Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: WlIIBM8jk9kj5oLTqxMDrKb7HrtL3sYx7ocITiapD6c=
Subject key identifier: AA:9C:4C:82:BC:6D:65:52:9A:AD:3A:87:24:7F:54:79:BF:A4:D6:22
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 019CADFE8F7BCED2771E674F94BB0B4C4664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0A8D
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: C+l48balliG5CKEApqZbaJO7Qxjv+6BpOR9JHxCsEeQ=)
3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8f:7b:ce:d2:77:1e:67:4f:94:bb:0b:4c:46:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=aa9c4c82bc6d65529aad3a87247f5479bfa4d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:0a:40:0d:fe:e9:96:da:a9:24:1f:e8:42:
7f:7b:22:bc:d9:74:af:57:b4:99:18:f7:23:7e:b8:
13:cb:2c:1e:c7:48:8e:8f:38:32:d4:8f:b2:31:99:
bb:5a:92:d1:21:1f:71:70:35:e4:7d:ba:31:60:c8:
45:f2:8e:21:a8:a4:91:ed:e0:9d:bc:2e:26:49:27:
6f:9d:0c:84:23:9c:4c:94:c7:c7:bb:82:b8:9d:06:
02:42:42:f6:64:7c:48:21:6c:ed:88:f1:23:07:e4:
96:89:5e:cb:3c:69:be:f2:8c:4b:85:5c:a3:3e:4d:
a0:a1:00:1f:2b:e9:5e:f1:20:f7:23:a1:60:43:bc:
95:82:18:c8:25:b3:14:ad:c7:c4:88:4e:f2:c3:bc:
22:bc:c8:5a:9a:7d:73:45:54:15:15:86:18:ef:8f:
9a:b5:bd:14:17:cd:c9:2c:cc:8c:48:a6:7c:80:76:
a2:55:1a:93:35:f2:46:0a:04:d6:12:6c:5d:3e:85:
35:4d:e8:fe:b7:a8:80:69:64:bd:97:95:58:a2:9b:
f6:20:79:29:71:a8:c4:5e:e2:b7:f5:fa:64:09:e9:
2d:68:62:a5:4f:04:82:54:ae:11:bb:67:c9:c4:d8:
03:fb:2f:50:ea:fa:93:59:55:ad:31:07:5a:54:9d:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9C:4C:82:BC:6D:65:52:9A:AD:3A:87:24:7F:54:79:BF:A4:D6:22
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b7:58:e1:ab:1b:85:8f:2d:cb:41:f9:cb:fb:72:fb:83:af:
aa:8d:92:be:2a:44:cd:0b:ed:71:51:75:b7:3d:4f:a7:5d:c2:
41:3a:99:d5:a6:54:d8:89:64:8d:a0:a0:21:60:3a:3a:0d:fa:
be:11:31:38:de:bb:df:95:71:b7:ac:65:1d:f3:97:b4:29:c8:
20:7d:d0:fe:5c:c5:df:e8:aa:ea:20:37:7e:ae:cf:7d:61:fc:
45:a5:2c:98:c6:dd:74:b1:9c:13:69:6d:ef:c3:a7:1d:1b:1f:
0f:d8:ba:c8:40:a6:20:af:91:b0:ae:3d:4c:b7:71:27:63:a4:
b2:a0:bd:6e:38:8a:23:f0:c8:7f:e1:52:c9:6f:6a:39:50:6e:
f4:2f:e0:b1:c6:6b:84:83:a5:59:fe:69:6b:07:1c:52:23:52:
2d:10:fc:7b:0a:3c:13:fd:1b:25:95:dd:73:ae:b6:66:b7:d7:
aa:8c:dd:da:2b:c6:eb:38:3e:b3:78:aa:58:5b:a8:10:53:43:
81:19:0a:40:b4:d2:f2:37:54:b5:88:05:b3:1d:69:1c:43:f5:
e4:5f:14:15:2d:78:fa:8c:7c:b9:dd:f3:80:85:e7:e9:5c:a6:
4d:0e:b5:1f:3f:48:7c:9c:8a:cf:cb:8b:86:cc:e7:fa:b6:ef:
b0:81:46:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/o97ztJ3HmdPlLsLTEZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjYwMzAyMTAwMTA3WhcNMjYwMzAzMTAwMTA3WjAzMTEwLwYDVQQD
EyhhYTljNGM4MmJjNmQ2NTUyOWFhZDNhODcyNDdmNTQ3OWJmYTRkNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLgKQA3+6ZbaqSQf6EJ/eyK82XSv
V7SZGPcjfrgTyywex0iOjzgy1I+yMZm7WpLRIR9xcDXkfboxYMhF8o4hqKSR7eCd
vC4mSSdvnQyEI5xMlMfHu4K4nQYCQkL2ZHxIIWztiPEjB+SWiV7LPGm+8oxLhVyj
Pk2goQAfK+le8SD3I6FgQ7yVghjIJbMUrcfEiE7yw7wivMhamn1zRVQVFYYY74+a
tb0UF83JLMyMSKZ8gHaiVRqTNfJGCgTWEmxdPoU1Tej+t6iAaWS9l5VYopv2IHkp
cajEXuK39fpkCektaGKlTwSCVK4Ru2fJxNgD+y9Q6vqTWVWtMQdaVJ1lYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqcTIK8bWVSmq06hyR/VHm/pNYiMB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7dY4asb
hY8ty0H5y/ty+4Ovqo2SvipEzQvtcVF1tz1Pp13CQTqZ1aZU2IlkjaCgIWA6Og36
vhExON6735Vxt6xlHfOXtCnIIH3Q/lzF3+iq6iA3fq7PfWH8RaUsmMbddLGcE2lt
78OnHRsfD9i6yECmIK+RsK49TLdxJ2OksqC9bjiKI/DIf+FSyW9qOVBu9C/gscZr
hIOlWf5pawccUiNSLRD8ewo8E/0bJZXdc662ZrfXqozd2ivG6zg+s3iqWFuoEFND
gRkKQLTS8jdUtYgFsx1pHEP15F8UFS14+ox8ud3zgIXn6VymTQ61Hz9IfJyKz8uL
hszn+rbvsIFGFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:39 2026 by rpki-client