6:c1:ba:a6:
35:15:6b:32:4f:16:ea:db:3c:f8:5b:72:9b:29:93:d3:23:47:
6b:1b:34:aa:c6:43:97:7d:35:70:8e:99:13:9d:d9:5b:d1:07:
16:0d:b4:4d:d9:e0:99:09:0c:1c:d0:56:43:2e:c9:8c:8b:cf:
c8:01:ff:c1:05:8c:d2:e9:01:17:76:8b:c2:86:b8:2d:b5:44:
3e:c2:cb:b2:0c:cd:65:45:95:24:dd:1f:a8:f1:75:83:0a:92:
4e:70:ee:e7:3f:bf:e4:57:ab:32:3b:b7:40:52:c1:5a:04:07:
b3:66:5e:92:7c:fc:38:64:0a:d8:fb:f6:9e:b3:f7:30:9b:1c:
79:bb:c7:83:d2:76:c2:75:ce:4e:40:d4:eb:16:6e:88:ee:cd:
ee:50:e0:67:8f:c7:60:02:9d:02:f6:58:db:7b:4c:8c:07:0f:
bf:ee:50:bd:6a:60:57:3e:72:5c:df:e4:fa:c8:49:e3:89:80:
0a:01:4a:14:9a:6d:72:1e:82:94:49:be:32:85:19:a3:99:d3:
96:54:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:04:26 2026 by rpki-client