Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: mI4ToYL33ZPuBjHMTCd+VcGvMbIP7YlCslJiE5lMtMU=
Subject key identifier: 81:04:E4:FA:73:03:5E:B0:A8:F5:9E:30:54:E6:E7:19:9F:55:B4:32
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019D2772C175A931A97DC8646816B17F2D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 076E
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: KOVswN7Ldo+1pYnc4Y2Yxdh2nepewizrRwcc/kVb+ZI=)
2: dYKJcrjXuTpS6_7bUiBb2osa674.roa (hash: wfR3v7wfu8CdCj0DaXJsMGWbP8IlPqI3MSKZ+73rZNw=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c1:75:a9:31:a9:7d:c8:64:68:16:b1:7f:2d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=8104e4fa73035eb0a8f59e3054e6e7199f55b432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:d5:84:2e:40:a7:93:55:1d:d2:09:13:be:
b7:bf:05:0d:a9:67:d2:ac:71:5d:69:33:3f:19:05:
89:e5:d3:da:59:27:8c:23:f5:b9:44:f1:e9:cd:27:
55:cd:f3:3a:46:60:d9:6a:8e:19:53:6b:73:d8:91:
ee:b6:ba:f3:f4:2f:84:8b:f9:c4:ed:6c:2b:0b:fa:
d6:1b:64:e4:9e:7f:75:8e:99:93:77:87:1f:07:64:
43:e1:f7:17:53:77:8a:fa:f1:c4:00:96:88:76:bd:
40:9a:e7:fe:9a:2a:2b:b6:d9:7e:a3:da:43:d9:fb:
34:2e:81:b1:8d:38:71:62:79:de:51:f0:ce:68:1d:
eb:e9:a1:b4:d5:10:73:06:bc:c5:5b:2f:c3:2b:f5:
2d:bc:f6:33:68:7e:7e:4d:1b:1e:84:bf:3c:b5:04:
4b:ee:f1:e5:34:8f:37:33:ff:8f:5b:17:d5:23:b2:
a7:e1:d4:4c:41:28:87:e1:cf:30:2f:e8:5a:ea:ca:
ea:84:05:7d:59:8b:2a:11:cc:cb:7b:6a:23:87:54:
79:d7:1c:78:f9:52:65:da:1e:f5:58:6a:72:30:06:
f4:81:9b:26:d3:29:21:a1:07:45:ea:b5:3a:8d:8d:
f0:7c:b0:9a:b4:5a:ad:c6:75:86:73:c8:99:da:4b:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:E4:FA:73:03:5E:B0:A8:F5:9E:30:54:E6:E7:19:9F:55:B4:32
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:27:99:ea:50:7a:f3:c4:ed:b2:a5:eb:c5:49:d8:83:d2:
16:85:01:ab:18:9f:ab:42:72:18:43:fc:3b:41:48:34:d4:d4:
65:0d:76:f2:91:5d:69:7d:53:8f:10:0e:e6:e2:89:b7:44:78:
1f:f7:f1:73:8a:63:e3:3f:41:f7:ae:20:28:e9:03:cc:8e:7b:
21:52:fa:e4:8c:17:ca:97:ef:86:ef:b5:b0:05:2d:a9:02:85:
34:c6:11:17:b9:d0:26:74:09:0e:0e:ae:12:54:fc:90:7f:5f:
4a:9d:85:3f:8e:93:25:a3:39:2e:d7:90:d2:38:3f:69:76:c1:
d9:cc:88:bf:4d:a2:d0:6a:19:d5:a1:95:2a:55:9e:21:88:6f:
d9:df:3e:ea:48:d1:22:11:b1:5f:23:f8:b9:e0:ff:1e:59:10:
6e:7f:c2:5d:2c:40:bd:21:7a:4a:23:8c:87:76:e0:ab:b8:df:
63:2f:84:6d:cf:51:f3:64:5b:10:24:d5:a2:46:2b:39:49:c0:
e4:46:d7:cb:c3:37:1f:54:cb:00:3c:cf:51:39:df:cb:88:1a:
67:74:24:49:ab:55:a5:fa:88:4a:e9:05:12:de:75:0c:19:11:
71:1a:00:f4:f6:03:ac:1b:fc:ec:ff:84:f1:9a:8a:b9:70:c3:
39:e4:b1:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsF1qTGpfchkaBaxfy2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4
MTUxNTcwHhcNMjYwMzI2MDAwMjA1WhcNMjYwMzI3MDAwMjA1WjAzMTEwLwYDVQQD
Eyg4MTA0ZTRmYTczMDM1ZWIwYThmNTllMzA1NGU2ZTcxOTlmNTViNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBXVhC5Ap5NVHdIJE763vwUNqWfS
rHFdaTM/GQWJ5dPaWSeMI/W5RPHpzSdVzfM6RmDZao4ZU2tz2JHutrrz9C+Ei/nE
7WwrC/rWG2Tknn91jpmTd4cfB2RD4fcXU3eK+vHEAJaIdr1Amuf+miorttl+o9pD
2fs0LoGxjThxYnneUfDOaB3r6aG01RBzBrzFWy/DK/UtvPYzaH5+TRsehL88tQRL
7vHlNI83M/+PWxfVI7Kn4dRMQSiH4c8wL+ha6srqhAV9WYsqEczLe2ojh1R51xx4
+VJl2h71WGpyMAb0gZsm0ykhoQdF6rU6jY3wfLCatFqtxnWGc8iZ2kswPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEE5PpzA16wqPWeMFTm5xmfVbQyMB8GA1UdIwQY
MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt
MzM4ODE0NjdhYzVlLzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl
LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8AnmepQ
evPE7bKl68VJ2IPSFoUBqxifq0JyGEP8O0FINNTUZQ128pFdaX1TjxAO5uKJt0R4
H/fxc4pj4z9B964gKOkDzI57IVL65IwXypfvhu+1sAUtqQKFNMYRF7nQJnQJDg6u
ElT8kH9fSp2FP46TJaM5LteQ0jg/aXbB2cyIv02i0GoZ1aGVKlWeIYhv2d8+6kjR
IhGxXyP4ueD/HlkQbn/CXSxAvSF6SiOMh3bgq7jfYy+Ebc9R82RbECTVokYrOUnA
5EbXy8M3H1TLADzPUTnfy4gaZ3QkSatVpfqISukFEt51DBkRcRoA9PYDrBv87P+E
8ZqKuXDDOeSx9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:07 2026 by rpki-client