
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: 5kIZ0B0508ppL5cZ/f3cdyMHVa3t1QZm6Srktd5mlqU=
Subject key identifier: 40:5C:7E:62:3A:10:D4:47:E1:E4:AA:AF:82:5C:F9:0B:1B:45:40:23
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019F90FF211B95CD29BFE4693FE454C18A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 19E1
Signing time: Thu 23 Jul 2026 22:01:06 +0000
Manifest this update: Thu 23 Jul 2026 22:01:06 +0000
Manifest next update: Fri 24 Jul 2026 22:01:06 +0000
Files and hashes: 1: 3ItD5jxG4JJpbcwJCUfzhdJIFso.roa (hash: UhKdtFu8FL701bASsI8fWBz037pstsrvgV3MSwTBCe8=)
2: 66tOe78SbNGG7nIBJLTOvrt29-I.roa (hash: jszSMqa4xvb83jOxyoA/DxhZOhAu+kktYYx6bB2A8aU=)
3: 8_lZPXz1qGXu2bcpRupkPBB8WRg.roa (hash: iMpWEmJ10hJ2hPGyV5Qr3SMaI/AV+ZLzKmFfv1KwPYc=)
4: DW1iDd0pypItq6VGgqdUHsmuOGU.roa (hash: aaLxcZGvfmO8Z7JuB1q/hijXPFvlEoyV2irJBeZLhZo=)
5: MozUM6k2gbKGmyuWcwcmxebhQno.roa (hash: AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=)
6: UvnplBlAME8V6RCwXowo0AUAHk4.roa (hash: +H2PbSdtNYHgbWD35gGHr3HaGptf/nEkf5PHmssWSEk=)
7: ZIb3BXGAKVujBcIp_T3nsT6a47w.roa (hash: S8pZt9z+TDNzYyAimANgeNTXam6MeIWw7qjfFLhQu0k=)
8: ZVLlFSfhzxEF0lhJJae8JIe343A.roa (hash: zgyrla+/GM23mvitjWsB4FiXxNCUrtNyyz0dfjgywUw=)
9: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: ON38NpZWieL3jCVWar8wpfdPzrR9kJFHdcor8z7o3GA=)
10: hgw9wYlk4wR5eNiUcnjatjNiyuU.roa (hash: /JkBSdweBfoP1mweZ7SYCC9sy7LJZE2RlKgGeMAIRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:21:1b:95:cd:29:bf:e4:69:3f:e4:54:c1:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jul 23 22:01:06 2026 GMT
Not After : Jul 24 22:01:06 2026 GMT
Subject: CN=405c7e623a10d447e1e4aaaf825cf90b1b454023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:58:07:bc:0a:bb:45:56:f9:ae:d1:56:5b:
2c:2a:f4:3d:c7:13:e1:e8:22:da:ef:72:c8:29:42:
ab:22:25:fe:fc:c3:40:8a:b9:0b:83:23:24:bc:dc:
00:ed:74:fa:a1:3b:af:1a:bd:13:02:96:34:86:85:
d4:75:96:12:a7:25:fb:f9:de:67:27:53:5a:e2:d7:
75:b6:bf:da:e0:81:a1:e9:17:0e:29:3d:6b:8c:22:
99:24:34:a5:b9:cc:1f:48:9c:84:86:2e:c3:d4:21:
69:67:a9:a3:1a:4b:c2:7a:cc:d0:bf:a9:b2:d1:e5:
d2:9a:a5:74:24:ea:ce:9d:00:98:81:71:64:aa:d9:
ee:f2:55:c7:0b:e5:6d:03:fa:a7:67:aa:34:f3:11:
fc:c8:17:21:2d:69:dd:93:58:7f:a6:10:61:b7:8f:
c6:e2:f1:16:aa:d7:23:77:88:06:b8:72:04:4f:8b:
13:4b:50:4e:a6:e2:16:cb:ac:4b:6e:fa:04:9c:8e:
97:4a:88:6c:f1:07:35:6d:f3:67:49:4c:f9:0f:ef:
cb:41:c5:c4:4b:c1:db:8d:ab:2a:e8:26:b9:d9:40:
b5:1d:f5:95:0a:69:1a:11:c4:3f:a3:5f:7d:35:80:
fb:a9:1d:69:22:21:45:e7:76:e0:8a:6b:68:fd:96:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:7E:62:3A:10:D4:47:E1:E4:AA:AF:82:5C:F9:0B:1B:45:40:23
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:42:4e:14:61:f6:66:fd:59:6c:0f:ad:6e:11:83:cb:bf:6a:
a9:75:02:34:e9:19:72:ad:1a:4b:6d:2c:c3:8f:64:78:12:79:
5b:66:98:82:ae:21:b7:6d:6b:45:92:29:e5:68:4e:f7:17:98:
ea:e3:a0:04:c2:f6:b1:a0:84:8e:82:51:10:10:f2:11:6a:71:
d5:9b:84:2c:95:7e:1f:46:07:8d:9b:00:a5:4c:45:1e:4e:d6:
b2:24:ff:a1:03:a1:65:fe:67:39:53:20:01:03:28:ad:98:c3:
ea:01:55:59:1f:7f:22:96:87:95:06:5c:82:6c:ba:c2:b8:32:
44:9e:9e:03:77:60:a6:91:34:95:e5:7b:74:ec:c7:f9:6a:3b:
75:27:43:dd:df:29:10:9a:e3:b9:01:1b:f2:89:40:52:f9:5f:
78:fe:55:04:b4:b9:01:ad:79:18:bb:2a:52:8d:c3:96:cc:2d:
59:6c:11:bb:52:98:68:67:ad:90:4a:0a:86:1b:ad:76:9c:05:
8a:47:30:58:0f:37:1d:4a:8a:d3:67:0b:d9:e1:1d:fe:0f:47:
c0:0d:2e:ef:55:60:21:5e:9d:2e:4c:1d:7c:c6:46:88:42:f8:
13:71:d5:b7:94:e3:ab:a3:cd:5b:33:eb:94:cc:ea:4c:b3:85:
20:e3:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:23 2026 by rpki-client