Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: kF8Rruuyd8VkSgrYZe5CkXJklP7/Bu3eKJKwXO+SYsI=
Subject key identifier: 2D:AE:6D:78:58:33:AB:D2:AA:63:D8:02:CC:A0:18:4D:80:42:EA:52
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 01A10994B6B1310B83FA9C57267051878D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 09F8
Signing time: Mon 05 Oct 2026 01:01:43 +0000
Manifest this update: Mon 05 Oct 2026 01:01:43 +0000
Manifest next update: Tue 06 Oct 2026 01:01:43 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: 7Ci4gA6G3/OXCoaQWpk7JLAZZUCbojBP7l9KLAxSMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:b6:b1:31:0b:83:fa:9c:57:26:70:51:87:8d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Oct 5 01:01:43 2026 GMT
Not After : Oct 6 01:01:43 2026 GMT
Subject: CN=2dae6d785833abd2aa63d802cca0184d8042ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:24:90:ad:18:03:88:e2:cb:5a:07:ea:7d:
ff:b8:24:a9:86:ff:e5:75:a6:9f:db:ab:47:2a:a9:
73:2e:c4:26:c5:e4:13:6f:de:54:a0:21:c7:bb:74:
ab:a9:e9:95:eb:93:29:46:3b:da:f3:9c:99:c0:ea:
66:ed:6a:45:7f:0f:d3:b2:d6:a3:6e:1f:2f:fc:da:
1c:ce:99:85:9f:da:0d:56:be:e8:de:c0:a5:30:6e:
34:1f:0e:fe:17:60:ad:a2:fe:87:3d:3b:7b:8d:52:
c3:16:5b:87:6f:dd:7c:da:c9:9b:85:82:3a:f2:f7:
60:49:5f:6f:03:3a:c1:63:4d:75:24:9f:cd:e6:ee:
f3:2c:26:0f:4f:9d:67:7c:84:19:52:10:7e:80:f1:
24:d9:5d:0a:38:32:5b:99:8f:82:20:8c:5f:35:58:
a1:cd:78:2d:87:64:49:bc:54:94:06:da:ce:60:10:
4d:25:6f:7f:1b:b5:88:3f:aa:f3:68:88:22:b5:04:
b5:f2:53:bc:bb:f2:b0:1e:c2:e4:a3:fa:bf:cc:5b:
86:44:d0:8b:93:d8:c6:e4:77:6c:0d:3b:a4:01:6d:
1f:4a:da:96:d0:61:69:2c:9b:1b:1b:6f:07:76:f9:
07:b0:39:ea:81:67:a2:9b:2d:48:ed:ec:34:56:7e:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:6D:78:58:33:AB:D2:AA:63:D8:02:CC:A0:18:4D:80:42:EA:52
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bc:28:19:ef:4f:0b:3b:16:b9:53:9a:cc:db:de:21:b7:3d:
69:30:bf:03:13:33:b9:81:fa:9a:73:23:cd:f0:28:54:74:a8:
03:cf:a1:4f:6f:a8:ee:3b:7e:2e:4c:67:57:54:a8:82:fc:38:
39:ca:87:1f:f6:00:61:b3:92:62:9c:52:bf:8f:d7:43:6e:b2:
3b:b0:60:90:11:26:13:f5:ec:b9:e5:c6:f4:fc:db:82:7a:3f:
be:f6:39:1b:68:dd:f6:b7:f5:69:ef:0d:74:74:a9:5d:a5:a6:
0b:d8:a8:ba:13:76:3a:18:45:98:66:bc:3c:3f:0a:05:f4:8f:
64:23:8e:be:2f:45:60:6f:01:bf:f1:dc:08:15:c1:ef:7b:8a:
00:ff:ac:47:0b:fc:bf:6e:a2:53:b5:33:8d:2a:ef:42:8d:aa:
7a:f6:9b:29:dc:dc:74:f0:50:8f:c7:27:ec:ec:b2:c6:da:b6:
73:6b:93:1c:88:70:7c:5a:e9:f4:7d:eb:2d:94:1d:5d:84:b9:
52:5d:58:3c:a3:d5:f7:07:9a:de:d0:da:ec:66:b8:97:1b:1a:
47:10:d0:d3:22:4e:80:ab:24:b6:6a:85:8a:08:b5:df:f0:c7:
31:5e:54:2b:84:29:35:fe:90:4a:b3:a6:41:a7:43:9b:04:16:
ea:a1:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:39:01 2026 by rpki-client