Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier: LMiJueZxBtIZ3K4FSvOZoWw0lvtr2dlxD+rM/wEgGbc=
Subject key identifier: 25:A0:3F:31:20:BA:7E:8F:60:DF:8A:F7:53:A1:91:00:D6:EB:00:AB
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019D3563D7D36FBB782CC6ECBF943A867885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number: 18A4
Signing time: Sat 28 Mar 2026 17:00:28 +0000
Manifest this update: Sat 28 Mar 2026 17:00:28 +0000
Manifest next update: Sun 29 Mar 2026 17:00:28 +0000
Files and hashes: 1: 66tOe78SbNGG7nIBJLTOvrt29-I.roa (hash: jszSMqa4xvb83jOxyoA/DxhZOhAu+kktYYx6bB2A8aU=)
2: 8_lZPXz1qGXu2bcpRupkPBB8WRg.roa (hash: iMpWEmJ10hJ2hPGyV5Qr3SMaI/AV+ZLzKmFfv1KwPYc=)
3: DW1iDd0pypItq6VGgqdUHsmuOGU.roa (hash: aaLxcZGvfmO8Z7JuB1q/hijXPFvlEoyV2irJBeZLhZo=)
4: MozUM6k2gbKGmyuWcwcmxebhQno.roa (hash: AgGoK2rZWkiMH9sIukOYbax2Y2ASEds9eHoxAP3Xf3E=)
5: UvnplBlAME8V6RCwXowo0AUAHk4.roa (hash: +H2PbSdtNYHgbWD35gGHr3HaGptf/nEkf5PHmssWSEk=)
6: ZIb3BXGAKVujBcIp_T3nsT6a47w.roa (hash: S8pZt9z+TDNzYyAimANgeNTXam6MeIWw7qjfFLhQu0k=)
7: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: 6sQ9DMxf2OjpQr9TDQu5parSJF3ALlVn12dz9KibO/0=)
8: hgw9wYlk4wR5eNiUcnjatjNiyuU.roa (hash: /JkBSdweBfoP1mweZ7SYCC9sy7LJZE2RlKgGeMAIRXE=)
9: oqUI-8PGNVmFA_M5R4fsLH6ZiRk.roa (hash: 4fovLfWRpSLz2X0DxYTBcpEpEP4cPQ62MemPJBVRYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:63:d7:d3:6f:bb:78:2c:c6:ec:bf:94:3a:86:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Mar 28 17:00:28 2026 GMT
Not After : Mar 29 17:00:28 2026 GMT
Subject: CN=25a03f3120ba7e8f60df8af753a19100d6eb00ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:36:f0:f5:0d:67:74:70:37:c9:d7:6d:5a:
d6:8d:f1:70:5e:ca:73:2f:8a:37:bc:24:02:12:7d:
33:54:3f:01:7b:1c:a2:c2:96:04:86:0e:92:8d:93:
e9:56:55:d8:3b:ed:f8:84:23:fe:33:b9:4f:f6:dd:
7a:f4:4a:cc:04:d9:81:4a:24:8c:8b:f8:de:48:b8:
4d:00:fd:d1:db:53:e5:27:94:d0:e8:3e:e5:1d:2a:
5a:7b:ce:bb:4b:83:0c:6d:4a:78:8c:ac:8f:a2:f6:
3f:a9:01:8b:c9:2f:63:99:3a:a2:39:36:d1:0a:7e:
2c:8a:9c:b7:c2:4c:a8:d7:3c:04:a0:1f:7c:c7:78:
47:38:b7:54:33:0f:24:b2:e9:2c:f6:ad:9e:22:43:
e5:59:7c:9f:97:31:d9:73:6a:ae:e8:e7:13:98:ea:
f1:8b:9a:75:67:d0:72:cd:e3:14:2a:93:cf:bc:c3:
32:31:55:e2:89:b1:60:e1:3d:74:26:f9:98:1f:eb:
b2:47:6e:5d:df:27:e4:ec:5f:9b:d8:a1:fa:34:00:
3c:fa:c1:f2:20:50:6a:24:be:4e:a2:24:60:4b:45:
e6:28:79:02:b4:a0:0c:de:65:5f:cc:94:59:aa:26:
8c:95:30:8e:d7:4c:91:e1:85:f2:49:98:33:f9:37:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:3F:31:20:BA:7E:8F:60:DF:8A:F7:53:A1:91:00:D6:EB:00:AB
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:16:69:99:59:d4:93:1c:f1:cb:ef:8a:58:40:40:bf:18:e8:
ff:82:5a:c5:39:27:51:6c:fc:2d:64:5a:ff:d5:17:37:d4:64:
42:ff:8a:bd:23:a5:d7:40:51:fe:66:f3:18:ea:09:1e:9b:cc:
3b:5d:18:bd:bd:4b:0e:ac:26:4e:78:0d:7c:cd:6a:d9:eb:c6:
eb:7d:6d:7a:8c:4f:03:8a:0c:44:3f:83:69:e3:06:f5:d5:f2:
89:8b:a1:bc:27:66:40:e5:b9:32:87:3a:17:aa:1d:90:e7:d7:
f0:9c:e9:83:5b:f9:a4:1f:9f:d3:19:7f:34:11:5c:52:9c:fe:
6e:3a:d4:29:50:7c:4b:8b:03:99:4d:09:e5:1c:ae:37:ac:8f:
58:52:9e:6c:b1:d5:15:e0:aa:1b:51:b8:22:eb:a9:0d:d0:b0:
c5:7c:c0:87:3d:2d:52:56:df:eb:70:81:04:9b:08:4e:0d:56:
bc:44:9b:9c:22:b9:2f:cc:0a:d1:2a:fd:e6:6a:de:40:fe:e1:
25:93:5b:ed:ba:55:9d:6b:2d:71:75:68:88:36:ee:d1:8d:3e:
f0:63:6c:30:81:45:1f:24:d6:72:d8:d9:a7:0a:1e:97:00:b3:
9c:5d:59:df:7a:9f:8f:4f:3e:0a:57:b4:8f:46:8d:d3:0a:13:
ae:e7:a7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01Y9fTb7t4LMbsv5Q6hniFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjYwMzI4MTcwMDI4WhcNMjYwMzI5MTcwMDI4WjAzMTEwLwYDVQQD
EygyNWEwM2YzMTIwYmE3ZThmNjBkZjhhZjc1M2ExOTEwMGQ2ZWIwMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdc28PUNZ3RwN8nXbVrWjfFwXspz
L4o3vCQCEn0zVD8BexyiwpYEhg6SjZPpVlXYO+34hCP+M7lP9t169ErMBNmBSiSM
i/jeSLhNAP3R21PlJ5TQ6D7lHSpae867S4MMbUp4jKyPovY/qQGLyS9jmTqiOTbR
Cn4sipy3wkyo1zwEoB98x3hHOLdUMw8ksuks9q2eIkPlWXyflzHZc2qu6OcTmOrx
i5p1Z9ByzeMUKpPPvMMyMVXiibFg4T10JvmYH+uyR25d3yfk7F+b2KH6NAA8+sHy
IFBqJL5OoiRgS0XmKHkCtKAM3mVfzJRZqiaMlTCO10yR4YXySZgz+TeHmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWgPzEgun6PYN+K91OhkQDW6wCrMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBZpmVnU
kxzxy++KWEBAvxjo/4JaxTknUWz8LWRa/9UXN9RkQv+KvSOl10BR/mbzGOoJHpvM
O10Yvb1LDqwmTngNfM1q2evG631teoxPA4oMRD+DaeMG9dXyiYuhvCdmQOW5Moc6
F6odkOfX8Jzpg1v5pB+f0xl/NBFcUpz+bjrUKVB8S4sDmU0J5RyuN6yPWFKebLHV
FeCqG1G4IuupDdCwxXzAhz0tUlbf63CBBJsITg1WvESbnCK5L8wK0Sr95mreQP7h
JZNb7bpVnWstcXVoiDbu0Y0+8GNsMIFFHyTWctjZpwoelwCznF1Z33qfj08+Cle0
j0aN0woTruenOw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 23:20:06 2026 by rpki-client