Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: GOuCqh1KhCxMUdJoHVqeok3ClpVfH9bmS9YM4feJDm4=
Subject key identifier: 19:C6:8D:1B:F6:E3:C9:79:0B:2D:A3:FD:34:A5:82:EE:CC:76:38:FE
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019D088C4AFD4FA5B610C991F1D495C12599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 075E
Signing time: Fri 20 Mar 2026 00:01:45 +0000
Manifest this update: Fri 20 Mar 2026 00:01:45 +0000
Manifest next update: Sat 21 Mar 2026 00:01:45 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: rOMw849tCh46Hvz1yr7IYDjLoHVofUeDK4GhkfHjoc4=)
2: dYKJcrjXuTpS6_7bUiBb2osa674.roa (hash: wfR3v7wfu8CdCj0DaXJsMGWbP8IlPqI3MSKZ+73rZNw=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:8c:4a:fd:4f:a5:b6:10:c9:91:f1:d4:95:c1:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Mar 20 00:01:45 2026 GMT
Not After : Mar 21 00:01:45 2026 GMT
Subject: CN=19c68d1bf6e3c9790b2da3fd34a582eecc7638fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:35:66:5f:07:37:bc:a5:7d:77:4f:17:e4:
d6:84:cc:47:b8:8b:80:6e:ef:e3:e0:b1:38:9e:7f:
87:6c:48:b5:99:5a:7e:68:d1:dd:85:27:82:15:c2:
23:3b:8c:06:77:f5:7d:1b:70:ed:45:5e:70:b7:7e:
7e:be:6e:e8:50:35:1a:02:28:e8:d9:3b:a7:6b:3d:
dd:ad:a6:03:27:63:0e:1c:fc:37:73:3c:79:4e:c4:
be:2d:da:1c:0f:e5:42:e5:18:d1:ba:56:f2:81:66:
79:fb:fb:40:8b:aa:e6:ab:7f:c4:df:14:5e:82:9d:
e3:86:d1:ec:bf:70:3b:a9:dd:a1:08:29:f7:3e:38:
8e:d8:55:0a:ac:1c:62:cb:cd:36:ab:ea:5d:1f:79:
f0:f2:28:0c:f6:43:09:47:fd:ba:8d:f7:cf:fd:ba:
f0:7a:b2:33:b4:73:3a:bd:83:c3:fe:36:ac:d6:c6:
d9:62:cf:94:55:32:45:57:47:ba:30:0d:42:9e:98:
d9:a1:5e:f2:de:cc:17:4e:22:f1:aa:2c:29:8a:84:
16:3b:25:78:a9:fb:46:c1:7f:97:aa:c2:08:57:49:
6b:e7:eb:fd:c7:64:44:ca:38:22:c5:19:97:c7:8b:
bd:c3:1f:8a:7e:06:a0:2b:54:6e:3d:cc:c9:ec:bf:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C6:8D:1B:F6:E3:C9:79:0B:2D:A3:FD:34:A5:82:EE:CC:76:38:FE
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0e:1b:43:81:84:fe:9b:87:0f:d2:cf:6f:ac:a3:31:57:ab:
06:75:39:4e:3d:ac:36:2b:fc:64:81:5c:89:40:e9:6f:02:20:
ba:47:81:cc:49:d0:a1:9e:14:37:43:f3:e7:08:84:05:48:a7:
ee:16:76:4a:00:bb:3f:a5:f1:42:64:e1:44:fe:31:5e:05:8a:
e9:b0:74:7b:3d:b2:34:4f:b1:53:0e:55:7a:70:f8:4d:08:07:
6c:15:57:49:3d:0a:88:8c:f0:98:57:03:12:47:e8:7d:f1:24:
31:ab:99:88:b2:1f:6f:e6:39:96:98:b9:df:2e:0a:8f:b8:05:
91:c1:bb:55:19:46:50:b8:4f:47:63:df:e3:2d:ca:db:b0:01:
2d:96:1e:f8:e1:69:ba:44:05:fb:91:3e:e7:6e:e3:ec:e1:4b:
c5:22:71:b4:a5:27:d1:46:09:a0:48:0a:83:73:12:5e:74:4d:
87:db:8e:f9:14:88:36:1b:49:dd:76:d6:90:04:94:79:6b:73:
0a:2f:72:23:01:8d:48:b2:c6:f1:cf:86:99:e2:f6:21:7e:10:
b9:ca:ef:7e:10:d1:6f:a5:84:d1:88:83:72:17:14:46:ec:96:
8a:f9:93:43:31:94:e3:10:ce:c5:54:ef:67:5c:39:eb:8e:6e:
a2:8e:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:50:04 2026 by rpki-client