Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: hBKUYeLDBQwH8wJgok0onoendWAstjYRpi1XKFCfVYw=
Subject key identifier: C6:7C:84:CF:C3:AB:15:F2:21:C5:05:E4:30:B5:63:34:31:A3:4A:56
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019F94DB606D20098771E9B76E9C2DCED1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0937
Signing time: Fri 24 Jul 2026 16:00:32 +0000
Manifest this update: Fri 24 Jul 2026 16:00:32 +0000
Manifest next update: Sat 25 Jul 2026 16:00:32 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: AIa0Tys0POHYZtBsGaodZ6MopZqiXzUgN3caVE1cy8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:60:6d:20:09:87:71:e9:b7:6e:9c:2d:ce:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Jul 24 16:00:32 2026 GMT
Not After : Jul 25 16:00:32 2026 GMT
Subject: CN=c67c84cfc3ab15f221c505e430b5633431a34a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:db:94:a2:c1:70:59:e7:74:c7:0c:75:53:
21:be:09:4c:4f:14:58:68:85:e6:9b:24:a3:e5:9c:
ce:f3:fd:41:86:36:ce:da:14:bf:d4:62:73:62:77:
12:7a:a3:51:8c:d4:1f:d6:d6:16:a2:05:61:44:2f:
94:ba:f5:08:9e:a6:2f:22:33:34:54:26:16:d4:5a:
b9:48:0b:a3:73:ec:d5:de:51:86:16:e6:d6:6e:1d:
3c:88:06:df:4c:6a:b0:2a:22:e3:e7:69:a7:b6:99:
ab:7f:3c:25:ac:09:9f:97:e3:be:5a:f9:b3:a1:c9:
4b:2b:83:b7:bb:37:d9:e4:23:16:31:d7:e8:03:df:
0a:60:21:f6:bc:ed:bd:cf:c0:51:3d:5e:05:78:de:
a2:ed:e5:1e:30:5c:b1:5f:d6:0a:e3:44:41:5c:b5:
e8:f1:f7:6a:f5:c9:af:b3:28:75:27:d9:53:ce:e0:
23:cf:2e:3e:78:82:a6:a1:27:9a:d5:0f:b4:50:7f:
5b:27:25:67:26:48:96:18:bf:da:88:9c:43:ca:5c:
3e:30:4f:1d:c2:50:a6:2c:fb:cf:ff:3c:9d:cd:c6:
96:7c:6c:ab:9e:58:5d:43:25:5b:5f:35:37:fe:f4:
13:ac:69:a3:c6:72:12:4a:c7:39:c9:e7:c6:0b:68:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:84:CF:C3:AB:15:F2:21:C5:05:E4:30:B5:63:34:31:A3:4A:56
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:71:d2:32:8d:65:6f:3c:c6:97:72:e3:f7:ef:57:37:08:
24:3f:0a:9a:28:38:98:ec:a8:68:77:9b:d6:59:1e:7c:26:85:
c2:be:aa:91:17:36:01:3b:ab:1f:9e:b7:fc:92:54:cc:81:a8:
bb:d6:3e:af:71:5c:25:02:1d:57:a0:ee:94:62:1c:a5:39:1e:
ec:06:44:1d:93:a3:a3:2b:36:13:d6:c9:f8:08:a6:78:44:73:
67:4a:69:8b:a1:ef:d9:29:cd:44:e1:0e:f5:ee:41:9d:29:ea:
a8:80:39:3e:67:e7:9c:53:1b:b8:77:3e:1a:af:09:df:8e:f6:
92:9e:63:3f:c9:e4:a9:75:ba:9e:e8:0c:dc:f7:f6:51:06:09:
22:e5:50:22:16:86:68:ac:54:77:92:fc:3e:4b:0f:ba:ac:a7:
fe:87:45:d9:48:4e:d9:45:a5:64:92:7b:e1:0b:05:1e:56:47:
f0:69:b6:97:7c:e2:cc:6e:60:d6:27:fd:fc:d7:27:66:6f:2c:
b1:a3:43:2f:6c:0d:d7:e0:b0:1e:88:22:e3:49:f0:f9:fa:d7:
6c:a3:86:89:a6:85:e1:27:bb:74:25:6a:e3:93:df:bf:16:37:
ac:35:04:fa:75:c6:02:fb:25:e4:25:04:11:ea:5d:6b:ae:8b:
4e:ca:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:28:30 2026 by rpki-client