
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: O3TOzfN7SVqrRX0zu4jsRbVywzpEapELuBsObpq/R90=
Subject key identifier: 68:F3:C3:EF:1D:8D:19:4D:C5:23:9F:BB:A3:C3:F5:1E:50:B3:91:85
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019F92EE01822185CDEB95905E40AE566341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 19E2
Signing time: Fri 24 Jul 2026 07:01:39 +0000
Manifest this update: Fri 24 Jul 2026 07:01:39 +0000
Manifest next update: Sat 25 Jul 2026 07:01:39 +0000
Files and hashes: 1: 3ItD5jxG4JJpbcwJCUfzhdJIFso.roa (hash: UhKdtFu8FL701bASsI8fWBz037pstsrvgV3MSwTBCe8=)
2: 66tOe78SbNGG7nIBJLTOvrt29-I.roa (hash: jszSMqa4xvb83jOxyoA/DxhZOhAu+kktYYx6bB2A8aU=)
3: 8_lZPXz1qGXu2bcpRupkPBB8WRg.roa (hash: iMpWEmJ10hJ2hPGyV5Qr3SMaI/AV+ZLzKmFfv1KwPYc=)
4: DW1iDd0pypItq6VGgqdUHsmuOGU.roa (hash: aaLxcZGvfmO8Z7JuB1q/hijXPFvlEoyV2irJBeZLhZo=)
5: MozUM6k2gbKGmyuWcwcmxebhQno.roa (hash: AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=)
6: UvnplBlAME8V6RCwXowo0AUAHk4.roa (hash: +H2PbSdtNYHgbWD35gGHr3HaGptf/nEkf5PHmssWSEk=)
7: ZIb3BXGAKVujBcIp_T3nsT6a47w.roa (hash: S8pZt9z+TDNzYyAimANgeNTXam6MeIWw7qjfFLhQu0k=)
8: ZVLlFSfhzxEF0lhJJae8JIe343A.roa (hash: zgyrla+/GM23mvitjWsB4FiXxNCUrtNyyz0dfjgywUw=)
9: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: 2LcencNIIhCmj1BGF46u+ZVyiT5bG8E+6WqtIasqsSM=)
10: hgw9wYlk4wR5eNiUcnjatjNiyuU.roa (hash: /JkBSdweBfoP1mweZ7SYCC9sy7LJZE2RlKgGeMAIRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:01:82:21:85:cd:eb:95:90:5e:40:ae:56:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jul 24 07:01:39 2026 GMT
Not After : Jul 25 07:01:39 2026 GMT
Subject: CN=68f3c3ef1d8d194dc5239fbba3c3f51e50b39185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:be:7d:35:a3:06:b5:fe:76:61:24:f3:c5:
9c:23:db:76:30:f9:cc:20:cf:08:09:50:04:d5:7e:
b8:1c:83:1d:b3:dc:01:bb:90:38:1c:02:77:84:ef:
f9:52:47:29:94:c7:6c:df:f6:6e:e9:93:6f:dd:c4:
8f:f6:5b:63:53:dc:70:38:c0:b8:e7:6a:da:32:e5:
69:37:8f:53:a5:31:a2:13:00:6f:53:15:e7:61:86:
8a:e3:4f:94:69:de:cf:c2:3d:d9:f6:3a:4e:af:d5:
99:27:bd:2a:41:35:3a:73:25:49:e2:0c:be:e8:5d:
e8:9a:d6:09:2b:31:c4:b2:bd:b7:ac:2c:34:b4:b8:
a8:93:0b:03:49:1c:3f:54:e8:df:aa:56:6a:ce:c6:
03:54:a2:f9:ae:bd:9a:bf:e8:34:16:0b:f7:43:7c:
6d:be:41:20:2d:2d:1e:d8:b1:f5:89:0f:52:75:1c:
cc:81:e6:91:b7:ee:4f:e9:4a:d8:59:38:e9:7c:23:
fe:d6:73:66:e1:7d:5e:3c:6c:67:77:61:34:41:69:
5f:e5:b0:c5:6e:ce:4f:d7:e2:b8:9e:22:bf:00:c9:
37:c0:47:c1:be:46:96:80:94:af:61:6b:fe:f6:d4:
83:c6:2a:bd:28:e3:c8:6c:48:a1:10:49:28:12:93:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:C3:EF:1D:8D:19:4D:C5:23:9F:BB:A3:C3:F5:1E:50:B3:91:85
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:82:84:94:bc:5e:1f:f2:34:bc:1b:04:02:c4:c9:84:58:59:
c7:ce:44:8e:94:28:64:30:70:37:01:bf:a7:00:e1:46:5e:6b:
07:e0:4a:73:95:01:96:d0:de:71:f0:53:d0:35:ff:39:7c:dd:
dc:bc:d5:a0:f8:03:eb:da:5d:04:00:6c:b2:0d:8b:ab:ef:40:
2c:44:c6:a0:65:25:29:b4:20:e7:e4:53:11:49:03:08:b9:93:
4c:24:0e:c6:39:b1:d2:da:dd:98:d5:53:69:e7:2d:bc:4b:4f:
14:32:77:d6:43:2b:ca:ef:28:6d:f0:11:ff:6e:74:c9:58:e4:
25:d7:1b:f2:34:eb:0f:16:a1:07:ba:c5:d7:e3:8e:ed:a2:72:
19:6b:f0:8f:8f:46:c4:d4:cb:b9:5c:58:f1:1b:c6:38:b5:c3:
f1:ff:9c:23:c3:5f:7b:c4:21:31:46:83:13:ca:2a:ea:52:1d:
d7:c7:65:79:ca:e4:7f:a6:14:f1:16:aa:1e:50:f4:90:8e:0d:
82:1e:17:8f:09:6f:32:aa:0c:0a:1a:86:02:80:12:8d:5e:31:
cd:3a:f3:2e:1e:c1:8d:58:ea:08:6f:1d:24:5a:07:cf:59:57:
ac:75:d6:6e:63:38:38:af:e3:ad:b4:12:eb:94:48:70:4a:7b:
e7:c5:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:00 2026 by rpki-client