Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: o+0hLnSAcN3Xkhp8IYiT90zg/jwcSacLZxD3P+mHt6Y=
Subject key identifier: 08:DD:0F:55:8D:19:AE:6F:76:2A:06:C2:65:B0:F2:12:41:08:7E:C7
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 019D9B8760693C59692C14CF2B3DF7C65FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0B08
Signing time: Fri 17 Apr 2026 13:00:33 +0000
Manifest this update: Fri 17 Apr 2026 13:00:33 +0000
Manifest next update: Sat 18 Apr 2026 13:00:33 +0000
Files and hashes: 1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: HZbUC2J3rf241b4XHAbevFX9vbZVkc2NSLUHdB28b+k=)
3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:60:69:3c:59:69:2c:14:cf:2b:3d:f7:c6:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Apr 17 13:00:33 2026 GMT
Not After : Apr 18 13:00:33 2026 GMT
Subject: CN=08dd0f558d19ae6f762a06c265b0f21241087ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:72:a9:34:cd:a1:74:58:41:e5:3f:2c:1b:
b3:0f:c5:c1:c0:9b:ec:46:05:63:96:4e:68:f0:67:
df:0b:c5:d0:b9:c5:06:f0:5a:0e:d7:5b:92:f6:0e:
96:11:bb:fd:73:76:b3:8f:ed:50:09:6e:7b:04:31:
50:e2:e9:81:29:8b:26:b9:48:b1:37:96:6f:eb:81:
d9:b5:9f:7c:10:28:84:57:6f:d6:db:88:df:da:42:
91:46:db:d2:ac:ab:91:e5:f1:a6:ca:51:1a:0d:87:
0f:c6:2e:24:52:f4:45:03:36:d0:05:7e:34:26:0f:
91:a9:93:8e:e6:60:93:dc:e9:05:d8:7e:0f:24:51:
ae:e5:37:55:fb:2f:30:0a:96:e6:a5:c9:72:90:f7:
26:bf:60:34:48:51:16:0d:0e:ee:2d:ec:23:1f:e7:
b9:fd:70:c0:e8:84:a9:3f:d4:ad:92:53:2c:e8:4c:
2f:db:3a:1c:e7:b2:ab:d2:90:ad:da:1c:6a:08:3b:
59:79:25:e2:ef:d8:c4:49:b1:26:5a:e5:7d:40:f5:
37:68:c4:2e:d6:da:8d:8f:31:b3:a1:c6:e7:6e:73:
48:f7:1d:58:98:77:67:11:8e:00:9a:d7:ce:d6:ac:
31:cc:f3:bb:58:cc:07:51:8e:81:a8:23:7e:28:2c:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:0F:55:8D:19:AE:6F:76:2A:06:C2:65:B0:F2:12:41:08:7E:C7
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ae:cc:19:a1:7f:f0:c7:2a:9f:d0:87:36:33:90:09:74:98:
7a:33:44:16:5f:96:91:7d:00:48:6c:67:23:d2:4b:56:72:6d:
f2:2f:9f:9b:ef:a9:77:99:b2:d5:d0:ab:8b:d6:ab:20:0d:31:
b2:a4:07:42:00:a7:56:76:da:30:84:77:18:b4:99:40:7c:ab:
bf:5c:85:60:d8:e4:aa:c4:63:54:d4:dd:a4:c0:7a:7a:a7:67:
e4:b7:9a:35:38:7e:e1:5f:da:c7:29:af:51:da:7b:fe:53:ca:
f2:d0:47:36:f5:e5:62:05:b5:51:35:d7:85:5a:b8:6a:d6:04:
e9:ad:7b:ed:ed:3d:ee:00:2a:14:55:e9:e1:f3:74:7b:8d:ee:
9f:9c:bf:31:57:cb:56:18:4c:dc:95:d2:28:88:ea:f2:ee:e4:
7a:b8:b3:21:b9:ef:05:82:3e:4d:c7:20:26:ee:4c:87:46:67:
7c:44:22:c9:53:03:ff:34:20:64:6e:07:1d:ad:fd:1e:da:fb:
3d:5b:bb:01:dc:db:ad:8c:fb:1f:b5:37:5c:e3:44:4e:9f:33:
43:75:a0:96:58:ac:ea:92:e2:38:3f:89:09:87:ee:96:d7:1c:
1a:4b:eb:8f:b4:3e:b1:b5:a7:ba:43:a1:c4:89:65:85:f3:2f:
8f:cb:d3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh2BpPFlpLBTPKz33xl+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjYwNDE3MTMwMDMzWhcNMjYwNDE4MTMwMDMzWjAzMTEwLwYDVQQD
EygwOGRkMGY1NThkMTlhZTZmNzYyYTA2YzI2NWIwZjIxMjQxMDg3ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDdyqTTNoXRYQeU/LBuzD8XBwJvs
RgVjlk5o8GffC8XQucUG8FoO11uS9g6WEbv9c3azj+1QCW57BDFQ4umBKYsmuUix
N5Zv64HZtZ98ECiEV2/W24jf2kKRRtvSrKuR5fGmylEaDYcPxi4kUvRFAzbQBX40
Jg+RqZOO5mCT3OkF2H4PJFGu5TdV+y8wCpbmpclykPcmv2A0SFEWDQ7uLewjH+e5
/XDA6ISpP9StklMs6Ewv2zoc57Kr0pCt2hxqCDtZeSXi79jESbEmWuV9QPU3aMQu
1tqNjzGzocbnbnNI9x1YmHdnEY4AmtfO1qwxzPO7WMwHUY6BqCN+KCygqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjdD1WNGa5vdioGwmWw8hJBCH7HMB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApa7MGaF/
8Mcqn9CHNjOQCXSYejNEFl+WkX0ASGxnI9JLVnJt8i+fm++pd5my1dCri9arIA0x
sqQHQgCnVnbaMIR3GLSZQHyrv1yFYNjkqsRjVNTdpMB6eqdn5LeaNTh+4V/axymv
Udp7/lPK8tBHNvXlYgW1UTXXhVq4atYE6a177e097gAqFFXp4fN0e43un5y/MVfL
VhhM3JXSKIjq8u7kerizIbnvBYI+TccgJu5Mh0ZnfEQiyVMD/zQgZG4HHa39Htr7
PVu7AdzbrYz7H7U3XONETp8zQ3Wgllis6pLiOD+JCYfultccGkvrj7Q+sbWnukOh
xIllhfMvj8vTdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:47 2026 by rpki-client