Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: VIAb2HVFmCyJdjFocmyfRyw4ZSylVbA6IViB/29elo0=
Subject key identifier: 67:62:C1:9B:20:E7:1E:AE:47:BE:54:B3:45:DC:26:BA:0A:8B:E0:BC
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019E1D5929A5C382821ECAE7E375CE3E91D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 0583
Signing time: Tue 12 May 2026 18:00:43 +0000
Manifest this update: Tue 12 May 2026 18:00:43 +0000
Manifest next update: Wed 13 May 2026 18:00:43 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: EKGOT33/IWgQzwNoP+4XmTPB9PLQzXUnQUK3aOXIut4=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:29:a5:c3:82:82:1e:ca:e7:e3:75:ce:3e:91:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: May 12 18:00:43 2026 GMT
Not After : May 13 18:00:43 2026 GMT
Subject: CN=6762c19b20e71eae47be54b345dc26ba0a8be0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:f4:89:e8:64:71:8e:1a:1b:d2:9e:82:84:
fc:73:24:d7:29:7b:a5:7f:9b:50:72:04:b8:36:dc:
1e:89:37:49:4c:73:f3:1a:1d:6f:ce:de:fe:93:c8:
87:c4:c7:ed:f7:30:ea:4b:3b:56:33:d7:d0:39:a4:
fe:dc:3e:90:08:34:b1:9a:04:e6:1c:24:8b:2f:54:
65:a5:15:9e:fc:19:01:da:87:64:71:af:ec:2a:fc:
f7:d9:54:68:4f:d1:a9:5f:06:5b:fa:a5:5b:7a:75:
72:ff:f6:28:ec:b7:47:96:75:76:b8:bb:ed:42:8b:
64:5a:ba:a4:4d:b8:53:ae:98:32:45:56:6a:b9:8f:
41:01:77:9c:72:5f:fc:d9:02:c8:ce:ee:d9:d4:5a:
a4:8d:5d:d8:4c:e1:19:2e:74:5d:fc:aa:f8:df:41:
84:5a:51:5b:bc:4b:f2:9b:e0:dd:98:3f:3a:61:fd:
04:63:be:e0:9a:b8:bf:da:af:89:7a:06:43:3d:6b:
ca:56:26:53:97:2c:c4:79:7c:02:84:0e:7b:ce:ab:
e9:9b:b2:56:44:6f:04:5e:52:e8:f0:f8:14:de:78:
4b:3a:ea:52:66:48:b5:c0:be:38:a0:72:0f:bd:23:
55:c7:3c:53:87:0d:6a:91:85:9f:6b:45:2a:cf:e6:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:C1:9B:20:E7:1E:AE:47:BE:54:B3:45:DC:26:BA:0A:8B:E0:BC
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c9:83:f8:4f:dc:3c:6a:23:3b:c0:91:c5:23:e3:d2:af:14:
a2:6d:d6:0c:3f:ee:f1:c7:7b:f3:64:0b:89:b7:ec:cc:c5:34:
57:a4:7b:41:9b:6e:c1:a1:92:d2:21:30:5e:ac:bb:89:7c:b2:
cd:5a:1d:26:7b:95:ef:72:30:64:38:00:c0:84:f0:6a:03:b9:
08:81:66:2b:ee:41:53:6b:13:1b:e8:74:5e:3e:be:5e:0d:12:
d6:02:be:5f:57:f9:87:d6:35:37:8e:90:76:f5:ba:d7:cf:1b:
82:f8:77:d4:8c:3a:22:7e:58:37:e8:39:e3:2a:33:78:17:c7:
92:c1:aa:fe:f0:17:d8:06:e6:d9:a9:c1:89:12:0e:d4:01:e0:
9f:9a:10:82:14:f5:03:ed:1f:82:6c:c8:19:68:b4:ae:06:23:
d6:91:44:c1:c6:a6:f0:24:13:23:7e:1d:8e:a4:2f:8c:3a:cc:
3b:4b:29:8a:ef:14:7c:20:c1:50:89:1d:54:3d:fc:2e:e9:ae:
49:15:e7:1a:36:b7:3c:ba:72:62:69:88:b7:07:84:83:bf:8d:
05:96:40:e8:7a:ed:9b:bd:68:1a:03:7a:a5:00:a3:28:f9:3f:
19:92:65:dd:cc:0d:8f:7e:00:1b:ae:bd:dd:44:b9:d4:2f:95:
74:19:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:09 2026 by rpki-client