Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: Aw0ZdzdLaAOd1+ktXjRjqkUXR9rbgxKx2nGWDY3sSBY=
Subject key identifier: 01:0F:53:40:29:CB:51:5D:99:73:C5:4A:4D:E7:BC:F9:80:E1:E5:49
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019CAAC643D10611D317B9ADFD8729CD892E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 13A8
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: ERKn7YHrQK6rFCECdBI8Q7gIRUOj1CscKBljvgt+tLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:43:d1:06:11:d3:17:b9:ad:fd:87:29:cd:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=010f534029cb515d9973c54a4de7bcf980e1e549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:0f:38:61:94:97:2e:0a:56:06:d4:15:fa:
b0:56:13:66:87:08:66:6f:c8:f4:5d:d5:fe:75:06:
e7:50:92:84:54:24:18:00:67:96:ca:af:b4:35:d6:
69:1a:a5:2f:c5:bc:83:e4:52:25:a6:6b:86:22:c4:
64:8d:75:91:d6:0d:72:95:f8:c2:c5:9b:5f:e3:87:
f6:cf:d5:3c:10:1b:07:5d:a5:67:59:9b:70:3b:cd:
e6:18:43:9c:ca:01:3a:c2:e9:74:5a:12:c4:d2:c0:
a6:ad:a0:a2:14:ed:4a:ae:bc:1e:f8:9a:70:97:51:
df:01:a7:67:f7:1e:02:ab:a9:ed:22:08:54:c6:36:
56:2e:d1:03:5c:04:c9:aa:3e:d8:8a:55:3b:0d:85:
8d:9d:f0:39:06:15:38:06:b7:e7:90:d4:31:c9:e3:
6d:fd:47:6f:64:12:bb:b4:8a:e8:f2:05:f5:58:4b:
fb:5c:3b:a7:6e:3d:35:65:ad:3f:ba:fc:da:c7:31:
76:ff:a5:cf:fa:4b:0d:15:76:d3:2e:70:33:7d:29:
cc:3e:a6:41:5d:89:1a:b3:32:ce:fd:a1:42:43:e7:
1d:ea:6d:62:d5:0b:ae:1e:57:13:73:35:10:e9:e4:
79:75:f7:4b:40:55:77:bf:77:d9:9c:ef:2c:aa:15:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:53:40:29:CB:51:5D:99:73:C5:4A:4D:E7:BC:F9:80:E1:E5:49
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:68:e1:1b:02:35:89:d6:3d:2b:c0:da:80:18:31:28:00:
65:a8:66:c7:e4:15:b5:31:93:66:01:e0:31:d6:ec:44:91:cb:
3c:88:44:4a:8b:6f:32:bc:80:8b:26:df:6b:08:fe:d5:e9:4a:
cb:97:b7:45:f2:e9:66:dd:14:d2:bb:1e:76:99:ba:97:bf:83:
e2:8f:d1:4f:d1:78:9d:65:cb:89:67:86:45:8b:84:86:4f:d1:
93:fc:52:8f:0a:37:37:41:67:6f:0a:34:6b:59:e8:a7:6b:23:
f1:14:42:10:b8:ff:e8:76:b9:a4:54:ba:d1:11:b1:f8:0d:62:
75:54:30:a7:10:78:eb:04:f1:e8:b1:66:21:5e:3c:14:e6:56:
3a:ad:f3:27:ee:7b:62:b6:80:ad:de:93:01:c2:ac:61:2d:16:
5e:b4:60:e9:29:fe:fa:79:04:5c:34:62:b7:f8:14:5d:a4:57:
8f:56:36:9f:d0:18:d6:75:50:0d:9d:56:10:9f:0d:02:7e:15:
1e:12:0c:45:0c:d0:2e:7b:46:88:b4:2f:b4:64:57:fe:fa:5e:
a4:f9:7b:ec:8c:da:08:d1:ef:2c:a0:6a:70:24:a6:b0:6d:37:
d2:e1:ec:0b:96:8f:ea:87:7f:d2:32:37:d0:2c:be:af:e8:e1:
f6:5b:5a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxkPRBhHTF7mt/YcpzYkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1
YjBkZjcwHhcNMjYwMzAxMTkwMDQ2WhcNMjYwMzAyMTkwMDQ2WjAzMTEwLwYDVQQD
EygwMTBmNTM0MDI5Y2I1MTVkOTk3M2M1NGE0ZGU3YmNmOTgwZTFlNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYIPOGGUly4KVgbUFfqwVhNmhwhm
b8j0XdX+dQbnUJKEVCQYAGeWyq+0NdZpGqUvxbyD5FIlpmuGIsRkjXWR1g1ylfjC
xZtf44f2z9U8EBsHXaVnWZtwO83mGEOcygE6wul0WhLE0sCmraCiFO1Krrwe+Jpw
l1HfAadn9x4Cq6ntIghUxjZWLtEDXATJqj7YilU7DYWNnfA5BhU4BrfnkNQxyeNt
/UdvZBK7tIro8gX1WEv7XDunbj01Za0/uvzaxzF2/6XP+ksNFXbTLnAzfSnMPqZB
XYkaszLO/aFCQ+cd6m1i1QuuHlcTczUQ6eR5dfdLQFV3v3fZnO8sqhUrqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEPU0Apy1FdmXPFSk3nvPmA4eVJMB8GA1UdIwQY
MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt
NzM0ZmFiNmZlYzZmLzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm
LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm9o4RsC
NYnWPSvA2oAYMSgAZahmx+QVtTGTZgHgMdbsRJHLPIhESotvMryAiybfawj+1elK
y5e3RfLpZt0U0rsedpm6l7+D4o/RT9F4nWXLiWeGRYuEhk/Rk/xSjwo3N0Fnbwo0
a1nop2sj8RRCELj/6Ha5pFS60RGx+A1idVQwpxB46wTx6LFmIV48FOZWOq3zJ+57
YraArd6TAcKsYS0WXrRg6Sn++nkEXDRit/gUXaRXj1Y2n9AY1nVQDZ1WEJ8NAn4V
HhIMRQzQLntGiLQvtGRX/vpepPl77IzaCNHvLKBqcCSmsG030uHsC5aP6od/0jI3
0Cy+r+jh9ltaow==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:38 2026 by rpki-client