Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: zoe4uImSWepH4y8QaltYO2NKAV4rYdyCIguDWGmxS4M=
Subject key identifier: 5D:8D:A8:65:1D:A9:07:22:70:AB:90:80:74:43:E7:A1:22:03:31:45
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 01A0F78E5381B42A421D493F451E32D0F2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 15E2
Signing time: Thu 01 Oct 2026 13:01:34 +0000
Manifest this update: Thu 01 Oct 2026 13:01:34 +0000
Manifest next update: Fri 02 Oct 2026 13:01:34 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: uFmKmg3a+0apQuwWE7WUCI5H6uz2A7eHuA89aM4RKS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8e:53:81:b4:2a:42:1d:49:3f:45:1e:32:d0:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Oct 1 13:01:34 2026 GMT
Not After : Oct 2 13:01:34 2026 GMT
Subject: CN=5d8da8651da9072270ab90807443e7a122033145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:49:20:b3:fd:f9:9e:80:51:7f:27:cc:92:
d3:24:e8:6a:5f:14:85:68:a4:95:26:bb:96:45:57:
be:21:06:24:dd:b7:9d:44:31:cb:cc:36:91:9e:ee:
2f:88:95:0f:d8:cb:bf:09:63:7b:1e:97:ae:51:bc:
13:b8:9a:36:9b:08:9d:c5:22:88:d5:b3:a7:83:4a:
27:bd:27:23:41:42:a6:70:6d:df:bd:e3:24:8c:a7:
6b:6c:e1:3c:9c:72:3f:89:72:d8:eb:04:d0:8c:96:
60:18:e8:cf:00:6e:ea:6c:33:2e:12:20:9c:8f:46:
a9:d0:c1:ed:e5:13:7d:90:ec:a1:11:31:f6:e1:b6:
43:9d:d9:91:19:64:bf:64:b9:c7:7b:16:f4:8e:59:
6b:31:ac:ad:dd:67:7b:dc:b8:05:08:54:81:0b:74:
b9:bd:cf:af:2b:35:f4:a5:d0:99:3b:ee:f7:48:fc:
92:53:77:46:97:b4:b6:93:bb:b8:40:0d:26:76:69:
a3:d6:aa:7b:7d:51:a6:af:e2:82:ce:ff:1d:0f:90:
21:58:f2:e3:44:85:8d:7c:83:ea:3b:01:1c:72:80:
01:ad:e7:07:d6:a3:06:d5:35:e7:e5:99:67:5e:3a:
f1:6c:97:c0:7a:04:db:2f:48:2b:1c:b8:fd:3b:08:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:A8:65:1D:A9:07:22:70:AB:90:80:74:43:E7:A1:22:03:31:45
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:d1:f0:d2:04:fc:72:da:43:d7:cc:9f:b6:5b:5c:65:52:
12:1a:a0:51:0a:fa:d1:dc:11:f3:7a:3b:fd:d8:79:3b:29:78:
1b:3a:b3:ad:2f:a9:be:6c:65:57:df:eb:07:06:88:32:d5:7e:
31:d8:6f:73:e5:c2:f2:43:da:af:1b:6b:58:46:59:2c:b7:55:
b1:b4:a3:90:23:9b:db:b9:0a:fc:14:87:cf:45:9c:86:91:06:
24:a2:58:1b:20:de:15:e5:96:97:df:41:bc:22:3a:f9:62:fc:
91:f1:84:ba:50:df:3f:31:38:78:81:7b:d1:65:1a:cf:12:25:
a2:ea:3b:35:cd:ea:00:18:ae:9b:1d:41:9b:61:47:39:7c:b5:
7d:62:cc:fb:9a:a7:37:56:8f:ca:b9:21:f8:79:b2:82:aa:08:
2b:91:4d:3a:ad:a1:94:6c:6c:41:80:c8:00:ef:cb:e4:3f:90:
38:37:41:8b:95:9f:a7:53:20:fe:c0:71:3f:10:99:a9:75:c9:
cc:bd:c6:c8:1e:52:1b:a1:3d:ba:7f:c8:04:6d:07:95:bf:f6:
ac:0b:fc:1e:73:29:40:6f:28:86:4c:a8:e2:24:94:f5:b3:64:
96:bf:91:28:8e:83:92:ea:7b:0d:96:72:2e:3f:eb:53:f9:9a:
60:6b:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:26:47 2026 by rpki-client