Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
File: lY5sSlBi8XT_PNGL-KQbpXONsHY.mft (raw, json)
Hash identifier: l5MMd+BzTYudBG+ddU1kBAnNTH3gukjI/8JxExBHsp0=
Subject key identifier: 7F:13:2B:BD:14:BD:7F:AE:0D:79:D3:F5:FF:6C:C0:D9:45:F0:86:E1
Authority key identifier: 95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
Certificate issuer: /CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Certificate serial: 01A1205313C6BC30C9B8CCE1D41B4E206894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
Manifest number: 0168
Signing time: Fri 09 Oct 2026 11:01:17 +0000
Manifest this update: Fri 09 Oct 2026 11:01:17 +0000
Manifest next update: Sat 10 Oct 2026 11:01:17 +0000
Files and hashes: 1: OEE53oTdYF0pAbxJpAz57xdOPpY.roa (hash: fphdgl361cpaAl5IGhNhzhRi2S+bAkuhBiyjk+1TDtM=)
2: ZexxmISdFuh_7wIWZHbw3a60nhE.roa (hash: 6GGWLqVKNGvMXJsbtegUAosgzbH8b8dSPDUpnENmpOI=)
3: jaOFY2ZtjNEufppiRbq6ZFxfpjA.roa (hash: XLSBQRC8x44WgmkopIPKBYibunN938ImFR6fh1IzVrM=)
4: lY5sSlBi8XT_PNGL-KQbpXONsHY.crl (hash: 76IRY0Re7noAACmVhBxL9ClRREFYs+GGtFMH6Jm3Ev4=)
5: qq5a5GhMnqyW_z2o9qJD_8uDQNg.roa (hash: CnJ6pH9bWjuEegu8RAzr/k8+jIGD1iK0ez3alrbbaTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:13:c6:bc:30:c9:b8:cc:e1:d4:1b:4e:20:68:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958e6c4a5062f174ff3cd18bf8a41ba5738db076
Validity
Not Before: Oct 9 11:01:17 2026 GMT
Not After : Oct 10 11:01:17 2026 GMT
Subject: CN=7f132bbd14bd7fae0d79d3f5ff6cc0d945f086e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:0f:b4:87:45:f5:7a:08:92:e4:14:fb:98:
bb:cc:dd:bd:57:c8:47:16:8e:95:10:26:de:3f:9c:
e6:a5:5f:c0:84:b4:17:12:6c:bb:ee:09:7b:42:d8:
c2:6a:d5:36:44:f4:8b:19:fa:c5:37:23:7f:aa:54:
0c:ba:61:94:a4:5a:29:7b:88:5d:bb:57:77:3b:5b:
21:0a:cb:1c:75:3a:4e:1d:cb:bb:35:be:b5:1e:6c:
9f:c1:60:3d:c3:41:d6:a6:47:3a:70:73:fc:41:31:
2d:8e:33:0c:e3:7f:58:0e:18:d2:c2:e8:06:63:c5:
a2:ae:d9:46:61:cd:cd:2d:b7:bf:ac:02:1f:d6:d2:
db:9f:84:f3:70:00:28:67:2b:74:82:0f:69:d6:0e:
11:5a:e7:7f:e2:d1:f7:14:ba:12:ca:48:5b:d1:62:
b8:9b:cb:8d:8f:3e:f5:81:97:c4:c2:0c:98:e7:bf:
a3:49:7c:cf:54:5b:7c:a9:7a:2c:b9:6f:e5:bc:1f:
18:b6:d6:fd:e0:d7:e1:93:78:db:9e:a5:ac:8f:81:
3c:52:39:6c:ae:7b:e5:59:ef:87:57:87:8e:64:e9:
67:5c:bd:ea:7a:ac:be:5a:8d:00:49:1a:e4:19:b1:
61:ac:c8:95:69:22:0b:de:ed:4c:68:94:7d:a5:be:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:13:2B:BD:14:BD:7F:AE:0D:79:D3:F5:FF:6C:C0:D9:45:F0:86:E1
X509v3 Authority Key Identifier:
keyid:95:8E:6C:4A:50:62:F1:74:FF:3C:D1:8B:F8:A4:1B:A5:73:8D:B0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lY5sSlBi8XT_PNGL-KQbpXONsHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b18d0-077d-423e-a9e0-515208636abb/1/lY5sSlBi8XT_PNGL-KQbpXONsHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b3:18:41:78:8f:57:89:fb:01:13:f6:d1:03:0b:9a:ed:08:
24:77:97:05:14:20:5c:82:5b:b6:45:57:05:45:a6:d4:e2:7c:
ba:f2:e5:e9:91:cb:da:b6:bd:cc:7b:d1:a2:c1:5b:c9:dc:bb:
5c:84:5f:de:60:3f:fb:47:7b:e8:ac:9c:56:4a:68:c2:e9:b8:
a4:53:27:89:f7:42:a3:38:d1:c1:80:ae:38:9d:52:e8:79:15:
61:76:ed:a3:b3:59:78:20:ba:49:11:5f:9a:6a:71:80:e2:7a:
78:2b:6a:92:8c:6e:ee:f4:01:7b:fc:dd:2e:5b:aa:74:be:b7:
e2:78:65:fe:32:66:e9:2c:f9:d2:4b:f4:ec:1a:35:19:c4:54:
be:2c:3f:64:58:89:44:02:e1:82:1f:6f:c4:6c:ee:12:b3:15:
ca:d5:20:57:03:37:f6:76:f3:27:67:7d:39:6a:bf:8e:6f:0a:
09:cb:64:70:ac:a4:0b:bb:a3:bf:f7:b1:48:3e:ee:67:2a:0e:
ce:d3:3b:43:ce:98:36:1b:30:c4:71:d3:00:01:e6:c1:db:f0:
26:ce:0f:0a:d0:de:b1:df:27:5e:97:93:f2:bd:08:c1:f3:6e:
22:aa:07:11:8d:0f:35:01:50:46:e5:04:e4:a7:9d:57:57:0d:
bf:cf:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 13:19:41 2026 by rpki-client