Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File: ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier: ZIlJbb4BUz6SG40zBi9JJIZWSsKpPLWdFU3Z/p3x2lE=
Subject key identifier: 70:71:BB:0E:EF:F3:9B:E2:BC:69:18:A4:75:5E:3D:91:9D:BD:16:FD
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial: 019CACEBE7D96ADFA84003838924DCDF8CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number: 1336
Signing time: Mon 02 Mar 2026 05:01:07 +0000
Manifest this update: Mon 02 Mar 2026 05:01:07 +0000
Manifest next update: Tue 03 Mar 2026 05:01:07 +0000
Files and hashes: 1: 0K2GHqkNtHFH0tB9nWXJ94AFGAw.roa (hash: 5NSYWTgnAdKm8Hqko31XGdj55Gsj1FCzKYaW0vszh0w=)
2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: qmc/d6fDAyns3F2BX7nzQ/75t9MXqXijM8S663KFYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e7:d9:6a:df:a8:40:03:83:89:24:dc:df:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Validity
Not Before: Mar 2 05:01:07 2026 GMT
Not After : Mar 3 05:01:07 2026 GMT
Subject: CN=7071bb0eeff39be2bc6918a4755e3d919dbd16fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:44:af:fd:ee:e9:1c:ac:86:cc:9c:f1:ef:
f1:6b:b0:cd:ec:85:02:71:76:5a:3f:bb:e0:b0:2d:
5b:09:6b:7c:37:3c:d4:fe:02:5a:8f:fb:3d:8a:53:
a1:c6:0d:08:49:53:ed:9a:9f:48:5c:8d:12:5f:76:
6b:b5:4a:50:2d:f2:87:f7:ca:ef:f0:b2:85:e2:3c:
ba:bd:2b:26:79:6c:cd:bf:3e:fe:6d:79:36:86:c8:
71:31:28:5b:a1:04:8b:c4:78:29:9d:af:d5:bf:46:
e1:b6:50:a0:7c:27:5c:d0:9e:82:30:9c:c2:1f:9d:
ef:20:7b:f9:48:70:cf:4b:a7:56:f6:66:c0:24:dd:
29:d1:1f:8e:d2:d7:d0:2a:54:94:ae:56:40:26:d5:
3c:16:70:55:12:6c:14:8a:96:20:4a:f3:e0:50:32:
c0:1d:28:a7:09:7b:43:15:dc:51:2e:3c:c3:26:75:
c7:0b:4f:ca:17:dd:e1:06:b1:7d:d4:68:e1:cc:da:
c5:73:75:6f:65:f3:7d:30:49:15:bb:69:6b:4f:56:
3a:fd:54:26:85:bd:19:03:2f:fd:0e:05:19:e9:27:
8b:d2:94:2e:88:02:d0:6b:01:ed:62:c9:26:8a:97:
e0:f3:3f:6b:7a:6c:8c:6d:fb:8f:20:86:bd:1e:22:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:BB:0E:EF:F3:9B:E2:BC:69:18:A4:75:5E:3D:91:9D:BD:16:FD
X509v3 Authority Key Identifier:
keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b0:09:95:28:73:19:5b:32:4e:ec:6d:c3:46:9c:ec:75:7f:
99:97:48:68:f1:7b:58:40:82:cc:6f:96:47:ff:4b:43:48:c1:
f6:2a:97:f8:f8:f8:fb:99:4e:2a:a1:9a:17:eb:27:db:64:d0:
40:43:e1:3d:ec:cb:fb:fb:be:e6:6c:c2:2d:fc:35:fd:a8:7c:
ca:1c:bf:89:42:2f:00:b8:6f:90:3b:98:e4:ad:a5:18:b1:56:
ab:2b:c9:85:40:b8:6a:0a:08:a9:31:fa:5f:88:c3:25:1f:c7:
16:68:3b:8a:41:6f:a5:c1:39:02:f0:4f:c5:13:b9:a5:65:a7:
2e:f1:f9:6c:22:3e:06:b4:72:b2:91:58:2e:86:ad:e5:9f:2b:
14:99:f5:bb:60:98:e7:58:8e:62:c4:d1:07:c4:3c:2d:73:83:
bf:36:4f:b1:0a:63:b5:fa:d3:b9:83:58:10:24:47:9f:ae:7d:
de:fa:e8:1c:b9:03:67:70:68:27:62:c9:65:63:13:d3:1c:c5:
b6:48:6a:73:86:e4:06:72:ea:45:13:27:c7:ef:e0:14:a1:39:
f5:d9:28:5c:59:2d:78:ac:f8:0b:92:cd:91:ef:e3:67:21:79:
39:24:b3:80:69:f7:30:ca:d3:44:ef:ec:2e:27:07:f0:bd:19:
ff:bb:0b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+fZat+oQAODiSTc34z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MDBmOTUzYWRiZmRiNTJiNzg4MTVmZWNmYzBlOGNkZTA5
NzYyYzMwHhcNMjYwMzAyMDUwMTA3WhcNMjYwMzAzMDUwMTA3WjAzMTEwLwYDVQQD
Eyg3MDcxYmIwZWVmZjM5YmUyYmM2OTE4YTQ3NTVlM2Q5MTlkYmQxNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KdEr/3u6Ryshsyc8e/xa7DN7IUC
cXZaP7vgsC1bCWt8NzzU/gJaj/s9ilOhxg0ISVPtmp9IXI0SX3ZrtUpQLfKH98rv
8LKF4jy6vSsmeWzNvz7+bXk2hshxMShboQSLxHgpna/Vv0bhtlCgfCdc0J6CMJzC
H53vIHv5SHDPS6dW9mbAJN0p0R+O0tfQKlSUrlZAJtU8FnBVEmwUipYgSvPgUDLA
HSinCXtDFdxRLjzDJnXHC0/KF93hBrF91GjhzNrFc3VvZfN9MEkVu2lrT1Y6/VQm
hb0ZAy/9DgUZ6SeL0pQuiALQawHtYskmipfg8z9remyMbfuPIIa9HiIKHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBxuw7v85vivGkYpHVePZGdvRb9MB8GA1UdIwQY
MBaAFGQA+VOtv9tSt4gV/s/A6M3gl2LDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFENVU2Ml8yMUszaUJYLXo4RG96ZUNYWXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzA4ZmYtZmVjOC00OGNiLTk0ODUt
NTYzYzEwZGVjODBkLzEvWkFENVU2Ml8yMUszaUJYLXo4RG96ZUNYWXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MzA4ZmYtZmVjOC00OGNiLTk0ODUtNTYzYzEwZGVjODBk
LzEvWkFENVU2Ml8yMUszaUJYLXo4RG96ZUNYWXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7AJlShz
GVsyTuxtw0ac7HV/mZdIaPF7WECCzG+WR/9LQ0jB9iqX+Pj4+5lOKqGaF+sn22TQ
QEPhPezL+/u+5mzCLfw1/ah8yhy/iUIvALhvkDuY5K2lGLFWqyvJhUC4agoIqTH6
X4jDJR/HFmg7ikFvpcE5AvBPxRO5pWWnLvH5bCI+BrRyspFYLoat5Z8rFJn1u2CY
51iOYsTRB8Q8LXODvzZPsQpjtfrTuYNYECRHn6593vroHLkDZ3BoJ2LJZWMT0xzF
tkhqc4bkBnLqRRMnx+/gFKE59dkoXFkteKz4C5LNke/jZyF5OSSzgGn3MMrTRO/s
LicH8L0Z/7sLFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:41 2026 by rpki-client