Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: r5td7FEQ7iuSDkygVSkC67+sf2SWGdIzPp+CyuoTwbY=
Subject key identifier: A2:E9:39:C8:FC:1C:52:E6:28:05:DB:8A:D9:07:24:63:E1:A8:E6:5B
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019DFDCE800DE0D12E10593EEE1583E47F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 07DD
Signing time: Wed 06 May 2026 15:01:01 +0000
Manifest this update: Wed 06 May 2026 15:01:01 +0000
Manifest next update: Thu 07 May 2026 15:01:01 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: MM7nzOwOKiVjQK8HLFsCCVTdenhublYB7bXJZFIwCG0=)
2: dYKJcrjXuTpS6_7bUiBb2osa674.roa (hash: wfR3v7wfu8CdCj0DaXJsMGWbP8IlPqI3MSKZ+73rZNw=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:ce:80:0d:e0:d1:2e:10:59:3e:ee:15:83:e4:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: May 6 15:01:01 2026 GMT
Not After : May 7 15:01:01 2026 GMT
Subject: CN=a2e939c8fc1c52e62805db8ad9072463e1a8e65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:0b:6d:a1:ac:63:9f:72:37:bc:20:ff:d8:
b2:57:bc:e8:ae:33:5d:df:fc:b5:84:9d:5e:00:22:
52:fa:2c:b0:09:9d:72:66:bb:28:f8:d8:56:f5:9c:
f7:d4:3d:f5:2d:e9:1c:8d:0a:72:74:ab:5d:3c:7e:
09:8f:1b:97:89:6d:29:92:8e:98:e3:37:6f:73:76:
45:e6:a7:b7:cf:91:43:57:99:bc:55:2a:c6:8c:99:
8a:e9:52:71:00:8b:0e:02:5b:da:9b:83:1b:4f:f4:
e0:5f:1f:00:09:22:c5:d9:2a:ca:20:bc:61:c6:0c:
33:12:83:48:cf:00:5d:6f:4f:4c:09:97:69:45:dd:
03:e3:9b:9d:ce:d2:aa:fd:ce:18:08:06:f0:64:a6:
26:31:5d:c5:93:b5:1b:ff:7e:69:36:3f:56:b0:ac:
c4:76:88:05:35:ae:07:23:22:72:43:c0:b7:91:da:
21:12:94:27:24:60:01:45:77:8e:31:56:b3:0a:d6:
9c:39:72:92:c9:60:4a:25:69:68:ba:3c:6d:87:e7:
02:70:b4:6b:59:37:29:43:3d:ea:76:e9:9d:2b:4a:
f1:d0:3a:24:1b:27:5e:b4:fb:b6:4c:91:07:ba:0e:
ca:d4:3d:fd:14:a1:7c:bc:36:57:c7:89:d6:49:62:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:39:C8:FC:1C:52:E6:28:05:DB:8A:D9:07:24:63:E1:A8:E6:5B
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:43:42:9d:c3:3c:cc:a9:c1:7b:31:f8:47:be:fb:e8:7a:d5:
6e:e5:25:96:85:d2:61:fe:da:35:ba:0a:e3:5b:89:71:be:06:
bf:7a:5b:d9:19:f5:d7:6d:27:d9:dc:f6:4d:f9:27:e8:57:b0:
0d:c8:ee:e0:e0:e6:68:30:56:e7:db:59:fe:f6:bb:e8:57:5f:
d4:08:2b:b6:a5:66:bd:84:66:14:7b:81:75:f5:e1:2c:a5:a4:
2b:7f:f4:3e:e2:68:1c:3e:7f:4d:e1:5d:f4:84:d3:35:41:87:
75:6b:29:14:28:da:2d:92:0f:46:1c:e9:e6:ec:9a:7b:0d:17:
51:dc:56:e1:27:1d:92:ff:5b:3c:36:a8:bb:c5:ee:ff:60:1c:
37:3f:a3:04:1f:c4:d1:4a:bb:cc:66:c2:e0:13:28:22:9f:c5:
c3:f9:a6:7f:82:6a:34:5e:71:95:96:d3:7d:ba:c3:d1:15:8b:
d0:2b:27:45:65:8c:4a:a7:ad:de:5d:ba:b9:31:b8:3e:4f:73:
91:be:25:d2:fd:b1:b2:ef:82:18:89:c9:57:c7:0d:47:4c:aa:
e7:bd:c9:29:2f:f4:2d:32:87:df:35:d1:4e:c4:9c:0b:35:e1:
13:84:91:8a:13:be:1c:10:ef:ee:60:3f:e1:34:21:d4:7a:30:
ab:01:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 17:23:03 2026 by rpki-client