Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: G4JqW+1anyosnk+Hnl58GQ5T20b1BcqLQduW7DfKP/4=
Subject key identifier: 3B:ED:FE:72:26:30:34:B5:C3:F7:E0:F1:4E:C2:86:FD:F6:18:91:00
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019F91A426E5E9BADDBB226A5B61BDAB4886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 08B1
Signing time: Fri 24 Jul 2026 01:01:21 +0000
Manifest this update: Fri 24 Jul 2026 01:01:21 +0000
Manifest next update: Sat 25 Jul 2026 01:01:21 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: DMOQinKa76fvfe1LkPkDejWKity0sfpEJbHdKVPwsDI=)
2: WtZuEdOrbSF0F53gF5On4TZu09E.roa (hash: ZdGNkHA8YwpY5ME31O+kIDd2U5+orPq3E9gIuNT35NU=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:26:e5:e9:ba:dd:bb:22:6a:5b:61:bd:ab:48:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Jul 24 01:01:21 2026 GMT
Not After : Jul 25 01:01:21 2026 GMT
Subject: CN=3bedfe72263034b5c3f7e0f14ec286fdf6189100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:aa:5e:2b:62:f1:dc:ae:3b:09:73:30:a1:
9f:e2:4c:5b:0f:29:b6:07:bf:02:04:ab:df:68:9f:
e6:63:74:78:ce:ed:da:2f:c7:74:f5:2e:ce:b2:1e:
a3:7e:dd:0d:64:3d:0b:f3:71:e9:95:79:57:ad:52:
22:1e:6d:cf:58:6a:79:01:4d:b6:74:f8:2d:84:3f:
26:84:14:bc:d5:4d:88:cb:74:04:30:2a:92:14:07:
48:28:74:11:bc:f7:a0:8a:5a:1a:d0:e2:91:65:a7:
5f:14:da:9f:69:e5:75:ec:77:45:0f:59:1b:7e:72:
23:ae:89:01:2e:46:11:f9:e5:d2:e6:8b:d8:d4:84:
dc:e3:1a:6d:7a:45:3a:a8:2f:ad:be:46:46:00:82:
04:b9:01:eb:6a:12:7f:fc:99:91:f9:e2:8a:01:6e:
14:71:34:b7:7d:85:8b:5b:90:10:da:cd:4b:c8:74:
7b:e9:22:35:7c:bd:5b:fb:f0:a7:9e:d9:00:86:d1:
5c:29:71:63:40:5f:29:65:45:fe:46:d6:40:97:d9:
e4:10:0b:eb:6a:8d:24:2f:4f:f7:f0:b5:a4:c1:85:
75:51:9b:a5:a1:37:41:1e:f3:e5:c3:70:76:96:e0:
fb:7a:b2:f8:cc:bd:f2:e0:6a:99:77:d7:fb:22:a2:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:ED:FE:72:26:30:34:B5:C3:F7:E0:F1:4E:C2:86:FD:F6:18:91:00
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d1:de:ec:ed:3c:f6:e8:2e:5d:3a:12:9d:81:74:14:30:bf:
63:07:f8:e2:1c:4d:fe:3a:2a:70:78:c3:2e:1e:72:18:02:ce:
d5:52:12:63:13:f9:39:d7:14:82:10:3e:76:d5:d2:18:fb:49:
e7:23:c1:3d:04:2b:bb:28:c6:fe:86:ee:92:3a:f1:2b:b4:a5:
b4:44:e0:8a:98:f8:ca:43:77:d8:3d:8d:c7:38:f9:64:53:a5:
a1:65:f0:63:e4:44:06:ec:15:af:b9:a9:10:57:f7:2e:d3:ed:
1a:d0:ca:59:d4:4b:dd:32:d2:71:7f:b2:15:c8:ce:2a:01:69:
c0:15:db:1e:2b:63:b6:21:22:e0:fd:83:ca:d2:33:fb:38:a3:
aa:d3:98:1d:5c:89:7f:c8:86:f7:22:57:c5:f7:3e:26:9d:cd:
f8:82:2d:f6:7c:e0:dc:89:1c:77:39:f3:86:23:de:14:b4:30:
59:86:42:ad:6f:95:6f:35:51:d2:1a:f6:d3:fa:9e:e1:34:a1:
c8:e9:7f:5f:f2:37:ed:b7:22:75:a4:23:18:0b:27:0c:3f:ca:
48:f2:10:5d:5d:d6:a7:a9:de:4c:03:1f:fc:f7:7a:95:0f:c6:
ba:e2:6b:7e:27:eb:c2:6f:d3:d8:c9:6e:5f:64:07:69:03:5d:
70:20:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:45 2026 by rpki-client