Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File: ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier: fOrrp8dwnOtdjMnUX7+cZLU35VKSVJ64RJ2Vg0r2aGE=
Subject key identifier: EF:89:3E:6C:19:78:7E:A9:01:D5:D1:DD:F1:93:0A:D4:E4:07:25:F4
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial: 019D9A74AC77AF25CFAAD645CCFEFA5EC31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number: 13B1
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: 0K2GHqkNtHFH0tB9nWXJ94AFGAw.roa (hash: 5NSYWTgnAdKm8Hqko31XGdj55Gsj1FCzKYaW0vszh0w=)
2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: z2zyy68+C/XMj8vcWW33550LiXr5OPu0kiQKRZuV+Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ac:77:af:25:cf:aa:d6:45:cc:fe:fa:5e:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=ef893e6c19787ea901d5d1ddf1930ad4e40725f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:fe:0c:d8:f0:c5:d6:01:db:18:c6:f6:41:
c4:0a:1e:84:6e:19:c2:16:ac:04:1d:33:db:25:50:
05:d5:f4:0b:25:ee:fb:ab:cd:88:29:49:7a:c3:e1:
46:97:fd:1c:54:43:1e:e5:50:04:01:bd:68:a0:fa:
27:85:17:11:20:16:5c:7a:4f:01:be:1e:da:1e:a2:
ab:51:ff:d6:c8:23:2a:27:dc:6d:c5:c5:9c:65:e3:
99:bb:79:16:70:14:8b:b9:5f:bd:c7:60:27:65:22:
ca:0c:41:6e:0a:27:cf:a9:62:f9:05:6b:27:88:7d:
7b:44:97:2f:4c:96:1e:74:ab:41:71:3a:0f:7f:0b:
4a:b7:b0:e4:f6:da:e7:b8:78:e5:e1:07:7d:bd:10:
b7:cc:63:b9:6a:44:40:f2:e5:42:46:7d:c5:77:80:
6b:0d:7d:23:b8:a6:41:c5:d6:d8:b3:73:e8:2f:16:
58:b0:bf:cf:0f:d9:4d:35:82:16:85:04:eb:d2:64:
ef:c8:4d:79:3c:c1:80:86:24:82:da:eb:37:02:ae:
0a:b1:24:bb:47:9c:30:60:96:51:4c:25:5f:d6:2f:
24:79:7e:dd:5d:dd:fc:0f:a3:c5:88:14:45:10:d8:
70:60:8c:98:e0:ed:90:0e:cb:93:7a:39:76:0a:d5:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:3E:6C:19:78:7E:A9:01:D5:D1:DD:F1:93:0A:D4:E4:07:25:F4
X509v3 Authority Key Identifier:
keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:b9:e6:2b:d9:93:ff:bd:e4:5a:86:3c:f7:6c:a0:45:01:
95:5d:46:ce:17:2a:9b:90:6a:cd:5b:a0:a8:03:8c:25:16:60:
d7:98:a8:6f:7c:89:6f:2b:43:14:d5:e9:ab:cc:da:91:11:a2:
f6:83:69:a4:33:b0:ca:bc:29:20:be:35:64:8c:c8:ac:2c:5c:
d0:6f:99:88:95:aa:58:45:de:01:4e:84:18:03:b8:82:9c:f5:
b7:b0:ad:7f:52:f8:04:47:d7:26:6f:79:72:ce:02:26:5b:16:
05:f5:5a:09:4d:02:2a:aa:a1:b1:eb:26:5a:c2:ca:f6:2e:1c:
7b:b1:57:2a:0f:a8:6d:cb:2b:51:c3:f4:5a:9e:af:4a:a6:06:
39:1b:6c:62:da:e8:d7:64:a9:20:82:37:d3:cf:af:fd:e0:48:
c2:81:f1:d4:a4:79:dc:91:6b:e3:d3:0b:eb:c6:ec:6b:c6:0c:
f9:20:80:c2:90:50:12:cf:92:f7:59:73:7d:aa:0b:7a:00:b0:
1d:09:d0:de:cd:96:e8:f7:71:79:bc:e2:05:0a:0b:fd:3e:81:
93:33:6e:77:22:33:0f:64:f1:a3:78:40:b0:04:8d:7c:64:bc:
4d:3e:a9:17:e3:d1:9a:fa:66:ee:80:a3:e2:fd:27:4a:0f:07:
42:79:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:21 2026 by rpki-client