Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: NpgtMPkSGrfGZaTpeFHKsVu+AikXckKTfzVgqWhGIVk=
Subject key identifier: F6:EA:27:32:99:78:6C:DC:1F:D6:D4:C0:2D:34:6B:7C:C3:57:9B:89
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 01A11B2BE8ADA8289F0CF3B4D7BDE436FBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: 0120
Signing time: Thu 08 Oct 2026 11:00:24 +0000
Manifest this update: Thu 08 Oct 2026 11:00:24 +0000
Manifest next update: Fri 09 Oct 2026 11:00:24 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: /LpaNSg6ou5NY+sSIcyvaN/gKp5Vwe3lR3yi+ZSEEks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2b:e8:ad:a8:28:9f:0c:f3:b4:d7:bd:e4:36:fb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Oct 8 11:00:24 2026 GMT
Not After : Oct 9 11:00:24 2026 GMT
Subject: CN=f6ea273299786cdc1fd6d4c02d346b7cc3579b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:d8:d9:73:0a:a3:ea:bb:d9:09:94:d0:98:
40:8d:b4:f6:08:81:ba:4d:f4:ab:c6:52:a2:91:6f:
41:ad:ae:58:29:4a:5b:82:a0:30:c9:e0:4d:73:65:
38:84:6e:a2:dc:f2:2f:1c:b6:54:8a:fc:12:2f:6e:
77:98:54:5e:17:d4:2a:f3:84:64:66:49:90:23:b9:
9a:ce:8a:c1:4f:ac:fc:4d:7b:5c:9e:bd:57:46:1c:
c1:80:9b:97:da:a9:a0:f2:af:03:48:3b:14:62:38:
25:b3:97:5a:9f:fc:db:65:95:05:fd:1a:d9:a3:0a:
9e:36:d8:2b:bb:a5:b8:2c:d9:9c:99:9b:b1:b9:46:
3f:73:7e:89:b8:19:4d:e4:8e:b9:47:d3:a1:ad:9e:
09:73:01:0a:a2:f0:dc:86:0e:10:e7:8b:17:c6:33:
73:5a:1a:1f:70:93:d0:23:ae:98:6d:eb:3d:fe:35:
cf:ba:e5:7f:83:2a:e6:83:93:0f:50:bd:fe:41:09:
16:5a:82:9e:77:3d:5d:57:cf:ae:5f:22:48:1a:53:
ca:8b:c5:79:a6:43:f7:6a:79:86:4f:50:b2:7a:10:
7b:1d:3e:2a:b6:4a:94:6c:32:09:62:16:69:85:7d:
6a:d5:22:22:00:55:09:ff:a5:97:9c:60:97:e4:21:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:27:32:99:78:6C:DC:1F:D6:D4:C0:2D:34:6B:7C:C3:57:9B:89
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:cd:a0:b2:32:b0:8d:9b:fe:8f:93:b6:0d:ae:05:06:ce:
75:91:40:61:18:a5:cf:df:da:2a:17:cc:ff:e3:a6:88:11:4d:
c8:a1:a8:4a:86:e7:e1:dd:29:19:36:16:4d:13:ac:9c:0a:24:
24:dc:9b:7f:ef:45:8b:86:a5:f4:67:8b:dc:f7:97:95:76:f6:
23:5e:9d:76:e8:b8:e1:71:1d:6c:c7:d1:96:17:7f:9e:e7:80:
87:1a:5a:2e:3b:94:ed:e6:0e:4e:73:2e:7f:0f:cb:34:1e:96:
a5:ad:06:e1:b7:19:57:d1:dc:44:6c:4b:d2:4c:3c:17:8d:2d:
85:ca:00:75:9d:ea:13:36:18:8a:01:38:93:57:33:04:ef:fc:
68:4e:51:4c:f2:9e:05:08:13:d2:08:fd:b9:b4:dc:d1:42:37:
e6:38:ef:2a:68:53:27:66:f6:b5:3f:e4:e0:d2:50:d4:a8:35:
62:1d:81:f3:13:63:73:75:1e:54:e9:60:4e:4d:b4:75:db:71:
06:90:9f:08:f0:2b:00:f6:ca:e0:3b:d2:89:19:55:39:43:cb:
14:89:1d:b0:ce:0d:6d:4c:64:e8:7b:6e:a1:59:73:4e:7d:6f:
47:43:0c:bc:ee:9e:ef:92:c9:84:a7:8f:53:2b:d1:ac:8c:a7:
79:55:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:05:01 2026 by rpki-client