
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: hHMGfdPmDrgP3Im6zUOY9f1vHsCbb3nF9Jj805SJ99k=
Subject key identifier: 7E:7F:00:63:D3:34:6A:DC:79:D9:37:F3:AB:82:79:4C:32:8B:49:CA
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 01A0CD10BA37C12C25274118F2BC4017E0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 15CC
Signing time: Wed 23 Sep 2026 07:00:20 +0000
Manifest this update: Wed 23 Sep 2026 07:00:20 +0000
Manifest next update: Thu 24 Sep 2026 07:00:20 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: d4mG3cil4DYFMKHvd/GL1vtLXAufiYTXzTxjI09mf6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:ba:37:c1:2c:25:27:41:18:f2:bc:40:17:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Sep 23 07:00:20 2026 GMT
Not After : Sep 24 07:00:20 2026 GMT
Subject: CN=7e7f0063d3346adc79d937f3ab82794c328b49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:a6:28:e8:ac:01:2e:b2:46:a7:24:b5:04:
a9:a0:20:77:3f:05:a4:6d:4a:70:e8:c2:cb:27:18:
3b:18:d7:12:54:98:da:11:03:f8:f1:cd:38:0f:27:
bb:98:8c:83:57:96:49:ac:27:38:7a:b5:63:1f:f4:
dc:15:1e:70:6c:f0:eb:01:81:cb:a4:f0:47:1a:36:
32:c4:9c:95:9f:dd:05:2e:23:0f:70:34:37:64:cf:
5d:48:0c:4c:b2:36:c7:42:d0:cf:48:fb:0c:61:e3:
90:bc:f1:f3:79:9f:7e:65:72:68:7a:74:95:51:ab:
1e:e4:4c:be:3b:ad:92:10:f4:54:38:93:c6:e9:dc:
84:c5:92:4f:31:ae:69:c3:90:e5:68:94:d2:49:1e:
27:72:1f:b7:29:07:8a:69:61:7a:c5:2e:48:52:77:
2f:3e:25:91:45:ac:4d:cf:c7:92:7c:42:32:b9:b3:
f5:4e:e2:e0:42:23:7f:50:b9:73:67:6b:70:cc:99:
cf:f9:d6:a3:49:47:40:0d:65:d1:2a:41:04:13:c6:
e9:2a:c7:a6:83:05:42:06:26:32:ed:c7:f0:54:55:
41:2e:15:9a:96:db:72:8f:ad:92:62:e2:98:b6:9c:
7b:71:ab:d5:54:a0:e1:a4:6a:0e:00:b5:f7:80:97:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:00:63:D3:34:6A:DC:79:D9:37:F3:AB:82:79:4C:32:8B:49:CA
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:46:e3:72:48:14:ba:ff:59:dd:19:62:2d:29:84:7b:fb:99:
98:e4:1d:a6:81:0f:6b:43:56:e0:1d:aa:e8:41:ea:19:17:72:
59:01:1d:07:71:4a:f8:db:53:49:92:ac:ca:2e:44:58:93:52:
1b:a4:19:65:58:3b:92:32:3d:6e:ed:74:56:69:e4:a2:fe:b2:
6c:cc:f4:10:56:c0:ae:e2:48:07:97:8c:c7:ad:c0:9b:d8:b0:
5b:45:9d:1d:bf:5f:a4:40:95:e0:34:c4:9c:7f:4c:27:12:21:
be:e0:33:eb:61:b6:a3:80:9d:48:78:c2:bf:ce:90:a7:bc:9c:
7d:e7:f8:f5:87:5f:6e:6d:65:8e:c8:66:d7:3a:5a:23:3b:85:
7f:c2:9b:cc:ae:92:d2:ee:ff:1e:16:25:12:27:e3:c1:4b:a3:
7c:86:4a:67:75:74:61:99:f1:b5:91:1c:5c:59:3b:46:a0:a4:
d3:0b:10:f7:c5:75:c5:c0:d5:84:39:15:f4:e4:08:3a:c3:46:
b8:15:19:90:91:61:c8:1e:48:60:40:ab:35:80:f5:6e:52:9d:
8f:6a:1e:c8:5a:83:d5:08:d5:a9:85:9d:63:55:20:38:8a:a0:
52:e9:22:94:75:13:32:33:d5:6e:21:42:ab:52:e3:61:80:55:
ef:43:04:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:45:37 2026 by rpki-client