Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: E9RY/sxQt0qOTpM1NR+oUIk3NGnwyUTIhIXuzGMHIx0=
Subject key identifier: 3C:99:04:C7:69:03:B9:BE:0A:7F:04:CE:6C:A0:10:8B:1D:93:9E:C2
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 019FAB99FB88519B662B91A0150549C45814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: A7
Signing time: Wed 29 Jul 2026 02:00:22 +0000
Manifest this update: Wed 29 Jul 2026 02:00:22 +0000
Manifest next update: Thu 30 Jul 2026 02:00:22 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: AbxFD28NQeiZSaTQszmvp4n5box0MI5WWI4XcQvwZuk=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:fb:88:51:9b:66:2b:91:a0:15:05:49:c4:58:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Jul 29 02:00:22 2026 GMT
Not After : Jul 30 02:00:22 2026 GMT
Subject: CN=3c9904c76903b9be0a7f04ce6ca0108b1d939ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:14:6b:53:c1:13:83:d2:8b:5a:97:f1:65:
22:a5:3e:bd:0c:a8:53:e4:2a:01:19:18:72:95:ef:
30:4b:18:d0:4f:62:b2:3f:0b:ac:f4:66:0d:9a:a0:
f7:e7:39:04:ae:49:4a:91:c2:57:1f:62:00:da:3a:
32:06:39:1d:81:72:1b:4a:04:8d:84:96:f8:6d:d3:
76:75:8a:bb:ee:7d:24:8a:c4:2e:1a:91:a4:bd:ce:
8f:91:0d:7d:65:ab:53:ae:1d:5c:90:f5:14:32:c2:
07:22:8c:2f:e3:bc:25:34:5d:1b:12:11:fd:c4:f9:
27:77:4c:d1:4d:e0:d1:6c:80:89:fe:dc:5e:40:cd:
32:aa:90:a3:62:64:a2:7d:dc:e5:94:19:a5:e9:1e:
6d:f7:75:9b:95:29:3f:e6:d9:02:89:14:52:14:b4:
8a:30:e6:d8:c3:3f:c5:01:cb:16:b0:64:b5:f3:ea:
8f:d3:8c:0c:22:a3:79:ab:47:be:ab:b4:ba:d8:7d:
3d:19:bf:c4:cd:5d:be:c9:d1:7f:81:b9:e3:0c:79:
f5:6d:28:34:b8:03:bf:ec:cc:59:db:33:27:71:48:
6c:d0:c2:f0:cc:44:6c:59:df:c6:c2:2c:f3:44:bb:
88:84:0f:d0:ad:8b:aa:0e:cb:3c:e5:ee:eb:8a:db:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:04:C7:69:03:B9:BE:0A:7F:04:CE:6C:A0:10:8B:1D:93:9E:C2
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:53:62:e6:50:72:bd:01:a1:5f:62:21:41:f3:72:84:72:
3e:95:8c:4c:e9:49:f2:d7:77:20:82:53:4b:7f:1a:55:be:88:
d0:80:71:7b:da:d3:f6:a5:c2:24:04:fe:d5:df:ab:45:54:1a:
b3:41:d0:fb:df:9c:36:63:45:f9:76:0b:9c:14:fb:ab:a6:34:
42:53:18:f0:b9:97:20:0d:a0:90:f6:12:0e:1c:00:a3:c9:f0:
cf:07:d4:4f:87:e8:8f:2f:16:c8:b2:91:ab:57:94:5a:f3:91:
82:f5:67:d0:af:5e:88:9d:d3:a4:e8:2e:22:a6:e2:bb:03:79:
9a:22:de:09:0c:d3:cb:ee:92:33:ff:2b:95:9b:58:79:93:47:
b5:f5:95:4b:bf:d5:e8:a6:36:c7:1b:16:48:f0:46:53:72:0e:
43:02:7a:e0:4b:5a:35:41:4a:d1:e8:08:6b:5e:6c:6c:74:60:
dc:a3:03:d3:fa:e3:0d:91:23:48:79:1f:ab:ac:9b:2a:e7:19:
37:82:00:9b:59:72:4d:8a:57:ef:64:91:8f:57:44:ee:e4:92:
d9:c4:6e:ab:67:2e:19:2d:e1:34:a9:6f:95:4b:73:ae:75:6f:
dc:84:c8:6c:88:8e:17:64:a0:4d:c0:e2:b8:7b:b5:3e:c1:11:
48:bd:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:48 2026 by rpki-client