Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: UIOjoV8sJM0eHZRY1qi6H4M9eye4MFYNMHx+bOOn59E=
Subject key identifier: D2:CC:E3:1F:AD:34:6D:A5:BE:24:E4:C0:E7:74:3D:DD:1F:39:AB:D5
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 019E8421D30252C3DBEF6AEBDBE0C5DF4D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: 0E
Signing time: Mon 01 Jun 2026 17:01:09 +0000
Manifest this update: Mon 01 Jun 2026 17:01:09 +0000
Manifest next update: Tue 02 Jun 2026 17:01:09 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: 0Z112NqSS8GQIvcA3825xt5QY/T3HxNSXvywwLpO60s=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:21:d3:02:52:c3:db:ef:6a:eb:db:e0:c5:df:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Jun 1 17:01:09 2026 GMT
Not After : Jun 2 17:01:09 2026 GMT
Subject: CN=d2cce31fad346da5be24e4c0e7743ddd1f39abd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:dd:8d:61:40:38:03:c8:36:07:5d:56:77:
1a:39:06:5a:dd:c4:88:87:a0:60:65:94:2d:93:26:
7b:29:1a:ac:ff:4d:e2:9d:ec:a1:9d:52:cd:67:05:
a1:ef:b6:2b:eb:c5:98:08:6d:0a:1f:38:fb:f3:20:
a8:98:7f:d7:64:8d:ca:3f:9d:0b:2a:f7:d4:31:d4:
ff:32:4b:ae:55:d3:c5:d9:66:dd:22:60:f6:81:b3:
da:18:c5:0b:54:cd:35:54:8f:08:83:59:7c:2a:9d:
a8:be:01:26:01:85:23:0a:dd:93:b9:4d:02:51:d9:
90:8c:01:92:07:33:44:fb:eb:34:d3:da:10:2a:b1:
e5:c6:74:42:98:e3:04:46:bf:03:30:1a:db:14:a4:
a0:09:9f:34:38:24:77:49:65:2a:3d:88:5c:d8:fd:
b3:10:ce:3d:93:d4:7c:56:ee:39:13:4d:e2:30:24:
e8:f5:1a:70:fc:70:9b:b8:55:20:52:02:4d:c4:ef:
92:3b:2b:f0:80:79:17:fe:bd:db:8d:51:c4:a1:75:
0f:2f:60:3c:66:c0:f9:dc:a4:98:91:cf:29:a2:61:
4f:45:91:fe:70:15:26:98:a1:60:d8:e8:cd:87:3b:
38:ee:66:4e:72:48:e3:72:1f:87:9e:8b:ab:5b:ca:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:E3:1F:AD:34:6D:A5:BE:24:E4:C0:E7:74:3D:DD:1F:39:AB:D5
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d9:2f:73:d2:d8:11:f4:3f:51:0b:ee:c8:a4:6e:c5:1b:71:
3a:dc:1d:2d:68:46:55:13:33:14:58:49:d2:1c:73:56:65:ea:
83:4b:88:d8:7b:0c:c9:2a:a0:1f:89:f4:db:4e:d2:52:fa:73:
af:fc:8c:b3:fb:15:4c:d9:9f:b0:b9:85:92:48:db:54:86:e9:
d4:59:d0:98:b4:a1:f3:f1:0c:8f:f4:99:40:2c:4c:35:8b:6b:
a3:a1:f8:3d:e7:27:13:0b:52:28:d4:09:2d:f0:fa:43:60:d2:
f3:bc:69:8d:2e:09:e6:e2:81:e8:b6:dc:86:7b:84:c4:f7:8b:
8f:af:2e:e0:2b:e6:01:60:9c:28:fa:9f:2d:50:09:13:32:c8:
2a:13:51:b8:2b:84:8c:ed:05:bd:3d:08:1b:80:eb:a3:67:af:
f6:39:28:98:d6:ca:ea:75:e1:41:90:7e:46:0a:69:0d:19:2e:
81:0d:6d:4a:58:49:5f:3f:5b:be:e2:b2:56:76:cc:88:7a:f5:
ca:52:a0:73:e6:80:3a:38:1a:ec:cf:60:1f:a2:83:1e:8a:46:
eb:29:6a:de:48:a2:56:07:91:8e:c4:df:d0:0a:76:ef:39:02:
fe:07:71:e0:5a:e3:12:af:d1:ee:19:a6:f0:7b:d0:d9:a9:77:
6a:7e:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:32:28 2026 by rpki-client