Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: E0KB/Ux3/ugVMfIM1h/Y8Tktoc24v7a9BhaL6Ljgeug=
Subject key identifier: 1A:61:04:70:30:25:DB:6C:BC:F4:8D:85:98:B1:2B:5A:83:D1:59:72
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019FAB2C17BE4BE836481125B696F47ECD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 0651
Signing time: Wed 29 Jul 2026 00:00:21 +0000
Manifest this update: Wed 29 Jul 2026 00:00:21 +0000
Manifest next update: Thu 30 Jul 2026 00:00:21 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: OP6PfrLQ+zlK8uw+i6a4pAHLXO+GNUSsuTbyzer5AHA=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:17:be:4b:e8:36:48:11:25:b6:96:f4:7e:cd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Jul 29 00:00:21 2026 GMT
Not After : Jul 30 00:00:21 2026 GMT
Subject: CN=1a6104703025db6cbcf48d8598b12b5a83d15972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:ef:94:8f:47:79:44:e9:34:57:e7:32:32:
81:1f:7c:3e:a7:8c:f2:0c:6a:82:e4:fa:64:7f:fd:
d5:36:c1:7a:cf:3d:56:2d:19:ec:5f:ac:6c:93:6f:
a9:df:69:3c:46:b8:2c:21:6a:3a:32:33:96:a0:c1:
d4:79:ed:79:12:87:3e:c3:17:5b:35:13:1c:c8:a2:
aa:dd:1e:4d:f5:48:92:1b:b6:3f:bc:6b:06:24:26:
23:b4:7a:8f:f6:5f:7e:e4:f9:54:26:8a:f8:cf:0f:
f8:b8:ec:92:ac:39:29:e5:66:c9:9f:85:f2:2f:1f:
48:56:02:0c:68:5b:f6:b3:11:4c:0f:21:6e:97:2c:
0e:d0:ae:0c:3c:08:2e:26:a6:34:4f:fc:38:3b:f6:
57:a5:6a:01:60:96:e5:5c:dd:fa:9e:ad:5d:aa:95:
7e:39:8a:ed:d0:e3:06:b2:1e:f4:d7:c1:54:33:ea:
c6:bc:9e:95:d6:5f:da:35:c8:3a:fe:c8:44:ab:bb:
f5:1e:62:5e:75:d0:11:67:c2:2a:f9:9f:aa:18:cd:
0c:66:1e:dd:be:27:68:90:66:a9:a2:05:1a:c2:df:
db:4c:f8:0a:c8:8e:75:9d:5a:83:f8:0a:54:35:40:
9c:15:f4:04:5f:86:7c:12:95:6d:b7:a5:23:3b:a3:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:04:70:30:25:DB:6C:BC:F4:8D:85:98:B1:2B:5A:83:D1:59:72
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:e5:6e:a7:57:8a:cf:8a:cc:5c:38:ed:26:75:66:85:37:
6d:b1:7d:ee:2d:f1:d6:68:e8:d3:7d:6c:7e:24:89:7f:e2:8b:
8e:fc:9d:89:dd:db:0f:3e:f8:6d:d4:28:c8:d7:34:0c:c2:8e:
35:48:88:72:41:2b:6b:f3:0e:53:66:8a:ce:ec:d6:00:32:ba:
54:92:64:31:c6:93:c7:ef:20:9e:a1:28:ff:77:cf:47:e6:17:
03:b0:44:c0:bf:3d:3b:c4:7d:34:3c:83:a6:2b:8d:5a:60:34:
77:97:e3:65:f9:76:76:f1:b2:ac:a2:2b:c6:27:2a:6b:58:8f:
07:bf:6f:69:f7:cb:98:c8:ec:2b:93:90:81:e0:a1:80:23:84:
e6:9e:f9:29:77:6d:45:d9:aa:57:7f:43:f6:2d:ec:ce:3e:e5:
7b:bd:f8:5e:27:bb:24:ea:f4:73:5f:49:ed:cb:b1:c4:9d:f0:
94:d1:98:3e:cc:8c:f5:fd:a0:cb:ba:49:77:c9:1e:8f:ce:cc:
aa:50:65:e4:4a:25:36:1c:dc:17:45:2e:a5:aa:08:b9:18:8b:
4b:73:7f:8d:02:d1:d0:8a:27:4e:8c:0c:0c:87:9e:46:28:e5:
5d:20:15:c7:b4:47:09:0e:01:e7:0c:07:92:db:45:77:5b:54:
38:ec:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:32 2026 by rpki-client