Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: U1bWILNFOg0NDDdmt2k4kJA+8k44oIEJFphFSGoQCes=
Subject key identifier: 39:9A:07:AA:99:A7:B8:BF:7C:63:B2:D5:60:0A:BA:D0:C0:B7:3A:75
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 01A0C33202BB488FC7E3326BC3614C896126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 06E2
Signing time: Mon 21 Sep 2026 09:00:29 +0000
Manifest this update: Mon 21 Sep 2026 09:00:29 +0000
Manifest next update: Tue 22 Sep 2026 09:00:29 +0000
Files and hashes: 1: 3oxXe_LMdmgBh67aYHllf1ksKxY.roa (hash: X0EIAkouYy/GijmRo29FyFjw4tvZRq/6szk6YmIQwmk=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: dqNAsp2wDxHYEepG8UlrRpquH0++gcTLrDqLmXFnVoo=)
3: qX-iNVdOBJWKBvOu7eyYXDAnEQE.roa (hash: L3v1rQi5VlfE6vsx7Nat97JoOxMImNy/mcNcKtk07FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:02:bb:48:8f:c7:e3:32:6b:c3:61:4c:89:61:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Sep 21 09:00:29 2026 GMT
Not After : Sep 22 09:00:29 2026 GMT
Subject: CN=399a07aa99a7b8bf7c63b2d5600abad0c0b73a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:5e:80:e2:e3:bf:b1:06:b1:be:3a:fb:c1:
03:61:93:f0:31:97:41:ab:ae:f7:ff:de:89:e3:01:
c4:00:0f:4c:7e:f3:ee:e3:d7:c6:61:cf:02:80:a6:
6a:7f:71:92:c8:39:6e:e2:90:d5:2f:d6:4d:b2:d2:
1e:c5:10:47:d5:93:cb:a1:c4:2a:93:7b:7f:2e:e5:
33:c8:56:36:ba:58:4c:60:5d:47:b3:f8:aa:70:bc:
06:bd:0c:6c:d0:75:47:43:c5:6b:c0:91:f2:bc:64:
70:a5:d9:7a:73:ae:69:40:33:80:e2:e0:bb:8a:4c:
60:4f:10:7e:4e:5e:32:28:92:87:b3:1c:d3:5a:a0:
a4:5a:74:d5:5a:dc:89:2b:83:aa:cc:2b:71:9a:31:
65:3f:2e:a1:da:88:93:71:ea:0f:d4:25:9d:8b:d6:
06:d7:70:03:34:dd:5e:64:de:4b:37:7e:af:63:b2:
98:54:c5:df:2f:53:6b:1f:a6:d3:cf:4e:dc:d5:8e:
2d:b7:fc:bd:0d:d4:4e:77:0a:2c:f7:e6:3e:f1:f7:
51:c9:75:4d:af:ce:41:ea:9a:0a:74:7a:d4:4e:d7:
8e:30:5e:77:c4:20:6b:b8:87:db:8a:41:64:b6:07:
84:a6:4b:38:71:5f:93:53:ab:34:a3:86:58:32:8f:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:07:AA:99:A7:B8:BF:7C:63:B2:D5:60:0A:BA:D0:C0:B7:3A:75
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:29:82:83:ca:59:8e:28:65:de:f7:96:2e:62:c6:b3:9a:
e4:22:73:c1:1b:a3:a1:02:70:20:97:a6:4c:a8:24:35:3b:b7:
dd:5b:d2:3d:be:9a:e6:b9:d1:a0:11:6f:6f:b6:28:dc:ad:84:
38:fc:93:5a:9e:56:cc:75:4b:a2:4a:8c:db:d6:6c:64:ef:03:
2e:b1:b2:3a:2e:16:a9:c2:af:b0:9c:f6:ae:d8:f2:76:d7:d9:
46:e9:e6:86:aa:fa:78:52:0b:f8:74:cb:8a:bc:77:08:ab:c9:
dc:2a:d2:7e:3d:c6:ef:fd:e4:21:db:71:57:61:f3:ed:41:4f:
08:04:ea:d8:6b:1e:ef:62:17:d1:88:d6:92:dc:05:dd:7a:7d:
3c:79:ed:aa:7f:fe:6c:e7:9f:22:98:33:f8:1a:38:9a:77:45:
e8:30:e9:53:15:0f:c8:d4:f3:22:3e:12:80:1a:5c:21:09:1e:
9d:54:fd:9f:4a:4b:fd:70:6e:69:5e:50:18:8a:0a:5e:34:62:
e2:80:ac:06:d0:1e:19:09:f5:85:74:95:6c:60:c9:46:18:fd:
69:5b:68:88:87:1a:93:6e:32:b8:7a:00:d6:87:10:14:bd:c7:
0a:4e:75:39:4f:5e:22:f9:6d:b9:23:e7:ea:aa:c8:50:d8:1b:
b2:f9:91:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMgK7SI/H4zJrw2FMiWEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5
MTEwNGYwHhcNMjYwOTIxMDkwMDI5WhcNMjYwOTIyMDkwMDI5WjAzMTEwLwYDVQQD
EygzOTlhMDdhYTk5YTdiOGJmN2M2M2IyZDU2MDBhYmFkMGMwYjczYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukVegOLjv7EGsb46+8EDYZPwMZdB
q673/96J4wHEAA9MfvPu49fGYc8CgKZqf3GSyDlu4pDVL9ZNstIexRBH1ZPLocQq
k3t/LuUzyFY2ulhMYF1Hs/iqcLwGvQxs0HVHQ8VrwJHyvGRwpdl6c65pQDOA4uC7
ikxgTxB+Tl4yKJKHsxzTWqCkWnTVWtyJK4OqzCtxmjFlPy6h2oiTceoP1CWdi9YG
13ADNN1eZN5LN36vY7KYVMXfL1NrH6bTz07c1Y4tt/y9DdROdwos9+Y+8fdRyXVN
r85B6poKdHrUTteOMF53xCBruIfbikFktgeEpks4cV+TU6s0o4ZYMo8AVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmaB6qZp7i/fGOy1WAKutDAtzp1MB8GA1UdIwQY
MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt
NjNmNTAzNWYzNDQ2LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2
LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAix0pgoPK
WY4oZd73li5ixrOa5CJzwRujoQJwIJemTKgkNTu33VvSPb6a5rnRoBFvb7Yo3K2E
OPyTWp5WzHVLokqM29ZsZO8DLrGyOi4WqcKvsJz2rtjydtfZRunmhqr6eFIL+HTL
irx3CKvJ3CrSfj3G7/3kIdtxV2Hz7UFPCATq2Gse72IX0YjWktwF3Xp9PHntqn/+
bOefIpgz+Bo4mndF6DDpUxUPyNTzIj4SgBpcIQkenVT9n0pL/XBuaV5QGIoKXjRi
4oCsBtAeGQn1hXSVbGDJRhj9aVtoiIcak24yuHoA1ocQFL3HCk51OU9eIvltuSPn
6qrIUNgbsvmRyA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:27:59 2026 by rpki-client