Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: 2Jy8E9YnBEucfmd53r70gvOB7/NavgUEcF3xFHWzisI=
Subject key identifier: 64:F6:37:AF:30:61:99:B8:8C:17:CC:DC:8E:8B:AC:7D:D1:9E:07:CF
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019CA9EAF862A9E3221ED5BD6367C03569D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 072D
Signing time: Sun 01 Mar 2026 15:01:14 +0000
Manifest this update: Sun 01 Mar 2026 15:01:14 +0000
Manifest next update: Mon 02 Mar 2026 15:01:14 +0000
Files and hashes: 1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: DAKCQUiPvK6WVg/0zlEv+8+UG+xL2Qc05F+fwx4FbwE=)
2: dYKJcrjXuTpS6_7bUiBb2osa674.roa (hash: wfR3v7wfu8CdCj0DaXJsMGWbP8IlPqI3MSKZ+73rZNw=)
3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:f8:62:a9:e3:22:1e:d5:bd:63:67:c0:35:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Mar 1 15:01:14 2026 GMT
Not After : Mar 2 15:01:14 2026 GMT
Subject: CN=64f637af306199b88c17ccdc8e8bac7dd19e07cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:c9:9b:04:66:d9:13:4a:d1:a7:08:08:41:
fb:19:8c:28:18:84:7e:61:a7:f4:d2:56:8a:72:4d:
50:a3:6a:bc:81:75:be:bd:da:65:f7:6c:e1:6b:ea:
84:4f:76:08:1d:9d:de:d5:c1:94:0a:20:13:a7:11:
b3:b0:70:d2:8f:05:f7:0b:a5:83:41:8c:20:76:7d:
78:a4:55:ce:82:b2:95:07:3c:ee:50:1f:c2:28:77:
73:53:d6:70:66:46:35:2a:17:6a:ca:85:e7:c5:ac:
be:99:30:b8:8e:d4:6c:a1:7c:4f:99:47:1d:10:26:
25:ce:9e:84:5d:bc:e5:5d:ea:b2:84:a6:0d:9d:97:
5d:56:fe:75:57:63:92:33:97:0c:1b:6d:84:0f:b4:
a8:51:f0:68:63:ca:17:01:c4:07:a4:fc:2d:f7:ad:
19:78:b9:c5:d1:5c:6c:a0:e8:07:40:79:e2:46:b1:
21:08:57:02:02:56:3b:53:42:db:8d:7e:81:33:05:
fd:ca:2c:35:68:5e:00:6f:a2:62:85:48:6b:59:2c:
9f:b6:6d:ed:e7:e0:cb:b1:6f:28:bd:bf:6e:a3:bf:
2f:44:c5:d4:0a:64:5c:f6:10:31:52:ac:3b:3f:93:
d2:27:9a:31:af:2c:59:01:ec:15:9c:d5:b9:71:6c:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:37:AF:30:61:99:B8:8C:17:CC:DC:8E:8B:AC:7D:D1:9E:07:CF
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:16:4e:28:7c:aa:4b:e8:e0:ab:e0:0c:95:5a:a5:bc:86:
85:cd:cd:70:4c:cb:0b:02:2d:e3:c2:c4:f5:79:f0:e2:a9:b7:
5f:25:1f:4a:24:f7:61:4e:9d:be:75:60:34:66:e8:3a:ae:52:
e8:ec:8c:ad:38:00:bc:f3:5c:19:a9:fb:4f:03:1b:e6:34:cb:
d0:1c:68:6b:c3:c1:bb:d9:6c:06:1e:97:ea:b0:79:49:2c:f6:
9a:1b:84:38:60:30:45:8a:e9:6a:46:3f:61:0a:02:58:db:22:
c2:5d:05:aa:dc:fb:68:20:53:30:63:07:e2:18:9f:2c:70:19:
d4:f1:49:20:28:d9:53:35:f8:11:fb:7b:ba:29:89:64:db:26:
c3:a7:e4:8e:e9:cf:2f:08:97:15:07:a1:d5:65:40:fc:9f:11:
6b:95:89:79:cf:f5:34:65:8f:fc:5c:25:5b:29:76:98:ce:6b:
ac:0d:cb:7a:07:c1:12:d2:0d:4b:14:38:a0:58:f9:86:6d:79:
3a:23:8b:55:0f:9d:0c:b7:83:22:1a:2a:e1:db:2b:bf:59:9f:
f8:37:6e:5d:80:60:9b:8b:03:ec:c1:02:a0:1e:a6:32:2e:e1:
56:4f:ff:5b:a0:6c:67:48:61:3f:3c:45:28:07:2d:fc:8b:19:
15:6e:82:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6vhiqeMiHtW9Y2fANWnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzlhOGZiNTU5OWJmOTNiNTBmZmJiY2M4Nzc4ODRhNmQ4
MTUxNTcwHhcNMjYwMzAxMTUwMTE0WhcNMjYwMzAyMTUwMTE0WjAzMTEwLwYDVQQD
Eyg2NGY2MzdhZjMwNjE5OWI4OGMxN2NjZGM4ZThiYWM3ZGQxOWUwN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF3JmwRm2RNK0acICEH7GYwoGIR+
Yaf00laKck1Qo2q8gXW+vdpl92zha+qET3YIHZ3e1cGUCiATpxGzsHDSjwX3C6WD
QYwgdn14pFXOgrKVBzzuUB/CKHdzU9ZwZkY1KhdqyoXnxay+mTC4jtRsoXxPmUcd
ECYlzp6EXbzlXeqyhKYNnZddVv51V2OSM5cMG22ED7SoUfBoY8oXAcQHpPwt960Z
eLnF0VxsoOgHQHniRrEhCFcCAlY7U0LbjX6BMwX9yiw1aF4Ab6JihUhrWSyftm3t
5+DLsW8ovb9uo78vRMXUCmRc9hAxUqw7P5PSJ5oxryxZAewVnNW5cWwXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT2N68wYZm4jBfM3I6LrH3RngfPMB8GA1UdIwQY
MBaAFFPJqPtVmb+TtQ/7vMh3iEptgVFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYt
MzM4ODE0NjdhYzVlLzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMjllNzktOWJjNC00N2JhLWIxMzYtMzM4ODE0NjdhYzVl
LzEvVThtby0xV1p2NU8xRF91OHlIZUlTbTJCVVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcgWTih8
qkvo4KvgDJVapbyGhc3NcEzLCwIt48LE9Xnw4qm3XyUfSiT3YU6dvnVgNGboOq5S
6OyMrTgAvPNcGan7TwMb5jTL0Bxoa8PBu9lsBh6X6rB5SSz2mhuEOGAwRYrpakY/
YQoCWNsiwl0Fqtz7aCBTMGMH4hifLHAZ1PFJICjZUzX4Eft7uimJZNsmw6fkjunP
LwiXFQeh1WVA/J8Ra5WJec/1NGWP/FwlWyl2mM5rrA3LegfBEtINSxQ4oFj5hm15
OiOLVQ+dDLeDIhoq4dsrv1mf+DduXYBgm4sD7MECoB6mMi7hVk//W6BsZ0hhPzxF
KAct/IsZFW6COg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client