Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: 9Ue+OKvVZKQ+BrucduOZyk1zmt0W0qBrJy7wYzIBoWA=
Subject key identifier: 73:4D:26:19:41:94:9E:81:4A:0E:CF:11:78:FA:2E:67:5C:AB:F0:EE
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 019FA4859108700B890DFFF65EE70C37BD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: 5E
Signing time: Mon 27 Jul 2026 17:00:44 +0000
Manifest this update: Mon 27 Jul 2026 17:00:44 +0000
Manifest next update: Tue 28 Jul 2026 17:00:44 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: b87FdJrTi8maP1dGTqCbmMYUwDc1eO/mgy27vdAq8Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:91:08:70:0b:89:0d:ff:f6:5e:e7:0c:37:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Jul 27 17:00:44 2026 GMT
Not After : Jul 28 17:00:44 2026 GMT
Subject: CN=734d261941949e814a0ecf1178fa2e675cabf0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:31:c3:ac:ce:26:38:32:57:cc:c4:ab:6a:
43:66:3a:ae:e2:aa:ed:3d:26:00:99:91:34:cb:b5:
34:69:82:87:6a:fb:c8:48:0d:7f:a3:5a:a7:61:5d:
6f:34:8f:12:7b:55:91:e6:31:c1:ff:d3:e4:11:bc:
eb:79:23:7d:91:de:16:8f:3f:02:16:62:fb:31:ac:
5b:26:4d:68:9e:52:2e:a5:c5:44:ef:60:75:f3:04:
5d:e8:11:2d:17:e2:20:59:0d:9a:97:2d:70:b6:82:
aa:db:59:e2:a2:b0:18:cf:c7:2b:2e:bc:9a:59:6d:
d9:2f:2b:e8:dd:b8:23:54:31:b0:ea:37:a2:45:57:
f4:e8:e7:4a:67:a6:3f:06:72:10:01:5c:5b:70:9b:
c8:90:d8:80:9a:50:2b:22:68:62:35:e3:dd:86:ef:
7e:d6:2b:51:39:0c:ad:4e:36:e9:06:63:01:34:89:
24:fe:95:2c:27:86:2e:e8:bc:40:41:73:47:93:ef:
9a:f9:97:11:6a:24:83:e8:c5:93:4c:6b:ac:08:28:
1a:79:38:aa:aa:4c:9a:54:3a:3b:a0:bf:c3:b9:9e:
5a:6a:93:9e:7e:f6:d7:74:12:00:84:62:a8:a7:8e:
da:a7:21:6c:7e:be:bc:6a:cb:5f:d9:e3:0a:7f:8f:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4D:26:19:41:94:9E:81:4A:0E:CF:11:78:FA:2E:67:5C:AB:F0:EE
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:45:4f:7f:57:2f:50:78:33:bf:41:d9:9d:a3:ff:1f:3e:a6:
e0:78:b8:22:b3:be:02:0b:86:e3:24:2f:27:0d:9b:b0:16:20:
17:8f:4f:d3:71:3a:4e:6a:b6:ed:23:14:56:09:e6:48:57:88:
ae:a7:44:7e:89:18:d4:2d:aa:be:88:f7:42:46:d3:59:9a:89:
9e:5a:12:60:4b:28:de:94:7d:23:f0:29:de:52:8c:9b:ba:bc:
1e:f3:5e:48:51:d7:85:57:07:69:aa:29:9b:2b:cb:5b:1c:b7:
25:25:6c:ee:e6:83:4a:7f:48:ea:4e:41:f6:e2:b1:bf:3b:f4:
45:ce:29:2e:28:58:4c:a5:0f:60:05:40:21:1d:26:4b:ad:44:
cd:17:d2:e0:80:19:53:35:4d:f5:08:92:16:6a:9e:61:e7:9e:
3c:8b:f3:7e:a1:27:06:ef:d9:de:e1:b3:6d:86:0d:07:c5:92:
42:d6:5e:88:be:9a:a3:36:99:d3:01:79:8c:cb:6a:8a:38:dc:
a5:7a:95:07:e1:67:e8:03:a6:87:7d:a4:11:76:30:95:77:3a:
30:c8:8e:06:cf:3d:2d:39:2a:77:61:33:2a:6e:f0:2c:bb:a6:
be:b1:2d:73:38:c7:8e:59:2b:fd:8b:d7:e1:f8:f4:79:53:ff:
10:83:72:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+khZEIcAuJDf/2XucMN70KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZGQ0YmNhNDdkZTkxN2FmNGZmMTEwNTEzOTQ3ZjgyNDJm
M2IwMzYwHhcNMjYwNzI3MTcwMDQ0WhcNMjYwNzI4MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg3MzRkMjYxOTQxOTQ5ZTgxNGEwZWNmMTE3OGZhMmU2NzVjYWJmMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvToxw6zOJjgyV8zEq2pDZjqu4qrt
PSYAmZE0y7U0aYKHavvISA1/o1qnYV1vNI8Se1WR5jHB/9PkEbzreSN9kd4Wjz8C
FmL7MaxbJk1onlIupcVE72B18wRd6BEtF+IgWQ2aly1wtoKq21niorAYz8crLrya
WW3ZLyvo3bgjVDGw6jeiRVf06OdKZ6Y/BnIQAVxbcJvIkNiAmlArImhiNePdhu9+
1itROQytTjbpBmMBNIkk/pUsJ4Yu6LxAQXNHk++a+ZcRaiSD6MWTTGusCCgaeTiq
qkyaVDo7oL/DuZ5aapOefvbXdBIAhGKop47apyFsfr68astf2eMKf48MNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNNJhlBlJ6BSg7PEXj6Lmdcq/DuMB8GA1UdIwQY
MBaAFFPdS8pH3pF69P8RBROUf4JC87A2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTkxTHlrZmVrWHIwX3hFRkU1Ul9na0x6c0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MWVlMDgtNjY1Yi00NThhLTg3MjEt
YzYxZjVlODI1MWViLzEvVTkxTHlrZmVrWHIwX3hFRkU1Ul9na0x6c0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MWVlMDgtNjY1Yi00NThhLTg3MjEtYzYxZjVlODI1MWVi
LzEvVTkxTHlrZmVrWHIwX3hFRkU1Ul9na0x6c0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUVPf1cv
UHgzv0HZnaP/Hz6m4Hi4IrO+AguG4yQvJw2bsBYgF49P03E6Tmq27SMUVgnmSFeI
rqdEfokY1C2qvoj3QkbTWZqJnloSYEso3pR9I/Ap3lKMm7q8HvNeSFHXhVcHaaop
myvLWxy3JSVs7uaDSn9I6k5B9uKxvzv0Rc4pLihYTKUPYAVAIR0mS61EzRfS4IAZ
UzVN9QiSFmqeYeeePIvzfqEnBu/Z3uGzbYYNB8WSQtZeiL6aozaZ0wF5jMtqijjc
pXqVB+Fn6AOmh32kEXYwlXc6MMiOBs89LTkqd2EzKm7wLLumvrEtczjHjlkr/YvX
4fj0eVP/EINy+w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:11:55 2026 by rpki-client