Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: PbEQWjLtwe4B3xc+ItCH8qczpnSDkzxihjteCH5JS80=
Subject key identifier: 20:E8:19:58:93:6A:4D:03:22:C7:A0:7C:5E:AD:3D:5F:47:04:E6:58
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019D27E017057A63AFE15FAC67D2B51596B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 189D
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: 66tOe78SbNGG7nIBJLTOvrt29-I.roa (hash: jszSMqa4xvb83jOxyoA/DxhZOhAu+kktYYx6bB2A8aU=)
2: 8_lZPXz1qGXu2bcpRupkPBB8WRg.roa (hash: iMpWEmJ10hJ2hPGyV5Qr3SMaI/AV+ZLzKmFfv1KwPYc=)
3: DW1iDd0pypItq6VGgqdUHsmuOGU.roa (hash: aaLxcZGvfmO8Z7JuB1q/hijXPFvlEoyV2irJBeZLhZo=)
4: MozUM6k2gbKGmyuWcwcmxebhQno.roa (hash: AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=)
5: UvnplBlAME8V6RCwXowo0AUAHk4.roa (hash: +H2PbSdtNYHgbWD35gGHr3HaGptf/nEkf5PHmssWSEk=)
6: ZIb3BXGAKVujBcIp_T3nsT6a47w.roa (hash: S8pZt9z+TDNzYyAimANgeNTXam6MeIWw7qjfFLhQu0k=)
7: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: dWyIdDoshE3DofVI8cH7xLiMqUzFD1t1+/P+vjyXJ18=)
8: hgw9wYlk4wR5eNiUcnjatjNiyuU.roa (hash: /JkBSdweBfoP1mweZ7SYCC9sy7LJZE2RlKgGeMAIRXE=)
9: oqUI-8PGNVmFA_M5R4fsLH6ZiRk.roa (hash: 4fovLfWRpSLz2X0DxYTBcpEpEP4cPQ62MemPJBVRYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:17:05:7a:63:af:e1:5f:ac:67:d2:b5:15:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=20e81958936a4d0322c7a07c5ead3d5f4704e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:27:35:8a:b7:78:30:a1:86:c0:ab:de:51:
4b:0f:da:82:4a:f2:2e:9a:68:eb:85:84:ae:d1:ca:
21:92:79:4c:92:15:b3:18:bd:a2:4d:ed:f0:33:03:
3f:7a:ba:4e:67:fe:d2:68:6b:5a:81:c2:1c:e1:67:
ff:8e:62:58:fa:35:cc:3f:00:c7:11:45:88:d9:5b:
59:1f:80:52:a5:09:e8:db:a1:33:72:d1:39:d1:a6:
c9:09:5f:ab:fb:a2:e0:93:8b:3f:e7:2e:b4:34:e2:
ed:08:36:3d:94:a1:41:1d:33:05:44:3b:91:cb:62:
5f:82:76:36:aa:e7:b3:ba:77:a0:19:77:bb:8e:07:
e6:45:28:ee:8d:34:e8:a4:ea:f4:c2:8f:6b:37:70:
62:06:a7:95:aa:2f:95:12:e4:60:be:26:48:ed:1d:
89:19:3d:75:c4:a3:44:49:81:9a:b6:a2:d7:81:61:
29:c2:27:ba:bc:46:bb:83:7c:ef:3b:c3:db:38:d9:
88:07:39:d5:e6:fa:61:a8:18:d5:77:62:76:62:48:
fc:27:82:9b:0f:2e:08:20:eb:48:d3:28:00:e7:ce:
07:7b:46:f4:13:05:16:d9:8c:06:cd:0f:9d:66:8e:
6d:be:7c:9b:ee:43:17:f4:12:a2:73:41:99:29:cd:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:19:58:93:6A:4D:03:22:C7:A0:7C:5E:AD:3D:5F:47:04:E6:58
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6d:fa:7a:c8:3a:13:96:84:4f:6e:55:63:a3:c9:ef:43:5c:
f7:0c:7f:f1:cd:3b:2d:38:a9:01:58:0f:b1:01:0a:52:8b:b5:
38:9c:11:4b:76:77:fb:c3:6a:90:35:06:ce:d2:81:14:a4:83:
b5:b8:db:48:e0:d3:da:18:56:99:b2:71:d9:a5:f6:43:2e:1e:
86:56:ad:b3:ec:65:c7:64:b7:7f:ad:39:5f:d7:b9:c7:49:76:
09:7a:74:51:0f:cd:7a:10:ff:81:28:82:92:01:dc:91:c3:0b:
4a:d0:12:50:55:21:e9:1b:b6:ec:3c:42:1e:a9:59:91:7c:bf:
6a:aa:69:af:b3:4c:a9:70:aa:cf:9a:e6:f2:f6:65:38:3d:93:
08:39:27:ba:49:db:29:62:dd:33:6b:60:13:b9:0f:98:59:1c:
d6:27:24:ef:d7:e2:2a:cc:ac:50:c7:35:1d:5f:63:3b:f9:d9:
3b:7c:c4:59:a4:30:e1:8a:bc:37:7c:ee:d3:f4:de:3f:27:9f:
e1:1b:d3:ea:77:6e:1a:37:f4:9c:19:99:66:45:fd:f4:63:28:
15:43:82:28:4a:5d:db:71:bd:b7:e9:4c:25:8b:d0:96:3d:66:
dd:33:e5:d3:07:10:1d:c6:6c:ed:40:2c:57:5d:6d:79:03:6a:
ae:a1:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:05 2026 by rpki-client