Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: nKcY/ZJQt33/k0aGo5a5n95S7kBdEiRexPV3+pdIUdY=
Subject key identifier: 39:F5:BF:B5:C9:B7:3B:04:73:8A:B1:27:C6:FD:E8:3D:1B:0E:61:B1
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 01A107A5A1407123E0EE32A60C2165B26873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 09F7
Signing time: Sun 04 Oct 2026 16:00:57 +0000
Manifest this update: Sun 04 Oct 2026 16:00:57 +0000
Manifest next update: Mon 05 Oct 2026 16:00:57 +0000
Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: T7yoZVFXThbbLnlOXghuLYtiQdTWQFd3wDVgYF+4dvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a5:a1:40:71:23:e0:ee:32:a6:0c:21:65:b2:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Oct 4 16:00:57 2026 GMT
Not After : Oct 5 16:00:57 2026 GMT
Subject: CN=39f5bfb5c9b73b04738ab127c6fde83d1b0e61b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:3c:9c:88:cf:48:1b:c2:72:8f:ad:c0:8f:
4d:1c:27:78:8a:27:3f:63:fb:71:6b:25:ab:00:cf:
e2:ee:5c:c9:61:d2:a9:21:76:21:05:40:a7:4e:1e:
92:8f:34:d4:11:bf:2e:50:68:4a:54:4d:cb:44:0f:
51:80:68:38:e3:ec:ce:f3:a5:a2:5a:36:71:a8:f7:
a6:93:67:de:30:06:66:56:a1:b9:3a:18:f2:03:b7:
9e:25:c0:6a:78:10:64:c0:ff:2f:58:ec:ff:5a:13:
58:6a:bf:ee:dc:08:bd:9d:b2:fe:2e:27:27:9a:48:
4d:fc:6c:cb:2d:0a:c3:39:3c:8f:6e:20:ce:d5:18:
35:a2:01:2d:12:a1:20:cc:db:7c:4b:46:55:e8:75:
86:37:e8:2c:db:e2:2f:65:a9:ad:41:79:bf:3c:a5:
48:0a:31:64:5d:f8:da:28:1a:8c:79:3f:6a:c6:10:
d4:c3:80:f4:9f:24:95:9e:39:6a:1b:89:9a:4b:2f:
26:b4:fc:4c:9d:e8:4d:86:8d:14:b2:60:58:ab:db:
c0:fb:30:ef:dc:d3:5a:aa:57:46:c7:09:bc:e8:1d:
8d:00:30:d1:ac:01:67:2b:7d:55:43:00:9b:75:7f:
3f:ea:91:cd:0c:5d:cb:36:d9:65:30:08:35:91:3e:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:BF:B5:C9:B7:3B:04:73:8A:B1:27:C6:FD:E8:3D:1B:0E:61:B1
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:89:11:9f:5a:ba:97:6b:14:1b:c5:38:01:f8:c0:15:13:da:
03:5e:41:91:db:59:cd:39:c4:b0:1e:90:66:cf:85:12:da:da:
08:26:0c:35:c1:94:69:d9:21:c2:58:39:67:9d:1e:ec:36:c5:
7d:3e:6e:58:17:73:d5:84:0f:db:05:fd:c0:af:ec:58:c4:b2:
1b:80:bd:14:de:b5:7c:ed:c8:83:0e:36:26:8f:53:3d:2d:fc:
ff:87:10:e9:b2:55:26:f8:4e:8b:b4:e4:aa:1c:43:40:1e:b4:
4c:3a:5d:9a:6f:a1:a7:6e:8d:9b:1c:17:13:3e:2f:c3:43:fe:
78:ef:6a:75:9d:fc:ae:35:04:c3:b6:47:94:93:11:52:4a:86:
87:48:45:d4:06:b6:db:bd:68:d4:a7:da:ca:3e:3b:53:1d:d5:
78:db:3b:79:19:d2:f5:9d:a1:18:75:22:86:8d:c3:c0:57:8f:
b6:8a:ce:e6:a6:7c:c9:cb:40:f3:72:69:ab:fc:76:c2:ec:fe:
90:3d:e0:fd:a7:63:b9:f8:30:fe:be:45:29:e5:b4:65:63:c4:
82:ee:de:fa:cc:71:57:3c:44:f4:77:b2:94:11:e7:52:50:33:
60:09:17:c6:94:6f:40:47:08:6d:de:ea:1b:eb:bf:02:37:50:
79:ea:3e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:15:14 2026 by rpki-client