Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: TtZS/MXH2ZhNQKa/QbipFzItCuB79/MaPf6ohlPy0OA=
Subject key identifier: DB:7A:9E:B5:D6:67:73:38:2E:7D:30:5D:FB:F8:88:55:22:D3:3A:82
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 019D992B1685BEC5A4F56681D88612305860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: CKXCzECX3Xy+2KXwezr0jgpfUlqpk3OXJTEbBSroDPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:16:85:be:c5:a4:f5:66:81:d8:86:12:30:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=db7a9eb5d66773382e7d305dfbf8885522d33a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:17:8d:c6:f3:c2:ce:8b:20:27:d4:b7:f1:
ca:a4:63:1c:9e:6e:d7:e8:25:4d:f9:db:3a:fe:2e:
68:e5:26:7e:ed:c0:c1:18:5a:3e:da:a1:ae:8b:88:
74:ed:8e:11:28:82:5b:1f:a9:75:83:56:7a:8c:10:
52:3a:29:7f:34:2e:14:68:ba:9c:af:fb:13:f9:90:
33:37:4c:dc:d7:cb:67:b8:97:17:9a:37:c3:d7:83:
db:23:61:56:17:91:fe:bd:bc:a0:f0:c1:b1:d9:31:
81:af:28:72:ac:5f:34:e7:52:2e:90:cd:b4:ec:68:
63:3b:19:f7:30:2b:2e:ba:9e:35:89:48:e6:32:22:
c4:b6:f4:f9:24:10:6f:31:8b:7f:72:2b:a3:59:8b:
ee:c0:32:ba:74:54:92:c6:b3:97:53:ed:2a:86:ee:
c5:e9:4a:bf:8a:0c:75:65:a8:fb:57:45:7c:d8:4b:
31:34:d1:ad:15:f9:b8:10:4f:65:89:82:cd:a3:90:
9a:56:ce:c8:52:eb:1e:6f:b4:1d:7d:d5:8c:52:d7:
90:12:27:13:c6:4d:16:7c:0c:47:90:f3:8c:73:cc:
9d:a9:67:e0:1d:89:ac:71:ab:83:83:40:06:7d:79:
59:64:36:01:21:fb:d0:4c:d1:34:ba:aa:16:e3:7b:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:9E:B5:D6:67:73:38:2E:7D:30:5D:FB:F8:88:55:22:D3:3A:82
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e1:e6:bd:1f:f1:a2:27:e9:66:39:26:05:df:31:3f:34:88:
87:09:39:6f:e2:b8:7d:28:64:44:7e:31:56:22:34:28:e3:90:
5e:ae:ad:e7:5e:3d:48:a0:c0:fe:21:37:9e:1f:f8:cf:8c:63:
3f:c2:69:f5:70:32:c5:da:5e:34:d4:a8:49:fd:6b:7c:8f:ea:
00:00:97:a5:ca:3d:29:23:fd:95:51:ea:e9:5e:96:95:17:98:
ba:7d:97:45:68:4d:45:6d:6c:19:17:54:b6:99:bc:03:20:d3:
10:d7:e1:9d:25:f5:71:d4:e3:b9:c7:25:7f:c8:6d:3c:f2:f6:
cf:88:17:f1:6b:8c:59:27:ef:2c:33:92:6f:08:10:ef:13:31:
1c:20:b1:7d:ef:89:8b:26:34:0a:c8:02:cb:d6:10:f4:ec:0b:
8f:b5:d7:4b:ae:f0:70:c8:ad:93:4c:06:aa:e3:d7:bb:df:c1:
40:37:35:b7:08:95:5e:b8:07:ab:02:a3:12:94:6b:aa:43:69:
38:3c:24:a6:6c:95:77:11:3b:38:b6:10:22:3f:c0:1a:1f:ee:
0a:cd:56:f6:8f:9b:72:3e:5d:0c:6f:d2:05:44:8a:96:5b:8b:
39:68:3a:a3:f8:a1:7d:ad:a5:04:94:b4:be:66:ad:5c:d5:4c:
af:73:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:57 2026 by rpki-client