Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: RRgwevxlalIfdmFq+GkR0nLuG/nTHX1SeQ83y+nhLGU=
Subject key identifier: C4:4E:F0:A2:93:90:C3:05:ED:D6:0A:86:28:D9:58:2A:21:6B:36:C7
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019FA975ABA2CE62B18A5236484F501002B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 1535
Signing time: Tue 28 Jul 2026 16:01:28 +0000
Manifest this update: Tue 28 Jul 2026 16:01:28 +0000
Manifest next update: Wed 29 Jul 2026 16:01:28 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: A3MCAvgUhOS6E4JENByVL1UFvU59GzMtA9LtlbsParM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:ab:a2:ce:62:b1:8a:52:36:48:4f:50:10:02:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Jul 28 16:01:28 2026 GMT
Not After : Jul 29 16:01:28 2026 GMT
Subject: CN=c44ef0a29390c305edd60a8628d9582a216b36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:7c:2f:3d:78:e7:7f:31:fd:38:a6:db:2a:
5e:ef:05:ac:83:b1:a9:83:e3:e1:79:4d:9a:db:be:
e7:9d:b0:de:e0:9f:87:41:91:eb:bb:51:8a:26:bf:
75:dc:e8:ca:d2:28:47:56:3a:ce:a6:98:40:d4:3d:
b2:57:22:db:bd:8c:7c:74:3c:92:9e:c5:60:78:bd:
d6:a2:54:0f:16:1f:e2:fe:54:f2:ba:c4:c9:41:4e:
06:f7:84:0e:68:81:c2:58:35:e3:04:c6:43:0f:b7:
7a:7f:00:ff:fc:16:49:1f:f5:6a:50:48:97:28:39:
1f:b8:23:6b:d1:48:02:c9:72:47:bd:73:44:50:34:
00:d0:46:d4:09:35:62:39:d1:1b:00:da:ce:25:4d:
10:17:27:72:28:6b:db:2e:b2:d3:56:c2:c7:f5:9e:
5a:c9:18:fd:9b:19:82:fe:ce:34:72:73:86:34:03:
cd:b3:eb:b5:ed:fd:66:ff:ce:72:f3:10:a4:75:b2:
54:e5:32:18:3a:3a:6c:0f:e7:f7:8f:0c:e4:54:89:
0b:a5:0a:96:27:15:71:78:3e:7c:0e:4d:fa:38:1c:
f0:ac:cd:e6:2f:91:e3:28:4a:b7:d5:69:70:cf:fb:
a8:68:e4:8a:82:10:c7:d9:cd:f3:30:e8:5f:36:26:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:F0:A2:93:90:C3:05:ED:D6:0A:86:28:D9:58:2A:21:6B:36:C7
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f4:a1:9d:1c:8c:9f:0a:0e:d7:cc:00:cc:d5:04:bf:88:33:
bc:87:e9:b4:18:17:0a:37:fa:07:dc:57:17:71:a2:05:62:38:
77:7d:e6:51:e0:8a:bf:8e:a1:7b:3b:ec:3a:01:db:51:5c:42:
5f:23:6c:33:f3:d9:7a:d2:43:50:7f:11:44:c2:66:90:4a:f8:
17:ec:96:f3:1f:99:c5:71:1e:5c:e6:f9:42:8c:d5:e1:f7:e7:
e2:b9:8a:f8:fe:0e:83:35:67:d2:96:bb:2b:2e:21:7d:a9:5d:
d6:5b:4f:30:fb:4d:54:46:68:36:14:a0:69:ab:e3:3f:22:52:
3f:1a:67:94:83:59:05:97:5a:e8:f8:dd:4f:45:f1:74:20:a9:
42:f2:31:79:d3:95:d0:72:c6:27:ed:8b:d1:0f:e4:47:d0:db:
a2:b1:1e:af:27:64:85:dc:77:e4:5a:67:ec:14:ab:4d:12:69:
ac:ca:c4:66:ae:a4:3b:25:fb:d2:90:0e:79:1d:73:0a:d7:21:
25:c7:f4:91:d6:e9:99:ba:69:03:89:aa:e7:f8:38:56:65:3f:
30:12:e6:89:2b:f8:a0:7b:30:cd:43:89:61:1c:c5:97:f2:b7:
4a:10:f9:54:48:61:26:9f:67:3a:ad:ce:3a:eb:85:38:17:72:
18:60:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:22 2026 by rpki-client