Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: m912y3oTGYCaGWOfFNNFn9dyaDdaeYN303omuAUaoz4=
Subject key identifier: 68:81:BC:72:AF:BA:77:86:CE:D5:64:40:35:C5:3E:34:EB:8F:BC:7E
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019D2628ABF72BC6F57F6EC0B54A3E451A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 0503
Signing time: Wed 25 Mar 2026 18:01:32 +0000
Manifest this update: Wed 25 Mar 2026 18:01:32 +0000
Manifest next update: Thu 26 Mar 2026 18:01:32 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: AgolIT/D/sd2o13adetL9mDIcEpu6Lz6dW6YjYXE+8A=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:ab:f7:2b:c6:f5:7f:6e:c0:b5:4a:3e:45:1a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Mar 25 18:01:32 2026 GMT
Not After : Mar 26 18:01:32 2026 GMT
Subject: CN=6881bc72afba7786ced5644035c53e34eb8fbc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:f3:c9:7e:c3:9c:f9:49:13:fe:df:59:d8:
08:b8:5b:93:a1:d4:a1:7a:ab:60:ac:d3:5b:05:3e:
c6:c0:d1:3b:08:c2:1a:42:58:59:8d:6e:ad:fa:57:
e2:3e:19:1c:4d:74:f6:29:f9:58:b3:bd:0c:35:9f:
2b:4d:1f:8f:61:bf:6c:57:3b:a0:fc:20:61:c6:eb:
9d:46:51:ff:da:e2:90:3d:51:6d:e1:3b:83:fc:65:
49:80:57:fa:ad:3e:d7:42:5e:d5:ed:d7:2f:91:09:
a3:09:a5:d2:42:6e:79:32:42:ad:43:7a:ff:3e:fe:
2b:d4:2e:c5:94:e0:a4:ed:5a:b4:04:12:9a:3c:69:
be:fa:ae:fa:a7:02:05:6c:e1:0b:25:36:0e:43:b8:
2c:fc:ce:66:98:ea:20:3d:14:27:20:bc:bb:a0:73:
ef:51:e4:41:25:7c:96:70:8c:f8:50:35:c5:24:7d:
ce:2d:a8:91:85:f0:86:fc:75:cf:c4:d7:26:f8:44:
28:97:52:89:8d:c6:c8:73:1f:1d:4f:23:0c:10:ee:
f0:65:50:2d:00:d8:c1:0d:12:db:fd:f8:59:3a:9e:
f9:9d:f9:94:77:ae:2a:b7:d3:6f:c8:89:52:c8:dc:
a3:6f:31:fa:e4:e3:65:99:d7:6e:3c:c8:73:5a:b3:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:BC:72:AF:BA:77:86:CE:D5:64:40:35:C5:3E:34:EB:8F:BC:7E
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4f:19:46:77:c9:df:15:02:ab:48:45:8d:10:71:99:59:b2:
86:b8:a1:3e:6f:c3:ad:5b:87:f2:c2:28:3e:fd:f5:4c:7d:13:
77:4b:fb:d4:ab:44:b8:54:58:4f:06:c7:04:2b:69:eb:0c:6d:
7f:10:19:60:4d:87:45:d1:34:82:80:84:66:24:fb:5f:38:3e:
8b:9a:67:7a:7f:c8:d8:3e:fc:6d:39:eb:eb:63:2d:58:36:1b:
7c:89:bc:75:1f:f8:a3:88:fa:2d:e6:3c:c0:e1:45:18:9c:ba:
99:9f:64:f3:98:6a:d9:0a:e2:44:9a:5a:d4:2d:ed:f7:b5:76:
d9:c6:72:40:da:d9:b4:b0:9f:6a:3f:97:01:1a:67:aa:45:83:
bc:91:d6:67:39:9a:c3:56:41:82:d3:17:6c:e2:91:58:04:20:
f8:db:96:95:51:fb:42:6a:3a:98:f7:51:78:ce:1e:93:91:b7:
17:21:03:47:68:ac:5c:06:f9:6b:45:ff:90:78:bd:fd:54:ca:
6e:0f:55:32:04:f4:75:dc:8c:ed:80:a8:ff:19:22:36:a6:7e:
e7:21:e1:01:ee:27:92:d0:2f:76:34:39:de:ce:e9:5c:fd:29:
b4:e3:47:53:0a:6b:54:ea:d7:58:c9:33:2a:ff:2b:b3:e0:03:
5e:d3:09:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKKv3K8b1f27AtUo+RRofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5
MTEwNGYwHhcNMjYwMzI1MTgwMTMyWhcNMjYwMzI2MTgwMTMyWjAzMTEwLwYDVQQD
Eyg2ODgxYmM3MmFmYmE3Nzg2Y2VkNTY0NDAzNWM1M2UzNGViOGZiYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAnzyX7DnPlJE/7fWdgIuFuTodSh
eqtgrNNbBT7GwNE7CMIaQlhZjW6t+lfiPhkcTXT2KflYs70MNZ8rTR+PYb9sVzug
/CBhxuudRlH/2uKQPVFt4TuD/GVJgFf6rT7XQl7V7dcvkQmjCaXSQm55MkKtQ3r/
Pv4r1C7FlOCk7Vq0BBKaPGm++q76pwIFbOELJTYOQ7gs/M5mmOogPRQnILy7oHPv
UeRBJXyWcIz4UDXFJH3OLaiRhfCG/HXPxNcm+EQol1KJjcbIcx8dTyMMEO7wZVAt
ANjBDRLb/fhZOp75nfmUd64qt9NvyIlSyNyjbzH65ONlmdduPMhzWrNWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiBvHKvuneGztVkQDXFPjTrj7x+MB8GA1UdIwQY
MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt
NjNmNTAzNWYzNDQ2LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2
LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE8ZRnfJ
3xUCq0hFjRBxmVmyhrihPm/DrVuH8sIoPv31TH0Td0v71KtEuFRYTwbHBCtp6wxt
fxAZYE2HRdE0goCEZiT7Xzg+i5pnen/I2D78bTnr62MtWDYbfIm8dR/4o4j6LeY8
wOFFGJy6mZ9k85hq2QriRJpa1C3t97V22cZyQNrZtLCfaj+XARpnqkWDvJHWZzma
w1ZBgtMXbOKRWAQg+NuWlVH7Qmo6mPdReM4ek5G3FyEDR2isXAb5a0X/kHi9/VTK
bg9VMgT0ddyM7YCo/xkiNqZ+5yHhAe4nktAvdjQ53s7pXP0ptONHUwprVOrXWMkz
Kv8rs+ADXtMJ+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:02 2026 by rpki-client