Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: k4U9ezhLyv+2n6qk16ohDJ7YwuvCH5MMuIrRfTkSjQ4=
Subject key identifier: 28:25:25:93:53:10:A7:D9:36:8D:12:1D:C8:26:2E:F1:CA:6F:9E:50
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019D37C0CEC8C040E83FC5E19FB647956093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 13F1
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: zxZFztFFAA6JRV6iYXtUgXO4szTvFcKzqKDsw8QTlHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ce:c8:c0:40:e8:3f:c5:e1:9f:b6:47:95:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=282525935310a7d9368d121dc8262ef1ca6f9e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:26:d0:d6:a0:e8:be:0c:48:21:b2:46:15:
1d:e3:ec:c8:20:53:38:ad:46:17:8b:63:66:aa:1b:
6b:31:3f:3d:8b:7b:9c:c1:79:84:5e:ad:e8:73:0c:
fc:96:9f:d3:60:c2:e6:71:74:f2:21:2b:97:b0:a5:
93:0c:68:ea:3e:50:83:c6:90:59:bd:41:45:f9:5e:
a7:50:f1:e4:ae:d2:d8:c5:20:93:23:35:9d:33:55:
2f:cf:ab:72:e5:48:da:44:cb:04:7d:73:4f:12:e1:
02:a3:f7:e4:2c:b1:7d:05:50:a1:cb:fb:bb:6d:24:
4a:60:3e:89:40:3b:a8:01:9d:c0:40:bf:4b:d4:4d:
e7:dc:bb:29:90:bc:55:79:ad:04:5f:e0:49:a6:5e:
c8:c8:97:a3:79:be:06:58:56:44:62:5e:3c:b5:cf:
4c:00:79:04:2e:b9:87:dc:4f:e9:af:33:0a:a3:29:
d6:bc:29:95:49:5b:cd:cf:15:65:ed:58:8e:b2:af:
95:14:5c:39:90:d6:37:9c:15:42:b5:23:59:92:b0:
bc:b8:0d:7f:0c:b5:99:75:f0:fd:bc:f1:24:44:96:
42:a1:4a:df:7a:9a:f6:b4:4c:e4:0a:de:52:69:cf:
2d:b2:d5:9e:8e:80:1c:1d:6f:68:e6:4d:44:aa:25:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:25:93:53:10:A7:D9:36:8D:12:1D:C8:26:2E:F1:CA:6F:9E:50
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:af:b0:0c:d3:ba:cf:34:b0:1a:73:74:19:32:6f:1b:2b:bd:
da:22:12:c6:95:81:b5:3c:cc:60:00:f0:c5:1a:33:c2:29:56:
ed:8e:19:61:78:d9:4d:d0:6c:7f:51:1f:0f:ab:2a:77:a4:96:
84:b7:23:db:c3:19:22:2b:e6:18:ba:45:99:54:57:74:55:d6:
e4:fa:2b:82:15:e2:79:d4:96:34:60:e5:b3:97:f9:ad:b9:5f:
87:fc:02:21:9c:44:83:65:11:87:6a:61:63:b5:b9:a3:aa:ec:
82:93:b6:d4:a7:83:de:e6:3c:87:3b:b6:99:7f:85:7a:96:32:
19:5a:37:99:f1:5a:c9:4a:5e:e4:d9:c2:86:f6:19:66:1e:c2:
dc:18:ac:6a:4f:b4:62:02:ca:eb:fb:c3:96:d0:8d:a6:05:b9:
96:30:e8:4c:c0:36:84:7e:84:67:20:95:34:8b:84:a5:ef:d4:
31:5a:a5:11:23:70:bc:e6:c2:7f:ad:fd:4b:0c:cd:28:76:43:
8c:b1:e7:d0:0d:df:49:fe:76:ca:3f:f0:43:54:c1:b5:eb:7a:
79:b9:4f:a0:df:19:a6:ce:04:12:a3:82:b5:7c:c9:38:f0:6d:
e3:30:a5:1d:e3:1a:f6:8d:e0:9e:01:e0:f8:01:e8:5a:de:ec:
36:a8:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:23 2026 by rpki-client