Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: crG1HeNd/htjMNHcd15RvWVv7/9BoaHUbYKFZPMzcug=
Subject key identifier: 90:45:0C:27:F6:13:2C:76:4A:AC:6D:0B:67:D5:E1:8C:79:29:E8:ED
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 019F8F4752FC66CC6DC1AA2538735B9F889A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: 53
Signing time: Thu 23 Jul 2026 14:00:43 +0000
Manifest this update: Thu 23 Jul 2026 14:00:43 +0000
Manifest next update: Fri 24 Jul 2026 14:00:43 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: dsL9Mh46LQLeeyVQonPASDOpVuxh8sExMsyogRt0IRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:52:fc:66:cc:6d:c1:aa:25:38:73:5b:9f:88:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Jul 23 14:00:43 2026 GMT
Not After : Jul 24 14:00:43 2026 GMT
Subject: CN=90450c27f6132c764aac6d0b67d5e18c7929e8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:65:21:c5:4a:29:f8:f9:ae:3d:fd:eb:32:
8c:c8:b4:40:3c:e7:6b:79:af:12:1a:f4:28:db:88:
75:25:06:7c:50:4b:f0:a6:47:af:48:4b:4c:25:94:
b3:23:8e:15:53:a5:a2:cd:a7:6f:49:12:99:da:38:
3a:fd:a8:e9:c2:c0:5e:06:73:0e:27:18:7e:ff:31:
d1:5b:65:2b:11:ac:16:18:06:d6:8d:d0:2d:d7:9b:
a0:1b:b9:64:a9:16:de:cc:95:31:64:4c:1f:34:b3:
f8:73:4c:1e:a1:8a:25:17:d7:cb:f4:41:c6:8c:1c:
dc:0c:dc:ca:22:57:a3:2c:f1:d8:19:d8:3f:7d:56:
0a:b6:c3:82:fe:10:73:89:64:f6:66:4e:c7:b5:10:
53:f3:7d:01:aa:06:76:f8:f2:4a:03:bb:06:9b:c9:
50:77:5f:14:75:24:87:84:a1:8a:3e:b9:89:42:7e:
c9:3e:4c:8a:60:04:0b:a6:49:fa:3e:a8:b2:4c:ad:
51:6b:5d:c0:f0:7c:e2:8d:79:cc:ec:0c:f9:6d:31:
65:7c:23:6e:a8:de:05:c7:d0:b6:5c:1f:06:f6:77:
21:97:b7:db:af:10:88:70:23:61:69:51:25:c5:89:
08:97:e0:1a:fd:5c:53:b4:16:1a:5e:87:dc:da:b9:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:0C:27:F6:13:2C:76:4A:AC:6D:0B:67:D5:E1:8C:79:29:E8:ED
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:dd:55:d5:e8:10:8f:ad:e6:41:a8:79:b6:21:63:8c:13:
f9:cb:7e:5f:25:be:29:c0:f0:9d:27:79:b4:ce:ce:f2:38:ba:
f4:36:c3:85:1a:fb:77:a3:74:cb:29:b7:58:50:ac:85:00:3c:
6e:23:0b:1d:6a:48:c4:2c:5e:9b:a7:29:f2:e0:f6:4c:cf:2f:
92:b2:0c:1f:41:08:4c:74:ff:6e:55:6e:4c:79:92:1e:91:67:
3b:08:03:f7:32:23:49:d0:5a:9f:e8:e1:0a:f3:2f:c0:8c:5f:
5d:86:10:80:a7:80:8d:57:7a:39:bc:2a:0a:02:85:8e:3f:d8:
09:de:63:b0:5a:fa:b1:df:3c:50:21:76:2b:de:53:45:04:f0:
9d:a9:83:c3:13:57:1d:e8:17:f8:45:f3:9d:58:81:19:38:fa:
c2:97:e3:0e:fa:e7:fc:14:91:c8:f8:e5:c9:1f:37:3e:8c:a6:
be:d7:d2:f4:30:9d:d9:dd:7c:ab:0c:1b:92:4c:a3:90:c9:72:
32:be:2c:11:7d:f9:d0:21:4f:04:39:6b:ff:46:55:2e:ba:86:
0b:14:2f:59:e4:8c:eb:ca:27:44:76:03:0a:9b:3a:f8:85:e9:
88:25:f5:07:c8:fe:04:13:47:8b:19:2d:bd:df:02:fa:a8:ba:
5c:95:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:25 2026 by rpki-client