Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: b+5XfRhwOEXHCvLXTDu6YVYVzk48WGJGGwIeqsphIug=
Subject key identifier: 11:9A:25:A3:9B:BB:87:FB:C0:03:9D:22:2E:D5:66:25:1D:D2:03:0F
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 019FA862683E0253ADD85636EB2B1E840E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: 60
Signing time: Tue 28 Jul 2026 11:00:49 +0000
Manifest this update: Tue 28 Jul 2026 11:00:49 +0000
Manifest next update: Wed 29 Jul 2026 11:00:49 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: Zuc/0dkGHikJngb87r0/GGhLIbHzacNx3Nr6UvMaHuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:68:3e:02:53:ad:d8:56:36:eb:2b:1e:84:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Jul 28 11:00:49 2026 GMT
Not After : Jul 29 11:00:49 2026 GMT
Subject: CN=119a25a39bbb87fbc0039d222ed566251dd2030f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:d9:4e:9f:1b:b3:2e:67:1b:dd:c9:08:c8:
89:04:33:5e:b9:dd:09:bb:82:0e:85:36:4c:7d:0f:
b4:f1:54:74:de:0a:ee:a1:bc:d7:54:05:26:25:cf:
70:ab:45:72:84:ef:ed:10:70:6d:f8:b3:56:9c:30:
36:2a:51:1c:34:cf:12:cc:bd:e6:a3:12:4f:84:6b:
3c:ce:2d:20:da:28:2e:f2:ba:94:bc:83:9c:d1:f2:
6e:8c:3d:46:4c:b1:5d:ef:7f:a2:6f:d2:0c:87:f3:
42:45:11:b8:65:48:9a:34:cf:fa:f0:95:aa:e5:c5:
9a:4b:1f:d7:37:a9:f5:36:76:fa:f5:7d:5d:f3:02:
2c:2b:b6:21:8b:9b:46:88:94:45:d6:3a:59:d4:16:
bc:c9:93:48:71:01:15:25:46:ed:7c:4d:71:a6:d6:
0d:c5:fe:e9:e7:cc:0d:af:09:aa:ea:58:b7:24:b8:
c3:da:42:95:08:d2:f3:2a:fe:40:b2:60:01:c6:c1:
47:4f:26:73:49:e6:3f:fc:13:d9:e8:49:09:fd:15:
b1:9b:d7:a2:73:35:bc:e5:14:f9:f1:73:8b:f8:73:
f2:6a:69:89:4c:24:8d:94:4d:78:54:5e:56:2d:96:
c2:03:0b:ec:32:fd:1d:36:09:34:e0:d1:91:54:b0:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:25:A3:9B:BB:87:FB:C0:03:9D:22:2E:D5:66:25:1D:D2:03:0F
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4a:96:22:57:d8:51:28:0b:86:f6:a8:2f:32:45:57:87:f7:
d4:40:0b:d8:c4:db:1a:e0:da:2d:89:d7:82:3a:44:34:62:6b:
58:f7:52:ad:7d:ab:20:f0:bc:22:12:ac:24:2a:90:eb:0f:6a:
15:6e:de:61:eb:93:04:0d:53:56:f2:ea:94:4d:61:d5:90:47:
ca:46:c7:37:8e:a4:0d:fa:f1:59:43:9d:aa:a2:45:b4:09:ea:
93:b0:ed:1e:b2:e0:f3:1e:59:f2:ca:ad:0f:8e:21:df:0f:68:
d5:70:13:99:0a:d3:52:c9:bb:80:c6:3e:3d:36:06:28:5a:44:
64:13:a3:b9:c7:e3:94:fd:09:d5:e8:d8:e1:4e:1b:b8:65:a5:
a7:be:9f:43:b4:80:4b:74:d3:ac:60:8e:d6:10:f4:6e:51:88:
20:08:b8:64:f2:53:fb:ce:93:d3:39:04:58:39:89:08:43:b9:
a7:a6:68:88:ec:85:02:fb:67:67:5f:92:55:72:60:66:09:bc:
d9:f9:2a:86:63:fd:b7:6d:a7:47:ef:4a:c0:14:57:aa:39:f8:
59:08:ee:69:e3:14:c1:77:14:5b:e9:07:cc:1a:37:5d:8d:ee:
88:61:8c:37:6b:84:a6:1a:1e:94:02:d9:1f:ea:01:47:d2:57:
b9:8b:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:30 2026 by rpki-client