Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: jtXRYhaggU853Wv6HfZrfEh1N7pE0+RKwJKUeG59wTI=
Subject key identifier: 02:6D:81:A5:A0:AE:22:17:32:4F:B6:1C:77:D7:EC:A5:FE:CB:2A:20
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019DA30A525A38047059C584E446B7933553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 07AE
Signing time: Sun 19 Apr 2026 00:00:55 +0000
Manifest this update: Sun 19 Apr 2026 00:00:55 +0000
Manifest next update: Mon 20 Apr 2026 00:00:55 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: SNqItqf2Z4+m32X4Jl2XH8GsBW9NYR534zvht+qlk94=)
2: dYKJcrjXuTpS6_7bUiBb2osa674.roa (hash: wfR3v7wfu8CdCj0DaXJsMGWbP8IlPqI3MSKZ+73rZNw=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:52:5a:38:04:70:59:c5:84:e4:46:b7:93:35:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Apr 19 00:00:55 2026 GMT
Not After : Apr 20 00:00:55 2026 GMT
Subject: CN=026d81a5a0ae2217324fb61c77d7eca5fecb2a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:fa:b9:ed:a4:f6:74:93:62:58:d7:76:76:
32:a4:27:de:ff:29:7c:bc:6b:a2:35:74:75:02:4b:
39:30:5b:01:3d:41:eb:40:25:13:67:7f:23:15:6b:
fc:f9:f2:14:ef:72:45:ee:6a:78:59:ea:d8:b9:32:
e0:73:90:d9:02:4e:37:64:95:17:cc:0a:f4:63:73:
ef:de:13:7b:8e:a1:b2:ef:b6:32:e8:61:b4:27:b8:
4f:b8:66:95:fa:99:a1:88:09:0f:66:7c:07:08:be:
f8:99:88:b1:ef:be:cc:8a:d1:37:5c:a9:a0:93:85:
08:e6:56:89:a1:52:63:4b:bf:7c:13:cb:fe:f3:5f:
d9:5d:6b:f3:ab:64:b4:b9:14:b5:41:aa:15:6b:c8:
f3:ce:6c:5a:c5:54:d8:03:05:f9:6e:03:6a:68:0d:
70:ca:8b:54:06:ef:ee:44:c0:3a:3c:4b:14:68:39:
e7:2e:bb:e4:bc:f0:28:2f:13:50:ad:c4:c8:f3:28:
22:27:f2:26:c9:f8:4b:3f:aa:82:de:c7:fd:fb:78:
ea:52:51:f3:0c:09:27:60:67:e1:aa:6f:d4:cf:ff:
7b:59:a2:29:fe:bc:13:a3:63:80:1e:dc:7a:43:b4:
43:ef:f6:28:f7:ef:2f:a0:21:12:4b:e8:e6:ac:57:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:81:A5:A0:AE:22:17:32:4F:B6:1C:77:D7:EC:A5:FE:CB:2A:20
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:e5:6a:41:b1:ae:ac:d4:1c:97:cd:1c:60:73:20:13:c9:
a0:af:bc:37:59:42:ac:00:0d:da:88:b0:2e:9f:73:19:c0:a4:
68:2c:3a:2f:cf:a4:f1:dc:64:78:0b:3a:98:f2:13:35:43:98:
bf:15:7c:01:d1:1e:b1:81:e0:f3:f6:8c:cc:94:f9:77:08:42:
79:3d:71:f7:1d:37:4d:bc:5b:c1:d3:02:fc:05:82:eb:84:80:
59:5f:e8:c4:5d:63:52:2d:81:aa:42:92:db:d1:57:bd:01:1c:
e9:be:81:5e:fa:99:39:da:04:79:17:25:a6:05:27:51:7b:2e:
6f:63:a6:31:fc:07:04:f4:87:95:f4:4a:d2:6d:27:b4:4c:50:
b9:ad:8f:fe:ab:a7:14:ae:7b:61:42:40:c5:b9:8e:d4:c8:13:
5c:66:45:92:6b:8d:3a:cf:cf:7a:c7:c3:ad:04:ea:a4:3b:ed:
7f:08:78:19:07:68:2e:95:e0:3a:27:9c:58:e5:85:fc:f1:9b:
23:d0:15:e9:51:ae:3c:63:21:31:21:e3:6b:80:99:c3:c5:d9:
ba:90:d5:28:9f:ae:74:e2:f0:21:41:97:a5:3e:02:b7:0a:c3:
cb:a0:52:47:74:83:b2:f8:05:20:9b:b5:91:b9:d3:c9:a5:c6:
12:a4:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:09 2026 by rpki-client