Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: H1unBKEgV3Q3gdYtQTSE6hxNHRfPyaFXCWXn8Qvkk5U=
Subject key identifier: 00:CE:CA:0D:E1:15:E3:EE:5B:AE:E6:AA:12:00:C6:EA:92:E0:AE:9A
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 019CAA586C51DB2B612414ED2289E17E2EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 17:00:47 +0000
Manifest this update: Sun 01 Mar 2026 17:00:47 +0000
Manifest next update: Mon 02 Mar 2026 17:00:47 +0000
Files and hashes: 1: 6p89_xCOKbaLA_nTNaPhKFJdz_c.roa (hash: 8QYHiVGLqfMhZfw5m6z2kE4Wp9ZlKeYZXiQifht1XBw=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: otB5QY++Duth5Z8oguJxaPI6InTT/sjYCdiO0YjlwlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6c:51:db:2b:61:24:14:ed:22:89:e1:7e:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Mar 1 17:00:47 2026 GMT
Not After : Mar 2 17:00:47 2026 GMT
Subject: CN=00ceca0de115e3ee5baee6aa1200c6ea92e0ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:20:0d:46:22:1d:36:81:65:77:25:b8:71:
bc:69:f1:70:33:f6:f3:05:5b:b6:13:7b:f7:fe:fa:
29:db:da:23:c4:10:53:23:13:41:bc:72:45:ae:a9:
97:27:29:2a:24:bc:90:e1:d9:79:14:dd:38:bb:b2:
8e:99:cb:c7:95:00:ef:7e:ed:a6:95:15:93:ee:46:
c3:44:26:c8:51:54:82:2b:6c:c1:14:78:77:46:65:
50:3f:23:76:fd:e2:69:a6:60:9c:12:53:44:5b:64:
79:51:2d:03:a8:21:39:2f:48:f0:9e:31:98:f6:74:
d5:68:5b:3f:c8:ad:ea:01:21:2e:63:06:ab:06:9f:
bb:68:69:d7:6f:a7:09:7e:de:7c:5f:04:39:44:e9:
51:ea:57:95:70:68:50:f2:c2:c7:ea:81:80:5f:07:
69:30:65:ad:f4:88:7c:ac:41:0a:83:8e:33:bb:d9:
05:70:79:12:6f:63:0c:73:a2:9a:2b:3b:28:89:95:
0f:52:4c:fa:b3:04:25:eb:d1:a4:99:28:26:df:92:
c0:34:d9:38:12:27:ea:fc:c1:85:14:68:2c:98:74:
71:12:ee:d6:d3:90:bb:a1:22:5b:61:74:be:c7:1a:
6d:bf:be:5b:d9:c8:3e:2b:b7:c6:d8:df:49:24:44:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:CA:0D:E1:15:E3:EE:5B:AE:E6:AA:12:00:C6:EA:92:E0:AE:9A
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:06:71:02:a6:fc:a3:7f:88:84:04:87:a8:5f:e0:25:5c:
05:85:e8:1f:e1:ae:68:a3:60:42:93:42:30:78:af:da:0e:b0:
7d:27:6c:ee:01:da:34:91:4c:f2:10:f2:82:ec:21:d9:f8:20:
97:e1:d3:b0:e7:7b:dc:63:05:bb:b5:c1:5e:de:71:c6:67:9b:
4d:b6:16:67:29:f0:a9:61:b0:6f:b9:86:48:b2:bb:3a:74:51:
90:8b:e6:7c:1e:48:ae:22:47:ef:e5:f6:7c:3b:28:ed:4f:27:
0e:95:d9:32:c8:c5:d8:25:cb:1d:ae:3a:85:57:be:8d:7d:b8:
b7:8b:ed:39:d7:89:4b:cf:95:96:4a:28:06:6a:69:44:65:55:
52:27:20:07:34:d5:dc:db:e6:97:35:f9:76:48:91:9c:ca:90:
cb:b4:5c:65:ad:25:9c:f9:cf:24:8a:8a:52:f2:61:86:09:84:
b9:09:c7:f2:73:f1:d7:e5:9e:58:52:49:cb:31:a3:a1:19:6b:
a4:33:33:ad:18:d8:30:5e:59:e5:b9:7a:4f:7b:a2:22:be:88:
e0:d3:5c:16:85:31:47:fa:5e:68:39:df:31:8e:61:60:49:95:
5c:ca:15:d2:ea:0f:93:1d:22:fb:4a:aa:8f:ab:04:23:d3:ec:
e6:48:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:08 2026 by rpki-client