Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: HgObaOGDvZMJyHE8sizrulVRy9Ric7oYzx3knaYpKqM=
Subject key identifier: 96:53:8C:75:F0:0F:45:89:7D:2B:2E:D6:02:69:6A:76:28:28:42:F5
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019F9248718F512F128093168E3801673096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 1529
Signing time: Fri 24 Jul 2026 04:00:48 +0000
Manifest this update: Fri 24 Jul 2026 04:00:48 +0000
Manifest next update: Sat 25 Jul 2026 04:00:48 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: vGqs3VnuI+cGX5PSQqNNqcaUnB4bg1LkEjaHc8VKjso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:71:8f:51:2f:12:80:93:16:8e:38:01:67:30:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Jul 24 04:00:48 2026 GMT
Not After : Jul 25 04:00:48 2026 GMT
Subject: CN=96538c75f00f45897d2b2ed602696a76282842f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:51:aa:fd:81:b0:34:3a:15:06:c5:e4:dc:
53:a8:57:04:9b:3c:cc:29:7c:cf:91:37:b1:f6:f8:
2c:64:62:2a:ee:74:7b:8b:39:3c:ec:54:c0:a3:f5:
8d:75:b1:2e:53:d7:cb:1c:08:fc:37:19:8e:00:00:
94:05:7f:cb:5a:ba:47:4c:9f:7c:86:f5:3e:40:11:
9e:ea:2f:43:bf:c1:17:54:77:cc:4e:9e:65:ec:4c:
d8:7e:27:15:3d:63:e2:dd:41:ee:49:66:ec:d7:50:
9c:a5:98:91:f2:79:95:54:07:b2:12:5b:36:7e:63:
8f:d0:f9:9d:60:a6:1e:3b:f9:7c:2f:17:06:30:9b:
8c:c6:37:82:ae:76:35:70:c9:2f:41:80:0d:4b:17:
9e:bb:8c:88:9c:bb:70:f3:87:68:d4:a9:bd:e1:5d:
87:f8:fe:d4:33:e6:3f:8d:e3:8b:80:4e:55:d8:57:
56:2f:7e:8d:11:cb:da:19:cd:a8:67:62:ca:bd:59:
91:ca:c4:00:93:ee:bb:2d:d4:e0:4c:cd:1e:50:97:
5d:a7:5a:ae:b8:be:28:d5:83:4e:83:fb:73:77:0b:
88:19:93:4d:4e:16:82:49:ba:0b:b2:b9:8e:f5:c0:
05:d5:f9:02:1c:d3:93:fd:dc:c3:f8:86:e7:be:a4:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:8C:75:F0:0F:45:89:7D:2B:2E:D6:02:69:6A:76:28:28:42:F5
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:31:3d:bb:2d:98:d5:05:1f:f8:a5:5e:ce:69:f1:57:cb:
c3:1c:c4:a0:6a:07:02:41:f5:08:c5:58:d8:05:25:f0:28:0c:
fd:db:d2:f8:cb:fb:c7:dd:fb:aa:fe:93:7e:d8:fe:27:3f:43:
71:db:2f:bb:35:5c:7e:42:53:3e:30:18:d6:71:0e:19:b4:cb:
74:ce:c9:de:5a:ba:ad:17:cb:12:fe:f3:f3:3a:d1:38:d2:a2:
9e:c9:bc:65:dd:14:41:8d:85:02:df:aa:29:51:be:2f:bb:b7:
cf:b5:7a:56:90:cb:a8:1b:c6:0a:ca:8d:b1:c6:89:99:f9:09:
49:f7:14:34:b4:d5:79:ae:f3:33:3b:b1:12:89:2e:56:c2:d5:
75:57:70:b5:5d:22:11:34:b3:05:2e:8e:d0:cd:bc:bc:3a:c7:
90:9d:fa:bd:08:62:79:5e:e6:b5:d5:9d:7a:8d:59:f6:95:df:
ad:3d:19:d1:0b:ab:93:56:cb:4c:90:dc:d8:a4:84:fa:38:3b:
e9:34:3d:d5:59:6e:48:a6:f1:62:59:2d:20:08:e1:92:ec:b4:
84:3c:96:16:de:a5:c8:2f:57:5a:fb:e1:04:d1:13:b0:1b:5a:
46:d6:70:94:e4:f4:63:8e:5a:6c:ce:ba:15:4b:79:1b:d3:4f:
33:1e:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:56 2026 by rpki-client