Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: lAZ4onKOr9Ecthr/ykDyywh4orLR57LwoaZWUaQV65A=
Subject key identifier: C4:BB:25:8B:23:09:73:16:1B:A7:9D:8C:AD:A7:E9:EE:64:74:A2:84
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 01A09020E3860C010656EDA3247F68065D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: D8
Signing time: Fri 11 Sep 2026 11:01:09 +0000
Manifest this update: Fri 11 Sep 2026 11:01:09 +0000
Manifest next update: Sat 12 Sep 2026 11:01:09 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: acnIJDdEKRzcTJa3KR9wTw8irtkNmUBVQV3CxfPW/f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:e3:86:0c:01:06:56:ed:a3:24:7f:68:06:5d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Sep 11 11:01:09 2026 GMT
Not After : Sep 12 11:01:09 2026 GMT
Subject: CN=c4bb258b230973161ba79d8cada7e9ee6474a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:43:c0:3e:5e:56:1e:65:9b:83:24:ee:31:
12:59:a0:1c:c0:f8:a4:a5:db:10:6e:a5:09:ca:6a:
ff:46:ef:0a:1d:6f:5a:0d:5d:83:31:ae:57:8e:ea:
7b:9d:17:7a:bb:75:7b:dd:4e:32:57:ee:4f:ac:45:
09:31:1e:cd:27:86:96:61:e4:6b:41:93:e8:a2:c4:
10:60:9b:9e:cf:76:7c:3a:ed:43:75:ef:19:5b:f7:
e4:8c:0b:a9:6b:73:ee:53:fe:23:cb:eb:a9:c8:12:
ca:43:fa:79:5c:a8:5f:02:7a:1c:97:b2:f9:ff:6e:
b0:97:2f:ef:87:4a:90:b5:e6:6a:a7:12:ee:e9:cb:
b6:91:05:b8:a0:de:10:eb:82:89:13:d9:c5:95:60:
f0:a0:08:73:97:23:84:49:84:4d:a2:f4:f6:f7:fa:
20:2d:30:f0:51:6f:ac:b9:d1:5a:ec:ff:7e:3c:37:
4f:ed:44:d6:73:07:0f:26:19:61:ef:87:e4:4a:9b:
30:1a:17:d9:60:bc:6e:75:b3:3d:48:75:1b:67:45:
4f:f7:f0:0d:94:c5:6f:25:4e:9b:bb:5c:5a:34:f4:
5d:54:99:c7:38:4b:00:6e:6c:93:ac:a4:42:0f:25:
12:c8:f4:7a:57:1a:57:7f:e7:f3:7d:20:fd:be:50:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:25:8B:23:09:73:16:1B:A7:9D:8C:AD:A7:E9:EE:64:74:A2:84
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ab:c5:0f:5b:d7:3a:71:45:48:e0:e6:b3:f2:79:1f:5e:f4:
35:f0:9f:ae:5e:4c:74:dd:05:7c:ae:38:c0:a7:31:01:47:47:
c3:00:bb:4a:c8:7c:ea:41:f2:55:0a:99:ff:1f:be:24:df:2a:
fa:db:ea:f7:e5:ff:1b:7d:85:f4:8d:65:f8:ae:a7:0b:fc:88:
8d:0b:a9:2f:f8:00:74:ea:ce:7a:c6:ed:6b:b9:11:6b:e6:35:
17:b3:1d:dc:aa:f7:3e:af:10:0b:04:1e:d4:87:27:82:72:8e:
26:07:d0:79:3d:c4:14:e3:dc:14:3a:96:b4:37:e8:2a:e2:4f:
24:1a:70:b2:b1:de:53:8f:1f:aa:77:80:7c:78:eb:b5:f4:04:
50:af:ee:be:e0:ff:26:16:f6:ad:c9:cc:78:35:83:d1:50:1a:
aa:9e:09:08:f9:f8:05:8b:77:6e:ba:04:0e:8f:96:1e:24:ca:
cf:9f:9f:94:aa:03:09:02:fe:95:8d:a9:ec:23:03:da:45:14:
18:6e:3a:ef:1d:58:f3:a8:0b:4c:c5:5a:1f:d5:ae:1d:a6:77:
20:eb:36:26:bf:f7:44:eb:68:e7:ec:13:98:2a:ce:66:2b:13:
34:2c:96:ad:b1:8e:34:e1:23:db:08:02:30:58:16:c3:28:3b:
40:41:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:03:20 2026 by rpki-client