Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: eTFWAaZGFToS8cUsiuZvgYajvh02cu8/0lDeGPrt6TQ=
Subject key identifier: BC:EB:A8:19:38:D6:48:10:3F:FA:1C:62:09:86:08:56:B0:9D:CB:B5
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 01A10136899C04190B6677A767DC81D2987B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 15E7
Signing time: Sat 03 Oct 2026 10:01:53 +0000
Manifest this update: Sat 03 Oct 2026 10:01:53 +0000
Manifest next update: Sun 04 Oct 2026 10:01:53 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: fn5292P29ZwfEJzfDkmE1lS2ND4xyetyKwgWLmX8vVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:89:9c:04:19:0b:66:77:a7:67:dc:81:d2:98:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Oct 3 10:01:53 2026 GMT
Not After : Oct 4 10:01:53 2026 GMT
Subject: CN=bceba81938d648103ffa1c6209860856b09dcbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:0c:2b:45:92:df:9d:68:07:ef:b1:ad:0e:
8a:6e:6b:a2:32:6f:a2:d1:e6:fa:86:d7:70:c4:c5:
b8:8b:29:a7:5a:a4:ad:aa:b7:09:d6:76:72:e4:7f:
eb:58:27:8e:62:ed:f5:44:5f:92:78:0a:30:81:b0:
6b:99:9e:8a:8b:b2:fb:ad:1a:a0:77:67:2a:77:5e:
51:5c:66:82:9e:8c:76:41:6a:77:d3:c8:37:ca:1d:
65:c2:aa:ff:f5:56:f2:d6:23:bc:19:66:a4:a3:dc:
42:bd:06:4a:9b:a3:55:3b:4d:8a:f0:08:c7:f6:78:
e6:ca:59:a2:c8:07:97:75:31:94:8f:63:72:d9:16:
f2:5e:18:a1:2a:71:a2:7f:66:4e:9b:42:84:88:b8:
7d:6a:c0:d8:b4:64:f1:17:d0:3a:fd:60:6a:0d:f4:
f5:d8:c3:2c:4c:18:85:d9:90:09:b7:f0:be:c9:ef:
48:23:85:77:f7:a3:bb:74:0f:0b:31:6a:5f:c4:1b:
5d:50:a9:ba:6f:f8:16:1c:b9:15:2c:ec:0a:58:74:
b2:98:48:26:6c:a1:40:7f:9d:1c:44:8c:0f:72:66:
a3:93:70:c7:22:84:56:4b:db:ec:41:52:32:07:5a:
45:a7:c6:6e:7b:ba:61:03:a2:2e:9d:0d:20:d0:b3:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:A8:19:38:D6:48:10:3F:FA:1C:62:09:86:08:56:B0:9D:CB:B5
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8f:76:39:d7:46:a7:ff:be:f7:fb:46:e0:8c:19:7d:25:ed:
68:e3:4f:0f:c4:ab:66:5c:ee:b3:45:bb:09:dc:a2:9d:f4:28:
5c:91:e3:f4:eb:c7:18:d3:52:3f:d0:26:3a:ae:02:a3:cb:a8:
28:74:07:08:4f:86:b0:90:27:b9:d3:62:2c:42:a4:93:09:8e:
ad:ac:be:37:38:d3:ae:a2:e7:ca:7d:49:91:fd:4d:22:ed:47:
f0:20:2e:d3:a9:c6:a7:00:b9:68:cf:73:99:ee:96:48:91:be:
00:5c:51:65:fc:38:8e:84:e6:1a:01:ca:73:de:93:60:21:16:
d9:80:39:67:aa:35:67:eb:8e:b7:aa:64:6b:f7:d0:f4:9d:23:
4c:a1:22:88:a7:61:8d:79:cc:cf:8c:86:1c:79:a9:a4:ee:f0:
64:08:c0:c4:d3:cd:43:49:56:4c:ab:80:8d:2f:fd:83:72:0a:
cf:81:78:87:f2:78:38:da:04:81:d5:80:4e:d2:8b:4b:ad:81:
e9:80:47:fc:d8:55:55:59:fe:7c:23:48:37:69:f2:10:7e:5d:
99:3e:a4:66:16:b0:cb:31:81:43:d7:2f:59:17:71:6f:52:36:
1f:14:2a:02:a3:56:e7:97:0c:b7:e0:7f:ce:9d:9e:10:b8:9c:
21:47:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 18:32:56 2026 by rpki-client