
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: 9IpJmxNyBrCsHuFezp5YI2AtXGnKh7fc9OjCqPXE9P4=
Subject key identifier: 20:8D:85:7B:5D:7D:8E:A7:91:5E:F7:CB:A1:D3:F5:52:7A:A0:23:01
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 019CAD90AC60E29A5E38F00B08F7B65E6CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 08:01:05 +0000
Manifest this update: Mon 02 Mar 2026 08:01:05 +0000
Manifest next update: Tue 03 Mar 2026 08:01:05 +0000
Files and hashes: 1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: Ab98mq9WYvf2glSHhzXubjg1463S0DXc54pFweCrDeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:ac:60:e2:9a:5e:38:f0:0b:08:f7:b6:5e:6c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Mar 2 08:01:05 2026 GMT
Not After : Mar 3 08:01:05 2026 GMT
Subject: CN=208d857b5d7d8ea7915ef7cba1d3f5527aa02301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:32:22:73:b8:60:cd:d9:07:3c:ca:3a:71:
b4:87:a1:db:a4:44:29:51:d6:9d:c7:9b:68:12:ba:
de:26:0c:bb:75:eb:cb:8c:d9:70:9a:62:1b:14:e4:
ba:80:4f:79:93:bb:58:94:15:9d:5d:c6:ea:fb:f5:
19:dc:7b:ad:08:27:92:48:cc:7f:b3:70:51:c5:05:
e3:e3:df:c6:ab:36:04:7d:19:b3:22:bb:22:e9:a2:
65:d9:60:1e:40:09:9d:ba:03:6c:bf:6e:ab:0a:02:
db:9d:e5:bf:4f:ff:e3:35:d0:dc:2d:03:f2:a2:54:
fe:56:41:a3:b5:e2:4b:1f:63:bd:2b:ef:ef:d9:e9:
00:b1:59:f1:19:73:b5:9c:ea:d1:fd:5a:fe:37:b8:
65:22:06:4e:38:d8:c2:33:d4:e5:eb:d5:b3:3a:eb:
bd:cc:08:fc:8f:4f:fd:85:67:18:9d:c0:a3:ae:b3:
d9:c2:3a:0a:0d:2a:f9:c4:9d:55:ac:85:1e:81:a0:
1d:68:87:fd:c9:f5:dd:f7:6b:ec:0f:d8:c1:3d:3d:
8f:58:be:ee:27:47:dd:f3:58:1a:bc:ce:8a:52:ce:
e1:87:af:45:10:22:c0:12:7d:f8:64:7d:86:8c:ba:
a1:3b:7c:5e:25:e7:52:db:09:a1:de:a3:b0:da:8f:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:85:7B:5D:7D:8E:A7:91:5E:F7:CB:A1:D3:F5:52:7A:A0:23:01
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:9e:b4:92:26:f3:84:ca:50:a6:ad:bf:2b:96:cc:a2:cc:
78:0f:0b:df:12:a9:e0:ea:4a:38:6b:fa:8d:a9:ea:47:17:a7:
75:6e:de:28:a0:8d:cc:6e:dc:71:63:e3:60:b5:87:43:79:69:
17:ce:95:5a:ae:a8:c5:30:c5:ac:ab:5c:bb:b9:19:62:1f:e8:
a9:1a:bb:da:9c:26:b4:63:66:cd:47:bd:c2:8f:71:98:37:d1:
61:16:87:06:a5:07:b3:4c:9a:8a:ee:76:31:a5:81:71:a4:e3:
41:74:c4:94:92:20:cd:2b:e7:eb:d3:69:9e:93:ad:90:e1:fd:
45:49:3e:8f:03:55:0b:c4:c0:1c:c9:8f:e0:ad:0e:e8:fc:85:
08:35:be:59:74:0f:a6:c8:c5:3b:d9:85:51:42:c2:b2:09:44:
a6:a5:4c:ff:12:41:8f:78:41:f7:45:72:1e:db:4c:7c:8d:82:
d7:c1:8b:11:f4:7b:b4:95:6f:08:06:54:6a:3d:8c:c8:44:b3:
c1:bd:30:c1:5c:8a:78:e6:ef:db:9b:76:e5:86:09:a6:26:72:
07:cc:22:d4:d6:7c:cb:18:af:20:53:d4:6f:75:2d:9b:2a:a8:
a3:f6:f8:5c:39:f8:f2:bc:8b:04:20:e1:2d:11:83:50:ed:fa:
8a:7f:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:40 2026 by rpki-client