Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: mGP/kbwSwc0xE4cTtyvWCxpgtyfIWoIrHfDLN3FrfI8=
Subject key identifier: 5A:94:46:CF:3F:1B:AC:74:C8:E5:FF:F4:80:65:B1:F6:7A:B2:8F:47
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01A0D872A38B6D6ACC5C5FCD7E8F23D83C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 1A8F
Signing time: Fri 25 Sep 2026 12:03:06 +0000
Manifest this update: Fri 25 Sep 2026 12:03:06 +0000
Manifest next update: Sat 26 Sep 2026 12:03:06 +0000
Files and hashes: 1: 3ItD5jxG4JJpbcwJCUfzhdJIFso.roa (hash: UhKdtFu8FL701bASsI8fWBz037pstsrvgV3MSwTBCe8=)
2: 66tOe78SbNGG7nIBJLTOvrt29-I.roa (hash: jszSMqa4xvb83jOxyoA/DxhZOhAu+kktYYx6bB2A8aU=)
3: DW1iDd0pypItq6VGgqdUHsmuOGU.roa (hash: aaLxcZGvfmO8Z7JuB1q/hijXPFvlEoyV2irJBeZLhZo=)
4: MozUM6k2gbKGmyuWcwcmxebhQno.roa (hash: AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=)
5: UvnplBlAME8V6RCwXowo0AUAHk4.roa (hash: +H2PbSdtNYHgbWD35gGHr3HaGptf/nEkf5PHmssWSEk=)
6: ZIb3BXGAKVujBcIp_T3nsT6a47w.roa (hash: S8pZt9z+TDNzYyAimANgeNTXam6MeIWw7qjfFLhQu0k=)
7: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: lb0hTpFQ3dZoFDi8bqoY1VjzxGsBX8r8g5Vo3ZwQQ2U=)
8: hgw9wYlk4wR5eNiUcnjatjNiyuU.roa (hash: /JkBSdweBfoP1mweZ7SYCC9sy7LJZE2RlKgGeMAIRXE=)
9: kKVTcDtxUO4HnsqTYLGCjaszDC4.roa (hash: BzZ0NF1gpbO7bnAqq4Opdp7oG5NZ+nM2gtqP3q6bPao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:a3:8b:6d:6a:cc:5c:5f:cd:7e:8f:23:d8:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Sep 25 12:03:06 2026 GMT
Not After : Sep 26 12:03:06 2026 GMT
Subject: CN=5a9446cf3f1bac74c8e5fff48065b1f67ab28f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:c6:99:4e:c6:cd:73:e2:95:6b:6b:e1:7b:
2a:dd:14:21:95:e7:2c:62:37:02:cb:69:a4:aa:eb:
28:83:f0:c6:34:40:b2:42:69:14:95:54:14:6b:28:
84:e1:07:32:7f:2e:70:ac:49:be:f8:c9:73:9d:31:
cd:fe:80:92:02:b4:cf:09:23:32:5e:31:ad:2e:a8:
08:f4:0f:a0:ac:d3:47:34:1a:0b:a0:0c:d2:41:56:
4f:c0:2c:18:c8:5a:00:25:1f:0c:94:34:d7:3f:2a:
46:3e:63:88:7a:5c:9a:1b:00:3a:49:fd:6f:d9:29:
ff:81:cb:b0:e7:ab:78:f4:e4:35:2a:5b:eb:cb:90:
64:30:45:0c:9e:3c:9f:2d:a1:a0:02:a6:fa:c4:0e:
08:e9:3c:6f:c5:d0:fa:d6:43:23:3c:fd:ac:5e:47:
e0:40:79:1e:c8:48:1f:87:b7:9c:d6:a5:37:8e:95:
f9:83:2f:98:c0:67:3b:6b:fb:60:ec:f5:26:b8:60:
80:fc:62:68:fd:a3:96:15:0f:7e:c5:14:fd:02:f7:
17:2b:19:52:1c:64:e1:63:17:77:2c:7f:a2:a0:a6:
fd:ec:7d:2a:83:78:3a:f8:05:29:ff:3b:68:60:b0:
b1:6d:f4:bf:24:8b:2b:6a:39:e0:f3:d1:7a:5d:ca:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:46:CF:3F:1B:AC:74:C8:E5:FF:F4:80:65:B1:F6:7A:B2:8F:47
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2c:3c:42:47:d1:d2:ad:2f:39:d4:26:4e:ca:5c:d4:67:2b:
26:6d:b0:6f:fe:6f:2a:9a:6f:35:ae:13:26:02:0c:60:85:9c:
bb:28:d5:58:f2:fb:00:0a:67:d4:a5:54:0c:1e:15:58:0e:8f:
a1:eb:30:8b:a6:98:7b:ed:c4:91:ae:6f:0d:34:1c:07:89:de:
10:8a:11:6f:61:df:a3:c4:77:7b:ae:1d:58:12:9a:f5:05:ad:
4d:dc:63:d4:10:0e:4a:a8:54:08:86:d2:8f:70:04:97:06:cd:
03:9e:81:fb:55:a6:a0:2b:7e:24:8f:45:65:07:8c:81:89:e7:
31:a4:a1:d8:a3:53:a5:20:8a:b6:fd:b7:87:a4:06:55:c0:f0:
aa:6d:21:1c:77:f9:70:07:a2:3a:e0:0a:e4:f3:60:d1:7e:7f:
d6:c2:df:cc:91:3a:9c:d6:bb:56:d2:9c:77:ba:56:ec:3a:ac:
b1:62:16:41:99:22:48:9d:a6:22:43:88:a6:21:1c:d5:9a:17:
8c:f8:05:8f:56:22:26:6d:a3:92:a2:db:5a:85:33:66:18:52:
b9:25:ee:62:b9:e7:a5:82:7c:08:07:05:17:0e:e9:81:9f:fe:
36:91:c1:ec:5c:02:b8:1b:83:54:40:f7:ce:df:44:11:b0:02:
cc:ee:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:45:10 2026 by rpki-client