Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: teYXEBs33z1Lw5/N9N/24JQtx8nvUzgRLDxedwR+Nxo=
Subject key identifier: F3:D3:BF:95:AA:72:FB:7F:2E:D6:F1:D5:C4:98:9C:52:95:DF:AC:62
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 019FA1F207F2D3806DCF79EEE7BA4D3A612F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: A2
Signing time: Mon 27 Jul 2026 05:00:21 +0000
Manifest this update: Mon 27 Jul 2026 05:00:21 +0000
Manifest next update: Tue 28 Jul 2026 05:00:21 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: 8UpvORTSMisKkdoj/09vXbri9U3yuRpmW2rauoUSSR8=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:07:f2:d3:80:6d:cf:79:ee:e7:ba:4d:3a:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Jul 27 05:00:21 2026 GMT
Not After : Jul 28 05:00:21 2026 GMT
Subject: CN=f3d3bf95aa72fb7f2ed6f1d5c4989c5295dfac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:c8:2e:1f:fb:3f:a9:24:88:71:9b:51:4a:
a1:e5:f6:60:94:c6:39:54:ad:d7:19:c2:7b:49:4b:
b9:11:ca:98:3e:1d:59:e6:e4:d9:97:95:9a:96:bc:
f7:46:7c:e1:6e:1b:45:24:63:73:00:71:f5:a2:9d:
a9:58:90:f0:ed:46:ef:69:8b:c6:b0:9a:6d:82:89:
fe:33:01:6c:b5:29:34:b6:62:f7:6a:45:cd:aa:1a:
d4:67:36:1b:00:33:95:1a:0a:09:ed:e5:6a:5d:16:
3b:2e:ae:84:67:aa:1a:ce:47:ae:71:4c:90:1e:0d:
10:c6:26:9a:33:90:11:d5:8b:8b:04:15:34:eb:93:
d6:54:37:75:41:e3:cb:c2:ec:5d:b2:db:c3:12:fb:
cb:29:fb:0d:4d:3a:5f:7c:0d:7b:39:d0:72:e8:0e:
21:e5:7d:9b:d8:59:6f:a5:f7:77:14:ea:85:a6:f5:
bd:01:c2:24:11:3c:71:e8:66:d9:9b:b9:96:f4:31:
a8:2b:b9:b6:f2:fd:50:08:dc:e2:54:40:b2:80:c4:
58:fb:e9:3c:29:84:8d:12:9b:e7:9b:eb:49:82:a2:
cb:10:49:50:af:79:51:6f:e2:ae:31:64:b2:5f:62:
13:f5:dd:55:a5:82:77:6c:c2:94:c8:0d:6e:b9:b3:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:BF:95:AA:72:FB:7F:2E:D6:F1:D5:C4:98:9C:52:95:DF:AC:62
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:97:d8:c0:dc:47:29:98:ad:00:b9:7d:af:87:38:fe:2e:
2f:b3:02:5a:59:00:af:cc:75:55:43:3c:cf:f8:c1:e6:bd:75:
87:a5:98:61:90:5a:ea:e9:38:6c:db:79:77:22:5d:49:49:19:
f0:0f:29:87:ac:31:a3:25:cc:ef:1d:dc:01:23:bc:3d:e0:e7:
de:ec:ad:f9:b9:90:f7:bf:e4:5d:04:4a:ca:6d:1a:5e:57:1e:
8e:f9:ee:d5:15:98:54:dd:9a:47:e0:67:dd:66:cf:a8:82:2c:
61:b0:4e:52:98:dd:96:5e:3b:89:c3:60:d0:4a:95:f5:5b:14:
91:fc:d8:a7:8d:bb:f0:05:1d:78:64:97:5e:8a:35:ff:fb:72:
cb:dc:4f:09:7a:65:7a:0d:d9:a8:9f:ba:f3:9f:86:2a:1e:44:
63:48:c8:39:0b:e1:f2:d8:68:3a:f4:ac:68:33:82:88:66:a7:
be:e3:80:62:48:64:0e:70:ff:e8:f0:3e:19:cd:56:30:64:89:
c1:18:00:53:bb:ad:2c:76:28:0d:0c:15:a4:5e:0c:91:9f:27:
17:59:a6:ca:59:bf:ab:9d:6c:9d:a6:5e:f6:4d:73:ae:96:4a:
a1:d9:50:78:6a:fa:8a:42:6c:7d:98:af:fc:44:25:90:59:64:
77:e2:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:21:47 2026 by rpki-client