Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: M/v2rI2Cw1hRlMlAsFCtHbyacDebx0+Zu+MTa80dCkE=
Subject key identifier: FE:EF:F9:7B:DE:41:DE:BA:87:29:AF:5B:7E:D7:97:1D:49:8D:6F:37
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019D3788FD0B93FA5F392E868B29A8983255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 050C
Signing time: Sun 29 Mar 2026 03:00:17 +0000
Manifest this update: Sun 29 Mar 2026 03:00:17 +0000
Manifest next update: Mon 30 Mar 2026 03:00:17 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: ekwQL5vmMRsVO0eDMwnb++79K7V5kbuT2qifwKd4gt4=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:88:fd:0b:93:fa:5f:39:2e:86:8b:29:a8:98:32:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Mar 29 03:00:17 2026 GMT
Not After : Mar 30 03:00:17 2026 GMT
Subject: CN=feeff97bde41deba8729af5b7ed7971d498d6f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:9e:2f:45:6e:28:a8:e9:5b:f3:d6:14:26:
32:08:f6:d2:b8:04:8c:0c:f5:3b:73:9f:47:07:0c:
8a:5e:d1:43:66:a9:85:a0:a9:ed:12:57:a9:2a:a1:
ae:ce:e0:e2:a6:c1:d9:53:d4:43:15:18:ea:a4:e8:
d7:5a:09:a2:66:db:01:c5:46:f1:ad:35:c0:98:7c:
74:42:7e:40:1c:24:20:17:c8:01:9d:cc:dc:07:bd:
15:45:57:5b:6b:94:f6:e8:3f:2e:2a:5b:c5:59:70:
7d:2f:3c:64:4c:04:81:6f:21:e6:93:78:bf:01:00:
f0:e6:e7:b5:6d:e8:50:11:c4:9a:5c:39:92:3c:12:
e5:a6:22:94:cd:1b:7f:d2:f9:bd:07:50:a4:3e:c9:
c3:bd:8c:b1:e0:d7:14:2c:85:f5:92:b1:b9:28:7a:
af:0e:e4:e0:a6:6b:4e:b0:4a:35:cd:2f:02:c9:52:
fe:cf:a1:fe:52:fe:f1:13:9a:e1:a3:4b:04:0e:77:
f9:9f:db:14:65:08:a2:d1:09:62:0b:da:02:16:f7:
d0:31:30:8c:2c:3f:dd:f3:93:e4:39:05:d3:16:20:
bb:4b:4a:9d:64:01:d5:e4:df:92:15:11:1f:a4:45:
0d:cf:32:78:4c:2e:72:71:d8:7d:92:3e:e8:dd:6f:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:F9:7B:DE:41:DE:BA:87:29:AF:5B:7E:D7:97:1D:49:8D:6F:37
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:02:67:c4:b3:4b:f2:54:a7:aa:74:7f:5e:68:55:09:4b:20:
8a:cb:25:6c:a4:3d:46:ed:c0:2a:20:37:69:c3:2c:c3:80:4a:
81:6c:76:a4:bb:2d:15:78:a3:b3:0c:46:8c:06:72:61:88:8c:
8a:d6:1e:fd:41:b2:06:c9:d9:af:ea:ca:cd:43:bc:e4:60:6c:
70:59:15:87:0d:04:2a:e1:5c:56:54:02:5f:01:23:3e:ee:97:
0c:a2:b4:ea:d8:62:5e:e8:13:aa:bb:22:7e:8c:a7:82:4b:ce:
b9:db:7b:e0:12:77:58:66:dc:7c:17:ed:18:44:7c:9b:a0:5b:
27:b7:7f:2c:84:7c:49:cd:bb:82:12:76:97:db:c5:e9:6d:63:
76:ec:0e:cd:56:9c:a9:67:2c:92:4c:53:a3:28:f3:14:50:0f:
9f:3f:e3:7d:8a:91:d6:c6:3b:21:d9:02:27:cd:36:95:d9:a9:
29:45:6a:c2:29:f0:3d:78:9e:b4:38:9d:4e:bb:58:30:f8:e0:
4c:89:1a:f2:fc:a8:e0:9c:ad:25:f9:b3:32:58:fb:56:9a:f4:
59:e7:b5:42:30:0d:08:b8:a0:a7:9d:0e:9c:50:20:36:0d:aa:
5b:a6:7c:61:ba:f2:3f:4f:27:61:88:69:46:ad:07:02:ce:00:
7a:a7:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:56 2026 by rpki-client