Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: D0OQLVJZ6uC/Qx48LshglOfrKhZMxOjNL21Nrg5dFFw=
Subject key identifier: 32:D8:B1:57:53:F7:C6:C7:22:3C:F3:7E:0C:16:DF:8C:5D:A8:78:67
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 01A08B9F41FDB97DE43EAA0C6899826D0183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: 011B
Signing time: Thu 10 Sep 2026 14:01:05 +0000
Manifest this update: Thu 10 Sep 2026 14:01:05 +0000
Manifest next update: Fri 11 Sep 2026 14:01:05 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: 8rPp+vGZTs3q15Ur6SsG+ln5YJWrHI9WDhjjOxCmVXI=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:41:fd:b9:7d:e4:3e:aa:0c:68:99:82:6d:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Sep 10 14:01:05 2026 GMT
Not After : Sep 11 14:01:05 2026 GMT
Subject: CN=32d8b15753f7c6c7223cf37e0c16df8c5da87867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:52:5b:09:bd:3d:20:da:18:93:5b:ec:c5:
f4:56:80:0b:c1:a9:de:cc:5f:f2:0e:0a:29:14:41:
a3:d1:3c:06:c1:05:d8:4e:78:8a:0c:9f:cf:38:c5:
72:57:7e:78:29:5b:04:ac:0d:69:f1:30:fe:3a:1f:
a9:37:08:26:92:b1:24:e9:4c:be:1f:52:5e:94:2e:
e1:65:2f:6a:df:be:e0:df:49:2b:17:21:1d:7e:e8:
d3:1f:03:01:a3:d5:4a:db:3b:ea:0b:89:40:2d:e8:
e8:ec:81:06:f3:5d:3e:d3:07:f4:1c:34:7e:c6:91:
e8:97:b8:8d:19:77:85:45:b6:17:2d:6f:3b:95:72:
75:fc:ad:dc:73:95:6a:72:ad:f4:a8:71:92:75:6a:
f5:38:93:49:30:90:f9:ab:2f:b0:f9:e0:b4:d2:dd:
f7:33:c0:d4:cd:f0:fa:f7:a7:ea:bb:d3:aa:07:13:
48:56:b8:63:1a:20:b8:eb:29:77:77:09:fb:b2:b5:
a1:06:c8:b1:0a:d3:9a:6e:0b:19:77:bc:33:bf:ef:
d0:a5:79:04:53:97:8d:db:fe:83:52:eb:56:71:0b:
88:bb:13:6c:b0:cc:03:87:9b:e2:e2:ea:78:c8:86:
a5:e1:4e:83:64:e7:f7:73:7b:e2:e3:71:b1:39:f9:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:B1:57:53:F7:C6:C7:22:3C:F3:7E:0C:16:DF:8C:5D:A8:78:67
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:50:21:2d:c6:d5:7d:7b:ef:30:df:c7:2c:de:51:cd:66:
e7:4c:f0:00:5b:e9:c4:e3:2e:a7:c9:85:6e:2a:f8:73:b6:1a:
b3:43:f3:33:90:d2:5e:eb:66:97:03:9c:8f:cb:26:39:0e:a4:
07:b7:c7:4b:7f:35:68:29:dc:2c:8b:98:0d:84:a8:95:b8:9a:
07:2d:c4:39:8e:a8:ed:39:2b:0e:50:ff:4e:5f:56:05:24:6c:
d0:4b:7d:19:19:ab:bc:ed:f1:a1:e0:73:f6:4d:3d:11:9c:58:
02:fa:c2:0c:d1:73:51:09:ef:85:fd:df:99:67:35:a6:35:79:
40:ae:0d:19:55:12:1b:4e:20:1c:0e:71:7e:6b:d2:bc:21:3e:
b0:4f:5d:67:60:c0:bf:de:81:e5:8a:47:7b:e9:44:0b:c7:5c:
e4:1f:03:49:07:55:ca:cc:55:0b:f0:7b:b2:3a:f4:50:29:6f:
cd:2c:da:43:15:79:ee:44:b1:9d:d9:bd:40:f5:aa:50:e5:ba:
8a:dc:04:bb:3f:e8:00:0e:7e:3d:0d:bf:cf:2f:fd:08:27:94:
ad:8a:f5:13:36:04:c2:d8:11:c8:2d:94:7d:18:42:b6:9e:9f:
69:3f:86:ce:4c:c7:49:ca:2c:c7:09:4e:15:2b:6b:ac:30:3e:
4e:0c:60:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLn0H9uX3kPqoMaJmCbQGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OGU2YzRhNTA2MmYxNzRmZjNjZDE4YmY4YTQxYmE1NzM4
ZGIwNzYwHhcNMjYwOTEwMTQwMTA1WhcNMjYwOTExMTQwMTA1WjAzMTEwLwYDVQQD
EygzMmQ4YjE1NzUzZjdjNmM3MjIzY2YzN2UwYzE2ZGY4YzVkYTg3ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5VSWwm9PSDaGJNb7MX0VoALwane
zF/yDgopFEGj0TwGwQXYTniKDJ/POMVyV354KVsErA1p8TD+Oh+pNwgmkrEk6Uy+
H1JelC7hZS9q377g30krFyEdfujTHwMBo9VK2zvqC4lALejo7IEG810+0wf0HDR+
xpHol7iNGXeFRbYXLW87lXJ1/K3cc5Vqcq30qHGSdWr1OJNJMJD5qy+w+eC00t33
M8DUzfD696fqu9OqBxNIVrhjGiC46yl3dwn7srWhBsixCtOabgsZd7wzv+/QpXkE
U5eN2/6DUutWcQuIuxNssMwDh5vi4up4yIal4U6DZOf3c3vi43GxOflkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLYsVdT98bHIjzzfgwW34xdqHhnMB8GA1UdIwQY
MBaAFJWObEpQYvF0/zzRi/ikG6VzjbB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFk1c1NsQmk4WFRfUE5HTC1LUWJwWE9Oc0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wYjE4ZDAtMDc3ZC00MjNlLWE5ZTAt
NTE1MjA4NjM2YWJiLzEvbFk1c1NsQmk4WFRfUE5HTC1LUWJwWE9Oc0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wYjE4ZDAtMDc3ZC00MjNlLWE5ZTAtNTE1MjA4NjM2YWJi
LzEvbFk1c1NsQmk4WFRfUE5HTC1LUWJwWE9Oc0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOxQIS3G
1X177zDfxyzeUc1m50zwAFvpxOMup8mFbir4c7Yas0PzM5DSXutmlwOcj8smOQ6k
B7fHS381aCncLIuYDYSolbiaBy3EOY6o7TkrDlD/Tl9WBSRs0Et9GRmrvO3xoeBz
9k09EZxYAvrCDNFzUQnvhf3fmWc1pjV5QK4NGVUSG04gHA5xfmvSvCE+sE9dZ2DA
v96B5YpHe+lEC8dc5B8DSQdVysxVC/B7sjr0UClvzSzaQxV57kSxndm9QPWqUOW6
itwEuz/oAA5+PQ2/zy/9CCeUrYr1EzYEwtgRyC2UfRhCtp6faT+GzkzHScosxwlO
FStrrDA+TgxgsQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:58 2026 by rpki-client