Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File: ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier: lYpe+93ybrkbuAsJggEHxPUBHVTXUb8xyKqX6emyhFo=
Subject key identifier: BC:42:B4:CF:68:72:D4:B1:A0:D2:D0:4B:22:BE:D8:AE:2B:70:17:56
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial: 019D37F73D2BEEF13C1A075174F02927E0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number: 137E
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: 0K2GHqkNtHFH0tB9nWXJ94AFGAw.roa (hash: 5NSYWTgnAdKm8Hqko31XGdj55Gsj1FCzKYaW0vszh0w=)
2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: 6N2bCwNm7spbp1DEFH9+Jvor8Bp98XcsvyR1rLpjSrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3d:2b:ee:f1:3c:1a:07:51:74:f0:29:27:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=bc42b4cf6872d4b1a0d2d04b22bed8ae2b701756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:36:59:cd:3d:d7:e5:fd:ac:51:41:c6:2d:
db:fc:23:17:4b:84:fa:d6:15:24:f7:9a:5d:2e:b8:
04:23:b6:3f:13:ba:e2:83:e1:fd:5e:1c:de:74:4b:
71:02:0e:5c:e1:19:c6:81:00:d4:e4:b7:7b:f6:95:
cf:fa:99:67:dd:a9:2f:24:13:5a:b6:8d:03:6c:63:
a9:c9:95:0d:08:de:6a:6b:fc:71:e2:6e:b4:88:85:
cc:40:b8:b4:d4:e6:3c:a1:ce:01:5b:e0:d2:d7:52:
d7:0a:22:c3:cc:17:7b:9b:2a:ae:24:44:84:55:14:
ab:a9:f1:44:80:71:68:de:f4:2a:9f:bc:48:5d:85:
aa:29:da:e2:47:e4:ff:65:95:73:db:ed:41:b7:be:
0b:4e:a2:76:b0:ce:7f:f8:90:f1:56:f7:1b:42:af:
21:6d:e5:d3:31:38:f7:e7:b3:9c:6e:a6:6e:4c:44:
e9:48:60:c9:a9:6a:c1:c7:2a:a5:69:6a:ac:a5:a4:
d8:ec:78:6e:50:ba:1f:fa:73:cc:97:94:a0:58:95:
eb:e4:09:78:b7:b3:1c:5d:fe:c7:ed:d0:a1:42:e0:
d8:f6:59:1d:75:fc:6e:3a:d9:f1:2c:a3:01:25:9a:
2e:22:5d:a3:6d:84:49:98:22:c3:46:b7:9a:e0:bb:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:B4:CF:68:72:D4:B1:A0:D2:D0:4B:22:BE:D8:AE:2B:70:17:56
X509v3 Authority Key Identifier:
keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:62:f5:b6:89:42:e9:0e:b8:ee:36:a9:6a:3f:95:59:5c:
c9:c3:fa:51:bc:b5:f9:f8:94:29:56:10:40:73:60:20:30:e5:
31:fe:c0:1d:d7:1f:5f:7f:e9:8c:fe:37:65:a2:57:75:e2:92:
2a:c8:5a:7a:b5:2f:78:a9:97:6b:a2:b3:92:d2:cb:c9:2c:a9:
53:73:48:6c:6a:08:ec:da:c4:20:b0:47:71:33:0a:df:87:7c:
39:c7:eb:06:cc:cf:20:9a:4b:c4:38:50:8f:ac:93:5c:1a:a7:
17:23:a2:8e:75:42:51:97:38:d3:f1:1a:bd:a3:5c:16:0f:e0:
b1:ac:f9:ba:d2:6b:17:6f:20:04:54:80:16:ee:d6:97:95:83:
2a:31:02:42:b9:18:8d:f4:e9:b9:5a:dd:7c:f8:d6:9e:1d:12:
1b:4d:09:e0:81:6f:0d:b4:5f:0c:96:33:ad:0d:ee:f4:99:04:
61:65:ea:9a:a1:79:a5:68:23:53:ee:f8:5c:82:c6:4c:cd:19:
26:f6:f7:7c:53:4c:8b:73:bb:09:03:c1:44:fb:8a:d7:af:83:
e6:21:f0:0e:0a:c7:d0:d3:57:87:7c:6e:5e:c4:2d:a4:53:a6:
0d:bc:5f:2e:7f:a1:22:56:bb:2c:f6:74:5f:30:fe:fc:70:a8:
5d:cb:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:12 2026 by rpki-client