Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: 4etQ5XlRYrjzJ//IAhRJlP7p9bv0g/Ssa0GLRZHG3tw=
Subject key identifier: BC:E7:8C:9F:2D:28:9A:EC:2D:69:F0:2E:84:83:D9:C9:18:3A:8E:84
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 019CABD9018B17156E697F6FD23072D14C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 0C9A
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: 4j2l0R0oiX3sFLga6aYE81cIPxI.roa (hash: RzXR10l18GypZ8d4diV18s33YCTUu7qf7Qk1hWsnKR4=)
2: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: zTNDrkY24IpZ0jdWT4sOG3Ed3EAqxdLlUMIsj1GUmvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:01:8b:17:15:6e:69:7f:6f:d2:30:72:d1:4c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=bce78c9f2d289aec2d69f02e8483d9c9183a8e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:f7:43:2b:f1:02:c3:f8:fd:10:66:14:f6:
4c:ad:1e:a0:60:ae:b8:41:57:a7:c9:19:13:83:c3:
3f:c9:72:46:73:aa:fc:4e:4b:60:e5:fc:48:bb:6c:
14:60:ce:83:aa:ed:21:c3:5e:4c:02:a5:0d:fd:73:
d2:60:91:e5:33:87:fc:dd:ed:e7:b2:7f:4e:f3:c2:
56:52:09:4f:c6:e2:07:4e:2c:d6:4f:04:6d:96:fa:
dc:cd:5e:db:89:2e:7f:08:b8:d0:26:35:a5:ab:cf:
e5:3c:a9:ea:32:d7:0f:ab:fa:cf:e9:a1:92:21:a3:
68:75:14:13:f5:fa:7e:c6:59:75:13:2c:7a:e0:dc:
e6:fc:60:ca:c5:8b:09:77:6d:b1:ab:78:1d:0d:70:
93:76:5c:ca:79:55:b8:2f:10:9b:c0:9a:16:fa:f1:
54:df:27:68:55:e2:f9:bc:da:bb:0b:12:a0:22:4b:
3b:47:ba:b5:33:3a:19:f7:c7:04:5e:f3:00:23:5b:
e3:c7:58:0b:db:c6:24:c5:3d:44:47:b1:7d:73:9b:
a7:17:3a:5e:e6:6d:8c:50:7e:c6:95:d3:be:18:99:
ea:75:c5:c5:9b:f6:db:14:d9:16:2f:f8:59:fa:1f:
27:00:7d:eb:15:e5:6a:77:d0:99:04:98:9a:f7:8b:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:8C:9F:2D:28:9A:EC:2D:69:F0:2E:84:83:D9:C9:18:3A:8E:84
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:85:ed:18:ce:ad:06:c4:82:ce:4a:9d:0c:0d:4e:75:f1:
72:29:97:c3:4b:8f:a2:42:05:3f:45:63:59:91:42:a8:64:3c:
02:5c:f2:67:b9:ec:28:e2:e5:66:d1:83:a0:54:5b:db:6e:5f:
11:8d:9a:e9:f4:95:21:5e:5e:f7:e2:68:98:5a:f8:bc:b1:91:
5d:2c:d0:a5:9a:24:ec:8a:75:dc:61:05:a0:84:51:ef:0e:8b:
0e:78:ef:5c:f1:9c:d3:f7:b9:1a:4f:14:d2:08:41:55:1c:70:
bf:a3:80:7e:ab:1a:69:fa:3a:dd:cd:f6:7f:9d:12:bd:a1:2e:
70:f3:b4:53:5b:f0:55:18:2f:a9:47:17:a3:9c:40:63:c9:8e:
fb:46:d0:81:cd:bf:39:a2:8d:59:ac:89:0b:2e:6f:48:2d:be:
e6:f9:b8:99:f1:f4:6e:a0:16:5c:18:fb:40:3f:61:b2:d7:b7:
9d:52:35:9b:c6:7c:52:5d:fd:1b:85:3d:2a:b9:00:1d:e1:68:
26:39:69:26:86:bf:56:71:44:b3:96:03:18:61:5f:36:96:b6:
cd:d3:b7:52:2c:be:a6:91:d6:99:e5:a2:30:ef:6c:a8:21:e9:
6c:f0:b6:66:58:4e:39:6a:0b:f5:00:6b:49:08:95:5e:0c:07:
36:06:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:30 2026 by rpki-client