Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: wNEyT3MdWYs2PcQMBwRNwR/X6z1BIgzdhLz9OHh8TuI=
Subject key identifier: 9B:7D:8C:18:DC:8E:D8:3F:68:9E:DE:C5:86:F2:AA:97:21:C2:35:E8
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 01A181874F8C583F3E82A2C5E17725E67535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: 0155
Signing time: Wed 28 Oct 2026 08:01:30 +0000
Manifest this update: Wed 28 Oct 2026 08:01:30 +0000
Manifest next update: Thu 29 Oct 2026 08:01:30 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: wrqeoR1WrXGdM2gj644mhGdfllEIL/G0fYGSCJI3Y70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:4f:8c:58:3f:3e:82:a2:c5:e1:77:25:e6:75:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Oct 28 08:01:30 2026 GMT
Not After : Oct 29 08:01:30 2026 GMT
Subject: CN=9b7d8c18dc8ed83f689edec586f2aa9721c235e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:c4:ac:15:0b:ae:a2:2f:6f:6e:49:2f:4b:
47:1b:17:44:4d:c3:fc:e7:8e:5e:45:dd:ea:de:0e:
9c:cc:2f:72:96:84:6c:f9:bb:bc:a0:8f:e2:8f:d8:
12:b7:f8:7a:b3:82:71:30:1a:81:ee:21:8d:1e:cd:
95:1e:06:82:fd:64:1b:98:b7:10:30:f8:80:2b:5d:
7a:1b:c9:62:f0:d0:74:df:d8:de:63:a3:63:bc:4f:
81:36:51:98:66:4a:9c:9f:d8:28:ff:7b:09:4f:f0:
49:89:b2:b8:24:cb:18:25:a0:4c:df:36:02:11:f3:
de:e5:04:38:3d:81:c1:2f:5a:69:96:9d:4e:b1:5d:
cc:41:ae:65:37:95:c5:f6:47:1b:3d:e3:c9:ee:70:
ff:f8:f7:e3:0b:00:ba:10:d3:f3:66:31:7e:70:36:
08:d7:3b:f5:e2:54:a3:25:a3:69:4a:e4:6d:85:2f:
ae:da:01:e6:37:8e:7b:89:90:d3:76:79:cc:e1:aa:
e5:fd:c9:22:34:17:c3:ea:5b:7d:f8:96:d3:26:75:
ac:75:2b:9b:01:af:21:8a:67:6b:2f:d3:8f:5f:06:
e2:a5:ec:98:88:8f:72:23:fc:c4:13:60:4e:7f:e8:
9a:a3:05:55:de:d5:cd:33:bb:0e:89:4c:c7:20:d7:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:8C:18:DC:8E:D8:3F:68:9E:DE:C5:86:F2:AA:97:21:C2:35:E8
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2c:a1:64:54:68:67:2d:1e:5a:23:4a:73:38:57:02:79:f9:
8e:88:4c:8e:c0:13:f6:a4:ee:3d:57:ff:3b:82:98:16:9d:17:
83:2d:c1:38:3f:e9:ee:13:84:ec:75:fb:72:d2:57:9c:e2:50:
39:df:9e:3b:f1:e3:6c:6c:c1:29:9a:48:8c:7c:b4:1d:12:ab:
13:b2:c1:ed:1b:e9:e0:17:e0:dc:c4:18:f6:75:24:c2:15:28:
e5:96:21:ad:90:a2:67:9d:1e:63:5e:a2:31:63:fe:15:73:bd:
9b:03:be:2b:ed:3f:46:80:c8:43:a6:00:f6:60:e2:63:6b:4a:
d5:71:f9:67:d0:63:49:b3:40:d7:92:0e:f5:28:cc:2b:04:31:
66:fb:99:3a:85:76:cc:fe:78:52:cd:8b:f6:1d:36:38:f2:47:
c4:e0:2f:a1:e9:8c:5e:cd:6d:6b:de:06:61:70:71:14:93:21:
66:a8:62:92:4c:39:c4:06:4c:20:a9:69:69:c4:67:8e:b0:fa:
dc:31:8b:ae:c9:9f:dd:92:e6:f2:3e:9f:69:7a:37:74:ea:33:
2a:39:16:d6:30:fc:e4:c2:87:9d:74:43:7e:be:e9:c6:13:de:
94:56:69:5e:24:d3:4d:eb:e5:3e:73:80:05:52:03:95:4a:0e:
1c:1a:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:49 2026 by rpki-client