Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: Y5/itSkykuKMzVu0Sgcq1RzbajFBfjt5pAwOe9eyX7A=
Subject key identifier: 52:06:C0:2F:6E:7B:8F:F3:7F:ED:00:A9:F0:5B:22:12:E5:3C:F5:26
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 019EC1EDFDC449AC1D7139BBDD11637C7E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: 2E
Signing time: Sat 13 Jun 2026 17:01:00 +0000
Manifest this update: Sat 13 Jun 2026 17:01:00 +0000
Manifest next update: Sun 14 Jun 2026 17:01:00 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: PYJfZHd0zLKTpoHqPG7JOr34xJtvfLJTo6frfW/TFdg=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:fd:c4:49:ac:1d:71:39:bb:dd:11:63:7c:7e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Jun 13 17:01:00 2026 GMT
Not After : Jun 14 17:01:00 2026 GMT
Subject: CN=5206c02f6e7b8ff37fed00a9f05b2212e53cf526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:34:f7:80:c2:4a:03:8a:a7:4f:e8:dc:c8:
5d:5d:ad:c4:e2:69:38:30:22:c9:50:6f:5c:27:db:
03:7c:28:0a:05:6f:9a:2e:c7:0b:f6:cb:dd:9e:aa:
56:30:72:d8:42:d1:4f:eb:b6:b4:fa:90:ce:b2:42:
13:7d:d8:39:28:ff:38:51:a8:6a:06:05:3c:60:5b:
28:52:fb:17:b7:d1:64:4d:ae:de:90:60:31:ba:ec:
cd:67:9c:3b:7a:cc:a6:d1:35:7e:d0:8c:09:c9:c5:
00:24:50:8d:a2:6e:35:a1:cd:7f:9c:c6:86:00:a1:
b0:d7:7b:64:bd:4f:ac:f3:93:f2:3d:e0:cc:50:b6:
2b:72:f2:78:51:fc:f0:73:dd:89:36:76:0a:23:7e:
5f:f2:dc:32:6e:48:17:d6:b0:a0:c0:a8:ef:fc:51:
34:d9:9d:44:d9:cf:68:9e:9a:aa:22:51:43:4f:e5:
44:92:f9:f5:94:33:86:83:78:61:ec:71:b0:2f:08:
b2:86:1d:34:13:18:49:bb:b5:1a:f0:6b:7b:75:14:
10:8b:44:e2:b8:e5:7e:7e:87:33:cf:1d:c3:4a:02:
0f:39:b6:4b:64:8b:f1:d6:53:92:fc:6e:f3:f0:a2:
98:c3:54:96:ad:ed:6b:29:ff:3e:b9:01:6e:b0:4b:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:C0:2F:6E:7B:8F:F3:7F:ED:00:A9:F0:5B:22:12:E5:3C:F5:26
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:49:e0:49:b7:c3:fc:17:88:d5:92:cc:9d:6a:ed:00:df:
b2:4b:2c:dc:a8:cd:fb:d5:e3:99:16:3c:83:3f:c2:06:37:06:
de:fa:0e:8b:e0:95:cc:bc:2c:ce:bf:3f:10:46:23:87:5b:b6:
62:82:2e:cb:e9:83:20:bf:49:ef:7b:ba:bd:d3:42:66:03:46:
19:88:95:8b:50:d1:3e:a9:3c:68:b9:25:8c:bd:66:72:fc:78:
c2:28:0e:79:6d:74:1a:8b:7a:3e:4a:57:ac:0a:99:5e:c0:9c:
07:5e:e3:99:4c:20:fa:86:5e:b6:de:d8:32:a0:fe:c6:40:ab:
55:0d:0b:46:9d:2c:b5:6a:ec:3f:e4:ef:c4:e3:9e:62:d8:a7:
ac:94:44:a4:a2:30:d5:98:70:05:42:a8:a1:10:a8:1c:59:fa:
fd:0c:ab:f1:0b:85:a4:1d:a2:aa:ca:7f:2b:ec:9b:21:53:19:
fd:a6:02:b3:5b:da:21:56:44:31:70:aa:4f:df:62:b0:60:7c:
a3:cd:19:51:0a:af:bd:37:62:1f:9f:e3:b7:0c:bf:7e:c3:d9:
17:75:e4:4d:e7:67:1e:fd:3f:af:1a:7f:2f:36:cd:09:94:38:
9d:7e:86:b3:89:49:16:46:ed:03:93:c4:dc:b9:f0:df:b5:47:
9a:42:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:48 2026 by rpki-client