Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: ZvMFux2MZujAzOekZwCRhRooIUWFPhblp9Sg1B/QywM=
Subject key identifier: 69:01:34:78:C3:80:EF:59:1B:4C:4C:E2:F5:E5:70:18:16:A9:96:67
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 01A17EF3AA8D65ABE5F16BE40D0873CE44AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: 0199
Signing time: Tue 27 Oct 2026 20:01:00 +0000
Manifest this update: Tue 27 Oct 2026 20:01:00 +0000
Manifest next update: Wed 28 Oct 2026 20:01:00 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: zNfjKlbNOTf1NGNbEONwIAKi4pjnqm+ldgzAdrnZGHk=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:aa:8d:65:ab:e5:f1:6b:e4:0d:08:73:ce:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Oct 27 20:01:00 2026 GMT
Not After : Oct 28 20:01:00 2026 GMT
Subject: CN=69013478c380ef591b4c4ce2f5e5701816a99667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:40:3f:7f:ad:1d:ed:f2:3d:39:20:ba:d8:
3c:4b:5c:86:52:06:db:b0:3d:77:ed:cd:e1:fa:ee:
de:c4:90:76:99:3d:39:e0:3a:0c:39:77:f9:69:5f:
da:45:47:28:6d:7d:c1:e5:f4:61:2c:d1:df:9c:87:
6d:99:a6:44:80:df:86:99:b7:6e:30:af:d2:87:d3:
e8:a5:a1:02:13:5d:cb:d1:16:c8:7c:63:45:e0:e0:
21:c9:56:ea:db:7f:66:7c:07:53:d7:6a:ff:48:69:
87:96:b7:4c:c8:66:41:44:9e:6a:6c:5a:21:00:02:
aa:b5:10:fa:ff:69:f6:ab:99:bb:39:2d:f6:79:c7:
22:99:49:6c:14:11:df:bf:7e:07:26:d8:31:d5:ad:
d4:6c:b4:5a:30:97:c4:24:53:cf:cc:99:17:83:fc:
38:07:78:a2:e0:83:87:12:a8:02:2a:f2:ce:01:1e:
84:da:2b:74:75:98:6a:f7:ee:ab:48:29:7a:0f:7c:
b6:f5:ef:65:59:08:24:ec:95:86:db:24:ba:de:19:
1f:5d:3c:bc:f6:8c:85:71:af:19:9c:2d:ec:8e:a7:
0c:35:86:f5:b4:3e:15:8a:e6:2e:ca:8b:e4:bd:ce:
bc:e9:b3:0f:9e:24:b4:59:5f:8e:a3:d1:22:ac:88:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:01:34:78:C3:80:EF:59:1B:4C:4C:E2:F5:E5:70:18:16:A9:96:67
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:01:61:aa:f6:d0:5f:6d:66:5a:aa:e3:04:f0:a2:99:bf:
bc:f2:c8:b9:cf:7f:a2:64:ec:19:39:ee:4e:3b:d8:d5:22:9f:
fd:f1:cb:cd:3e:d2:51:e5:ad:35:5f:19:3a:89:fc:6f:54:85:
ac:dd:4a:27:d8:46:20:8c:96:e1:de:d2:7c:91:e7:db:0d:1c:
2f:d1:57:a3:38:47:cb:f7:f4:36:43:4e:df:76:6f:0e:9f:95:
a0:b3:dd:31:d5:4b:cb:29:00:10:0b:dc:e5:fd:14:8b:34:f7:
99:97:bf:64:31:33:56:83:89:81:4d:0c:f1:b1:c6:62:6d:d7:
c0:39:b1:2e:7a:29:e8:f0:4e:b6:04:30:09:f1:59:03:8f:6b:
a2:38:75:85:24:0b:6d:7a:af:23:e1:27:48:8f:0c:a1:f6:9e:
9a:65:90:e3:2a:1e:d4:a1:e1:52:f0:10:ed:35:11:83:88:3c:
c7:45:0b:5d:c1:df:8a:31:78:a9:b9:ea:01:28:4d:d2:4d:80:
be:d0:a8:7f:3e:a5:21:85:da:3f:a1:3e:dd:91:6c:97:79:b2:
f9:fb:db:db:a6:3f:be:04:cf:8e:f1:b6:ad:ef:8e:f0:33:ca:
27:99:7f:33:0f:d7:0a:72:df:00:58:d2:74:8e:5f:55:ae:ca:
3c:a3:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:09 2026 by rpki-client