Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: uU4sRWhGQEq7BbevlcJbPNk+dEXhcUc+WyiwBQfLYFs=
Subject key identifier: 16:C1:18:1C:F4:13:37:13:39:8A:F1:D1:51:79:CA:C0:59:F1:33:5F
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019F9022EBDCE3657FE6135E3CD215140798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 0643
Signing time: Thu 23 Jul 2026 18:00:35 +0000
Manifest this update: Thu 23 Jul 2026 18:00:35 +0000
Manifest next update: Fri 24 Jul 2026 18:00:35 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: xCUjvMI7PE9Bq+WbGRzThcpxuOSgi67HDt3L/5KVicY=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:eb:dc:e3:65:7f:e6:13:5e:3c:d2:15:14:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Jul 23 18:00:35 2026 GMT
Not After : Jul 24 18:00:35 2026 GMT
Subject: CN=16c1181cf4133713398af1d15179cac059f1335f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:44:ca:8f:a0:ee:a3:33:c8:ae:77:a7:be:
09:61:71:ff:3a:f8:b7:11:53:b0:f3:59:a8:c5:15:
39:c9:e3:18:e6:4a:61:be:a9:8d:8a:87:3f:12:fa:
07:be:4a:57:07:32:82:08:17:04:42:8e:32:f1:6d:
a8:f1:b8:0f:62:d6:33:93:71:cd:b1:14:26:2c:77:
7a:03:fb:f4:5b:4f:f8:74:ae:e1:a9:c2:bc:65:85:
4e:e1:44:34:7f:e0:aa:68:37:25:eb:8f:c0:9c:25:
87:82:e2:f4:44:1e:d7:f0:19:ba:2d:03:f3:32:e1:
d4:2c:22:4f:6f:37:f3:c5:c9:b5:57:4f:5e:7b:88:
24:d1:ce:00:ec:2e:2c:19:f0:c5:80:07:20:9d:73:
16:04:e2:d4:45:68:78:71:38:0c:4b:bd:63:c5:51:
a8:12:42:a1:ff:c8:25:20:f2:b9:a5:e0:c1:ca:a2:
71:f9:43:24:40:4d:20:36:96:61:7e:b3:a3:5d:b1:
47:3a:c3:8a:2e:11:d8:45:ac:5b:74:33:ab:97:1a:
de:cb:71:95:3f:d4:e0:6c:74:bd:68:66:53:fb:54:
ca:f5:86:ea:70:f7:15:bf:d7:a5:24:fd:18:48:32:
ed:0f:7d:fd:89:17:db:59:bd:fa:a9:65:43:4b:28:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:18:1C:F4:13:37:13:39:8A:F1:D1:51:79:CA:C0:59:F1:33:5F
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:02:e3:54:1c:a1:d0:33:9e:e2:5a:d8:0d:47:7f:75:49:1b:
ea:59:20:9a:50:cc:04:b7:58:42:b1:60:fa:b8:2b:d3:0f:18:
92:bc:c5:7a:4f:b2:d2:f2:c2:64:d0:36:98:e9:f4:d3:f8:5b:
3e:2f:ae:13:6e:2d:f0:7c:1a:b6:3b:45:99:f0:83:28:1b:9a:
9d:c5:25:db:72:53:69:5e:32:f1:4e:a5:aa:a7:84:1b:a6:66:
63:81:5d:78:f2:29:e9:9e:a9:a2:89:70:57:60:03:ac:83:a9:
fd:cd:6a:f5:8c:2b:be:b8:2c:29:31:b5:d4:68:73:66:53:9d:
30:2d:54:a6:48:bc:af:61:0b:ab:e1:54:04:82:63:45:de:94:
e5:6c:9f:91:a2:9c:24:40:63:51:4e:83:ad:87:f1:f0:ea:14:
4f:da:49:c9:d2:56:bd:96:4c:39:12:a0:ef:33:0b:30:f9:cb:
ac:8a:19:c2:d7:78:b1:63:ed:ec:33:88:55:9a:4f:c7:75:44:
f5:d4:e9:ef:8e:a7:c6:1c:d6:3b:2e:61:0a:8c:64:cc:fb:b4:
3e:ce:d6:39:1c:0c:f9:17:98:07:87:7b:6f:bf:39:a0:d4:f8:
c8:e5:be:3e:c2:4b:21:ce:f0:f0:95:fb:c7:a4:1d:be:5c:db:
5a:8c:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:15 2026 by rpki-client