Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: fle8q/PZzAAhQqRJjd5U/3wQbKfVOwvLcgSPmd373e4=
Subject key identifier: 5D:19:DD:38:C2:AF:12:9B:67:07:B3:3D:3E:EA:2C:9C:D2:18:43:DC
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 01A0265789FB86D0E37E51E677B5803412DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 08FE
Signing time: Fri 21 Aug 2026 22:01:06 +0000
Manifest this update: Fri 21 Aug 2026 22:01:06 +0000
Manifest next update: Sat 22 Aug 2026 22:01:06 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: Q/0M40e168T9H6iZoWTb0b0bd8TEGe+Y6o+dNlbkJBQ=)
2: WtZuEdOrbSF0F53gF5On4TZu09E.roa (hash: ZdGNkHA8YwpY5ME31O+kIDd2U5+orPq3E9gIuNT35NU=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:57:89:fb:86:d0:e3:7e:51:e6:77:b5:80:34:12:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Aug 21 22:01:06 2026 GMT
Not After : Aug 22 22:01:06 2026 GMT
Subject: CN=5d19dd38c2af129b6707b33d3eea2c9cd21843dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:47:cd:ae:0e:b5:36:ed:e5:f2:4e:e8:59:
dd:ce:97:8b:e7:de:d8:73:5f:4d:f6:5a:7a:81:6c:
bc:fd:35:92:5c:8c:a4:3e:eb:d6:23:45:7a:4d:c3:
a9:f6:8f:75:99:86:64:34:25:37:3c:20:1b:be:10:
65:10:95:8e:92:23:89:0b:ea:53:37:ea:cd:c3:17:
3f:d9:00:67:8c:ca:7f:4e:f1:99:51:20:a2:77:9f:
7f:9d:33:6f:52:cc:5b:eb:e3:a4:d6:2c:7a:cf:fa:
eb:e8:12:f7:ea:78:c3:ee:44:7b:a5:4b:86:79:e5:
81:9c:84:69:d8:0e:5d:b4:a7:f2:e9:1c:3a:d4:61:
4a:c6:12:f1:0b:c7:f5:9b:88:f4:fe:41:6b:5e:16:
9c:4b:38:c9:fd:cd:b8:23:db:00:70:8c:85:c1:d2:
31:0c:e1:bc:33:ab:fb:ba:52:71:20:59:9a:80:60:
1d:53:5e:12:c7:58:52:7e:99:a2:dd:5c:b1:f7:99:
94:d0:db:62:5d:99:12:8d:30:f4:de:03:6f:83:ae:
6e:59:99:4c:3e:2e:54:b1:63:8b:36:31:84:43:58:
67:dd:44:62:86:2a:34:b0:a2:e6:23:fd:a9:8a:11:
cd:ab:c6:ed:78:3f:d7:f0:a3:62:84:88:72:a7:fc:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:DD:38:C2:AF:12:9B:67:07:B3:3D:3E:EA:2C:9C:D2:18:43:DC
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:79:45:96:7e:68:c0:4a:cb:6a:3d:8e:b8:01:91:6b:c4:
09:1a:ee:2c:72:d7:ee:41:34:fd:8b:6e:6b:c5:db:02:ff:e6:
db:f2:43:bf:42:01:42:59:9b:8a:fd:b6:20:b1:6d:59:f3:f4:
28:5e:fc:a1:1c:5b:b9:71:5c:3d:22:bc:d6:24:7c:c6:e2:cf:
9a:66:67:94:53:d0:1d:c8:49:b2:83:2e:5a:2b:81:b0:12:2f:
bd:6b:96:23:3d:a1:05:06:14:5c:39:79:60:a8:bc:7e:9c:b4:
32:19:fd:b9:fd:17:49:6a:ad:8f:e3:76:f0:18:56:21:99:62:
e4:46:01:c9:b9:1c:fa:5f:74:7c:33:d3:69:bc:cf:84:da:0e:
f7:17:e0:23:55:1b:cc:ae:ce:dc:bd:db:2d:18:a6:08:c6:86:
29:ff:b6:b1:83:53:7e:f3:47:5c:fd:3b:36:1e:18:6d:58:3f:
4e:6e:a9:a2:5a:aa:a6:1c:4d:c6:fe:6d:6f:ff:e1:fa:f9:03:
66:a1:0e:21:45:76:98:28:79:a5:40:14:3c:ac:5a:45:67:16:
93:b6:d7:30:08:2f:df:1b:f7:13:39:d6:9f:a0:1d:eb:38:3d:
74:04:16:70:90:61:c3:6a:c5:a7:75:46:65:46:21:b6:4d:a1:
bc:a5:28:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmV4n7htDjflHmd7WANBLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4
MTUxNTcwHhcNMjYwODIxMjIwMTA2WhcNMjYwODIyMjIwMTA2WjAzMTEwLwYDVQQD
Eyg1ZDE5ZGQzOGMyYWYxMjliNjcwN2IzM2QzZWVhMmM5Y2QyMTg0M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TtHza4OtTbt5fJO6FndzpeL597Y
c19N9lp6gWy8/TWSXIykPuvWI0V6TcOp9o91mYZkNCU3PCAbvhBlEJWOkiOJC+pT
N+rNwxc/2QBnjMp/TvGZUSCid59/nTNvUsxb6+Ok1ix6z/rr6BL36njD7kR7pUuG
eeWBnIRp2A5dtKfy6Rw61GFKxhLxC8f1m4j0/kFrXhacSzjJ/c24I9sAcIyFwdIx
DOG8M6v7ulJxIFmagGAdU14Sx1hSfpmi3Vyx95mU0NtiXZkSjTD03gNvg65uWZlM
Pi5UsWOLNjGEQ1hn3URihio0sKLmI/2pihHNq8bteD/X8KNihIhyp/xUvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0Z3TjCrxKbZwezPT7qLJzSGEPcMB8GA1UdIwQY
MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt
MzM4ODE0NjdhYzVlLzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl
LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkJ5RZZ+
aMBKy2o9jrgBkWvECRruLHLX7kE0/Ytua8XbAv/m2/JDv0IBQlmbiv22ILFtWfP0
KF78oRxbuXFcPSK81iR8xuLPmmZnlFPQHchJsoMuWiuBsBIvvWuWIz2hBQYUXDl5
YKi8fpy0Mhn9uf0XSWqtj+N28BhWIZli5EYBybkc+l90fDPTabzPhNoO9xfgI1Ub
zK7O3L3bLRimCMaGKf+2sYNTfvNHXP07Nh4YbVg/Tm6polqqphxNxv5tb//h+vkD
ZqEOIUV2mCh5pUAUPKxaRWcWk7bXMAgv3xv3EznWn6Ad6zg9dAQWcJBhw2rFp3VG
ZUYhtk2hvKUoaQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:57:44 2026 by rpki-client