Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: jTjuARjJ5PgaG/EIAAcC0oAWgkMsYBVneD4oR59NUI8=
Subject key identifier: 4D:57:85:B6:87:A6:E7:E1:36:D5:ED:A8:97:C3:60:1B:FF:53:82:03
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 01A0CEC884FD3C39CFBC305AEF17E7B9B7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 06E8
Signing time: Wed 23 Sep 2026 15:00:42 +0000
Manifest this update: Wed 23 Sep 2026 15:00:42 +0000
Manifest next update: Thu 24 Sep 2026 15:00:42 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: OwbpTr0GhSz2b2HHSrjXWp0eNb6M8wjBpURZlw/HDb0=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:84:fd:3c:39:cf:bc:30:5a:ef:17:e7:b9:b7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Sep 23 15:00:42 2026 GMT
Not After : Sep 24 15:00:42 2026 GMT
Subject: CN=4d5785b687a6e7e136d5eda897c3601bff538203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:3a:1f:ce:68:6e:82:f6:63:b7:a7:43:ef:
c8:f4:e2:ec:70:3f:02:b2:5f:a9:94:2f:69:9d:98:
a5:76:36:b6:05:57:31:d5:fd:b9:27:db:9b:45:22:
20:89:97:5f:b2:0e:0d:ba:29:5c:73:d1:2c:0e:96:
23:c6:ff:d4:d4:77:07:4c:41:9a:74:b8:b1:bf:73:
72:39:df:9c:23:d8:b0:1d:3d:e8:42:98:a7:fd:dd:
db:c3:d4:a0:42:d5:95:c0:df:e2:97:5e:48:0c:72:
a1:5d:ab:e9:43:c8:a7:72:0f:e5:09:bb:be:cc:c2:
42:89:35:1d:06:c8:25:3f:58:70:48:c2:70:dd:25:
5d:10:a9:2d:a2:a2:6b:09:0d:bb:69:56:c9:bf:44:
58:09:5c:33:55:e0:4c:3e:b2:b6:e2:91:3c:c4:4b:
89:df:58:28:51:a2:19:00:7d:d9:c2:8c:48:58:54:
a6:fc:71:01:e6:38:73:5d:f8:57:71:06:4a:d1:32:
5a:ad:04:eb:cf:48:6d:15:e3:2a:89:27:63:43:2d:
85:7e:74:4d:10:0d:b0:0b:2f:6b:e5:53:61:6e:77:
40:05:f5:d0:6b:56:f7:bb:2d:d9:f4:2a:c7:3f:2d:
b1:e7:be:be:e3:24:68:de:79:83:1a:34:18:bd:42:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:85:B6:87:A6:E7:E1:36:D5:ED:A8:97:C3:60:1B:FF:53:82:03
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:17:69:eb:10:52:38:6d:10:45:ae:d5:53:f2:03:e3:c6:
68:90:c0:3d:86:6a:44:9c:65:b0:15:d2:a3:79:af:41:3a:93:
15:93:ff:8f:68:92:8f:2c:09:d7:15:b1:0c:93:0e:dd:d0:e2:
33:d5:97:95:03:d7:00:c9:3c:51:aa:82:d4:f6:5b:93:7f:36:
3f:63:56:58:7c:50:e7:cd:27:38:ee:36:7a:1c:32:ce:13:88:
e1:50:4d:84:65:44:f0:46:9a:72:98:26:5c:3c:7d:fe:f6:1f:
1b:cf:85:1f:67:e2:ba:ac:de:2f:b8:ce:80:11:f5:84:06:d4:
a8:bf:c7:59:b4:be:16:ad:d8:e0:82:79:ee:72:a0:dd:dd:2d:
e7:2c:5a:77:09:06:3a:07:69:af:38:73:d6:69:04:73:51:3d:
3f:65:23:91:0b:ae:ad:3c:35:cd:15:be:de:00:0f:af:80:df:
c9:53:eb:61:e9:06:9c:bf:0a:4a:73:41:ec:22:ff:c4:0e:9a:
1b:b6:55:3f:f3:a3:21:9d:7b:e1:b0:e2:69:73:6f:fd:f2:79:
53:a4:68:29:14:7a:a2:f6:84:2d:5e:b1:4d:f1:20:09:cb:69:
c3:89:13:ed:1e:3c:95:ea:b8:12:90:ee:05:3f:a7:d9:ce:a8:
f1:48:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:39 2026 by rpki-client