Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
File: U91LykfekXr0_xEFE5R_gkLzsDY.mft (raw, json)
Hash identifier: fC7l3GcXJbw8X39pv3boeRLZ9xsvNJ3CfrVwESoEaeY=
Subject key identifier: 08:8E:B2:19:D3:4D:16:FA:24:18:DE:47:0D:FF:51:20:89:3B:6F:C2
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 01A13DEEC42F3616BB07B36785BFC5D5E016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
Manifest number: 0132
Signing time: Thu 15 Oct 2026 05:00:20 +0000
Manifest this update: Thu 15 Oct 2026 05:00:20 +0000
Manifest next update: Fri 16 Oct 2026 05:00:20 +0000
Files and hashes: 1: BNDkBKCimrmVvK0MK2ipirRQNos.roa (hash: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=)
2: U91LykfekXr0_xEFE5R_gkLzsDY.crl (hash: mnaYvRSioEmBn9f8z+HgsQ1lL7d/4tg4RCMeyRLwS0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:c4:2f:36:16:bb:07:b3:67:85:bf:c5:d5:e0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Oct 15 05:00:20 2026 GMT
Not After : Oct 16 05:00:20 2026 GMT
Subject: CN=088eb219d34d16fa2418de470dff5120893b6fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:5c:8b:50:d0:89:2a:4f:2d:7d:f3:26:bc:
df:01:b7:47:da:89:a4:08:89:96:df:7e:54:ca:40:
15:6b:f2:fe:cc:f8:6b:3a:3f:c6:5e:04:f5:00:c0:
b5:b8:de:a6:13:05:c5:e2:f2:85:80:26:8f:5a:cd:
ca:a7:46:77:c3:72:61:4e:3a:82:82:46:63:fc:d9:
4c:6d:32:1a:bb:80:c8:f6:16:9a:ec:6e:98:3f:7a:
69:de:66:f5:8f:62:8a:51:f8:b8:16:bb:40:6f:8a:
d9:4e:67:8b:d4:5c:c0:a0:a3:ac:f8:58:61:6c:8f:
8f:77:be:bd:57:06:5a:20:3c:c9:36:a2:1c:6c:76:
34:84:b5:55:73:ba:e6:71:68:3f:ec:5b:63:e1:dd:
6b:c5:e2:d4:ee:f9:3e:2e:53:d1:7d:14:20:f5:2b:
ed:f0:cd:4d:58:f9:85:af:11:77:3e:9f:ec:10:c7:
3c:b7:9f:9d:87:f5:9d:71:03:b5:55:a4:61:6b:86:
8a:d8:cf:eb:71:14:3f:bc:85:56:f8:66:f9:e6:55:
b5:77:7d:32:7c:a8:1a:37:f8:95:c4:b1:19:e6:32:
e4:00:ba:ce:16:48:eb:81:c3:38:d6:c5:e6:60:31:
7e:e9:f0:ab:8d:38:79:32:3e:9f:46:6f:9d:76:a2:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:B2:19:D3:4D:16:FA:24:18:DE:47:0D:FF:51:20:89:3B:6F:C2
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8c:83:d0:29:03:5f:b6:0d:b0:d7:5d:dd:97:e9:30:76:e8:
ca:0c:92:e0:a1:6b:01:e2:87:15:00:c4:29:da:61:84:40:40:
8e:97:70:9b:22:b0:1e:a9:2a:71:42:15:c1:0b:1f:b3:ba:5b:
f8:af:35:16:ab:50:43:cb:3e:7a:70:34:83:e2:20:fe:f6:82:
98:0f:59:29:6b:cd:45:b9:19:27:ed:17:a2:82:87:92:b1:49:
54:5f:ee:97:c8:54:3d:6f:8e:83:73:9b:94:f0:f4:b3:67:7b:
7a:4a:db:d5:c3:93:c2:30:11:07:95:1b:ae:9a:70:ec:32:be:
bf:bb:99:20:09:2d:f9:13:ee:a7:3b:4b:fc:17:10:88:a9:db:
50:3b:0d:f9:21:70:21:66:4c:b0:59:61:ad:43:5b:ed:f3:a2:
0c:ac:6c:c6:45:2d:d2:d7:ec:6f:d4:49:42:d7:29:4f:90:98:
16:cb:8e:3e:77:5e:f0:dc:4b:be:d4:f1:da:0d:7a:dd:b7:2a:
16:9c:7c:a0:93:9d:92:35:00:de:30:f0:91:ce:23:bb:b3:3d:
ab:de:c6:34:c5:09:5e:a6:2a:a9:2e:4d:2a:d0:45:05:a1:09:
2a:34:f9:e1:f9:b8:bb:16:18:35:cc:65:36:e4:05:5a:c5:93:
c7:37:61:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97sQvNha7B7Nnhb/F1eAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZGQ0YmNhNDdkZTkxN2FmNGZmMTEwNTEzOTQ3ZjgyNDJm
M2IwMzYwHhcNMjYxMDE1MDUwMDIwWhcNMjYxMDE2MDUwMDIwWjAzMTEwLwYDVQQD
EygwODhlYjIxOWQzNGQxNmZhMjQxOGRlNDcwZGZmNTEyMDg5M2I2ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSdci1DQiSpPLX3zJrzfAbdH2omk
CImW335UykAVa/L+zPhrOj/GXgT1AMC1uN6mEwXF4vKFgCaPWs3Kp0Z3w3JhTjqC
gkZj/NlMbTIau4DI9haa7G6YP3pp3mb1j2KKUfi4FrtAb4rZTmeL1FzAoKOs+Fhh
bI+Pd769VwZaIDzJNqIcbHY0hLVVc7rmcWg/7Ftj4d1rxeLU7vk+LlPRfRQg9Svt
8M1NWPmFrxF3Pp/sEMc8t5+dh/WdcQO1VaRha4aK2M/rcRQ/vIVW+Gb55lW1d30y
fKgaN/iVxLEZ5jLkALrOFkjrgcM41sXmYDF+6fCrjTh5Mj6fRm+ddqIY9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiOshnTTRb6JBjeRw3/USCJO2/CMB8GA1UdIwQY
MBaAFFPdS8pH3pF69P8RBROUf4JC87A2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTkxTHlrZmVrWHIwX3hFRkU1Ul9na0x6c0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MWVlMDgtNjY1Yi00NThhLTg3MjEt
YzYxZjVlODI1MWViLzEvVTkxTHlrZmVrWHIwX3hFRkU1Ul9na0x6c0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MWVlMDgtNjY1Yi00NThhLTg3MjEtYzYxZjVlODI1MWVi
LzEvVTkxTHlrZmVrWHIwX3hFRkU1Ul9na0x6c0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4yD0CkD
X7YNsNdd3ZfpMHboygyS4KFrAeKHFQDEKdphhEBAjpdwmyKwHqkqcUIVwQsfs7pb
+K81FqtQQ8s+enA0g+Ig/vaCmA9ZKWvNRbkZJ+0XooKHkrFJVF/ul8hUPW+Og3Ob
lPD0s2d7ekrb1cOTwjARB5Ubrppw7DK+v7uZIAkt+RPupztL/BcQiKnbUDsN+SFw
IWZMsFlhrUNb7fOiDKxsxkUt0tfsb9RJQtcpT5CYFsuOPnde8NxLvtTx2g163bcq
Fpx8oJOdkjUA3jDwkc4ju7M9q97GNMUJXqYqqS5NKtBFBaEJKjT54fm4uxYYNcxl
NuQFWsWTxzdhTQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:57:12 2026 by rpki-client