Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: CIFiTL+TKYI7LNcRxq7Jq5JGxDFkv+ANEFDJmlG+wqM=
Subject key identifier: 34:D8:FA:0E:76:40:79:A5:CF:91:A2:86:B5:3A:20:58:EE:76:B5:E8
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019D9A3EA4C09C129A4D67B8AA2F70857270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 1424
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: //44FTtPjKjKA1tVn/S3sMFEc4l8DMWa0bkEzoDFIiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a4:c0:9c:12:9a:4d:67:b8:aa:2f:70:85:72:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=34d8fa0e764079a5cf91a286b53a2058ee76b5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:ff:cb:c5:13:3e:b0:b9:3c:1d:6b:0d:e7:
76:b9:ac:26:87:d0:48:b3:10:9c:d6:02:4b:69:46:
88:80:92:29:3e:93:e2:d7:ff:0c:31:34:7a:e4:6f:
3c:9d:f1:83:ba:97:9f:4f:7d:d9:41:df:ea:9a:30:
b0:fa:7e:c8:b7:4f:a4:42:73:19:62:fc:76:53:28:
e3:4e:be:46:ec:8b:30:69:ba:67:7c:8f:24:03:ed:
40:1a:5a:8f:84:5c:d1:59:98:61:68:ea:37:6d:80:
a9:43:ce:90:6c:05:82:1f:72:da:a8:ba:00:10:6e:
d0:f9:84:ae:c2:89:2e:fd:27:06:52:1a:a1:b3:f8:
11:84:45:7a:f9:f3:3f:70:c5:13:1f:29:06:ea:92:
76:56:ac:1a:c5:9a:0b:c1:59:3a:a8:f2:5c:84:8a:
ce:50:cc:c9:77:bf:c6:d5:d1:4a:9b:23:fb:e1:61:
44:ac:d5:9a:a7:30:74:f4:cd:eb:5e:a8:3c:5b:69:
05:30:13:9a:82:7d:1d:d8:3a:9d:ae:ab:6e:eb:0c:
fb:17:88:de:82:1a:1a:2c:1d:3d:7a:04:e3:ab:2a:
d7:b4:81:81:9a:b1:bb:0f:75:c2:44:2e:cc:b4:29:
3d:9e:dd:93:b0:74:52:d2:32:91:87:16:b6:c6:63:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D8:FA:0E:76:40:79:A5:CF:91:A2:86:B5:3A:20:58:EE:76:B5:E8
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:93:e5:72:78:63:7c:aa:e6:4a:d5:fa:f5:17:fc:cc:84:e1:
59:0c:ba:65:fc:83:16:8e:ec:5f:96:de:ee:a5:e8:5c:a0:67:
57:33:de:55:a3:4c:b2:d1:d0:52:ba:67:12:78:c2:a6:9e:a9:
e7:65:9c:9e:96:d0:c4:19:1b:70:28:7f:48:6c:e3:93:71:2b:
7c:cc:91:af:99:1f:3b:7c:4e:10:d5:f3:6c:fc:05:49:36:41:
f7:69:29:59:66:47:34:3e:85:46:97:04:70:02:35:af:8f:ca:
d1:f8:c4:e1:05:6c:86:fd:ce:81:17:01:a3:b7:ec:d3:6b:29:
38:2e:d8:cb:1a:58:63:ea:c0:fe:f8:d9:b9:6e:05:8c:48:65:
a0:67:f1:89:f6:84:6c:c5:c7:48:3e:cc:f1:5d:9c:19:56:b8:
6c:11:d4:82:e5:59:c0:fc:ef:cc:a7:94:8a:b2:17:c5:5b:8f:
18:a0:57:67:04:d1:b1:8c:d3:e6:d4:b3:80:ce:2c:fe:53:31:
f7:d3:62:e6:8d:e9:3f:94:e5:50:e6:67:41:4e:d9:ea:a8:94:
ac:c6:68:e2:47:21:7d:87:cc:29:0b:10:8f:cf:42:e6:fc:cf:
52:f7:44:36:58:5b:73:f7:77:8f:0c:69:88:70:d9:d8:3a:2e:
a3:6c:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:35 2026 by rpki-client