
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: uUKy7NCbi0fqhMWG12E6mwkyeC/zWZS1VASIpaLzPlc=
Subject key identifier: 69:4B:74:45:66:D7:F0:3E:47:72:09:C0:F9:EE:C5:2C:D7:1B:53:70
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019EC1B68F00C8247C0BE4C923604DF42CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 14BD
Signing time: Sat 13 Jun 2026 16:00:26 +0000
Manifest this update: Sat 13 Jun 2026 16:00:26 +0000
Manifest next update: Sun 14 Jun 2026 16:00:26 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: OX/VPDHTkPZduRHkE6QM27NvH1EYl4vMgtKBz1cPBrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:8f:00:c8:24:7c:0b:e4:c9:23:60:4d:f4:2c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Jun 13 16:00:26 2026 GMT
Not After : Jun 14 16:00:26 2026 GMT
Subject: CN=694b744566d7f03e477209c0f9eec52cd71b5370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:d6:c8:88:f4:aa:8b:fa:ba:b9:93:6e:02:
23:d4:c0:26:c1:2c:49:52:24:05:15:f2:db:fc:20:
02:cc:74:fe:5b:e5:ae:75:cb:35:53:60:e6:7a:db:
f2:64:ea:2e:32:e3:19:4a:12:ea:d9:89:42:51:e9:
fc:b4:78:f9:85:74:3d:c1:a1:e1:f7:db:c6:7d:97:
d6:67:07:e2:4a:71:de:e3:39:95:6c:a2:2d:c0:3a:
7d:fb:86:7e:40:cd:31:dd:2c:9b:31:0c:f0:5b:1c:
30:32:05:94:f4:df:0b:b9:44:a1:2e:c2:70:ba:b3:
aa:c8:30:a3:74:df:e4:62:51:c4:cd:ac:74:0f:ae:
be:05:a4:b2:36:29:b3:14:af:6a:fa:d0:78:c6:db:
01:f7:f8:13:c9:0b:c0:e2:bd:f4:d0:65:56:10:7f:
c5:07:a1:52:f7:31:ae:c6:3c:3b:59:03:65:c9:d0:
75:70:0b:7e:0d:ca:64:53:73:a3:1b:5a:59:43:b1:
18:d1:73:5f:df:d3:85:af:42:bc:13:e6:52:aa:9f:
61:a7:c2:b4:77:ba:ba:7e:46:75:de:ae:1b:56:7f:
fb:32:10:ac:bd:a5:23:12:8a:ed:31:e4:b7:8a:69:
fb:ca:c4:28:d0:f8:05:c2:91:64:49:5f:58:bd:44:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:74:45:66:D7:F0:3E:47:72:09:C0:F9:EE:C5:2C:D7:1B:53:70
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:81:ca:be:9c:30:4f:1e:32:40:27:12:7e:2a:46:92:b1:
20:73:6a:89:b5:9b:02:93:94:63:91:2b:75:e2:5d:bb:7c:84:
67:65:70:76:73:81:67:7c:06:c3:93:43:63:6c:8c:73:53:87:
93:49:d2:db:76:39:13:bf:2f:09:3d:50:7d:49:d2:b4:bf:a8:
75:12:2c:e6:38:94:d5:36:8c:45:72:99:22:f2:70:a1:75:49:
f5:fb:5b:83:fa:18:01:43:26:bc:b9:6b:1d:90:42:f4:67:b5:
13:fc:55:21:40:f0:4b:0a:43:04:b4:87:52:26:b6:bf:22:d8:
c4:5e:ce:3d:98:09:cb:41:d6:6e:32:83:7f:23:d2:5c:99:39:
15:70:80:0a:7b:46:00:03:a6:20:9f:38:de:cd:78:c0:d2:18:
f3:27:8a:8a:79:a2:b8:4a:ef:25:b1:9f:08:d3:f7:45:03:9e:
25:81:fb:73:8e:d4:e3:ee:70:b2:ea:1f:35:fd:d4:49:b1:e3:
03:9f:60:58:a4:77:cd:bf:54:4d:22:dd:f5:e5:a8:b1:94:4c:
30:44:5c:be:e6:24:50:a8:de:6b:49:48:92:80:cd:02:cc:40:
c8:72:44:52:e7:52:21:fd:a7:cf:98:e2:17:e0:2f:85:71:56:
ad:6d:30:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bto8AyCR8C+TJI2BN9Cy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1
YjBkZjcwHhcNMjYwNjEzMTYwMDI2WhcNMjYwNjE0MTYwMDI2WjAzMTEwLwYDVQQD
Eyg2OTRiNzQ0NTY2ZDdmMDNlNDc3MjA5YzBmOWVlYzUyY2Q3MWI1MzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43zWyIj0qov6urmTbgIj1MAmwSxJ
UiQFFfLb/CACzHT+W+Wudcs1U2DmetvyZOouMuMZShLq2YlCUen8tHj5hXQ9waHh
99vGfZfWZwfiSnHe4zmVbKItwDp9+4Z+QM0x3SybMQzwWxwwMgWU9N8LuUShLsJw
urOqyDCjdN/kYlHEzax0D66+BaSyNimzFK9q+tB4xtsB9/gTyQvA4r300GVWEH/F
B6FS9zGuxjw7WQNlydB1cAt+DcpkU3OjG1pZQ7EY0XNf39OFr0K8E+ZSqp9hp8K0
d7q6fkZ13q4bVn/7MhCsvaUjEortMeS3imn7ysQo0PgFwpFkSV9YvUSY8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlLdEVm1/A+R3IJwPnuxSzXG1NwMB8GA1UdIwQY
MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt
NzM0ZmFiNmZlYzZmLzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm
LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBCByr6c
ME8eMkAnEn4qRpKxIHNqibWbApOUY5ErdeJdu3yEZ2VwdnOBZ3wGw5NDY2yMc1OH
k0nS23Y5E78vCT1QfUnStL+odRIs5jiU1TaMRXKZIvJwoXVJ9ftbg/oYAUMmvLlr
HZBC9Ge1E/xVIUDwSwpDBLSHUia2vyLYxF7OPZgJy0HWbjKDfyPSXJk5FXCACntG
AAOmIJ843s14wNIY8yeKinmiuErvJbGfCNP3RQOeJYH7c47U4+5wsuofNf3USbHj
A59gWKR3zb9UTSLd9eWosZRMMERcvuYkUKjea0lIkoDNAsxAyHJEUudSIf2nz5ji
F+AvhXFWrW0wSg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:18 2026 by rpki-client