Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File: LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier: nkvwkC9n844JTPCFrXfhq/KdDZEOFZXd5F7MocYHFXg=
Subject key identifier: A1:14:82:CF:A2:F8:5A:66:B7:DB:38:27:CE:AA:17:EC:3E:11:B9:96
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer: /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial: 019D9D75B632643074CC18552E88A71A07D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number: 2C
Signing time: Fri 17 Apr 2026 22:00:30 +0000
Manifest this update: Fri 17 Apr 2026 22:00:30 +0000
Manifest next update: Sat 18 Apr 2026 22:00:30 +0000
Files and hashes: 1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: g8zWF+DeU26KlVY+rvKi7NMrownKIF+L5wlEjaKt6ao=)
3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:b6:32:64:30:74:cc:18:55:2e:88:a7:1a:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Validity
Not Before: Apr 17 22:00:30 2026 GMT
Not After : Apr 18 22:00:30 2026 GMT
Subject: CN=a11482cfa2f85a66b7db3827ceaa17ec3e11b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:83:0f:34:51:31:fb:2e:3c:27:56:db:fa:
ea:1c:31:ed:63:1a:e3:db:2d:cc:75:52:4d:ab:88:
15:12:07:fb:8b:9c:c3:ff:4b:17:de:a4:d2:22:e7:
62:8b:20:34:b5:e8:82:ca:86:d2:8b:22:59:ee:07:
d9:c3:09:f7:e6:26:4e:ed:79:9b:d1:aa:6e:34:ba:
1f:82:db:43:9c:59:e5:e2:88:24:82:02:a3:7f:61:
eb:42:0d:8f:c1:7b:c5:ea:e9:9b:e7:12:cd:37:05:
7e:0b:68:53:b7:fe:dc:d2:ab:e6:74:99:6f:48:12:
51:8d:53:56:39:e5:15:c2:1a:dc:5e:4c:0d:df:3c:
ea:79:c2:8a:2b:fb:d7:d4:72:ae:d5:f3:bb:da:76:
9f:11:78:b0:11:b7:79:c2:50:e4:3c:22:b3:46:9f:
63:0c:50:5e:e1:9c:04:8f:89:98:ab:00:7e:97:07:
d3:63:72:1e:e5:4b:75:c6:b7:78:c6:c8:a1:e2:e4:
8d:af:ac:45:e3:1f:67:dd:d4:46:29:da:34:29:bf:
7f:e7:64:36:81:d6:88:a6:dd:50:5f:f9:6d:5e:28:
c9:01:de:8d:dc:07:78:56:e9:d5:8e:4a:b6:8b:f0:
ec:33:b5:82:c9:2f:1c:17:22:43:82:ef:d3:1d:aa:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:82:CF:A2:F8:5A:66:B7:DB:38:27:CE:AA:17:EC:3E:11:B9:96
X509v3 Authority Key Identifier:
keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2c:53:1a:e4:a3:56:8b:d4:71:b9:41:05:59:79:3d:27:0a:
2e:b8:9c:cc:ac:77:1a:47:27:6c:73:22:4f:63:dd:b2:d6:7a:
46:df:89:c6:bc:b2:75:6d:b6:96:73:e0:ff:06:ba:b7:1f:1d:
98:0b:ff:7e:47:03:d7:dc:91:00:be:3a:1c:c3:b7:5e:4d:1d:
87:b9:bc:9f:ba:2b:01:d7:5c:ad:68:91:74:1c:0f:8c:42:64:
13:7d:c6:11:00:c6:61:a8:83:47:2a:d1:67:43:dd:51:3d:1e:
17:90:8c:15:f2:cd:e6:ae:8b:6a:5a:85:3e:7f:d4:89:cd:c8:
1f:4b:90:bb:8c:15:7a:4f:aa:fc:56:e4:3c:02:4d:fd:9c:f2:
07:60:d3:20:34:bb:c3:73:a0:2d:34:f4:ef:51:59:f0:b4:71:
87:f9:ed:b5:c5:09:ff:9b:08:bf:ff:61:9e:a8:cc:a8:b7:71:
8d:3f:0f:e3:4f:5e:8b:77:3b:ab:c0:27:ab:c6:95:c0:f5:95:
da:95:d3:d4:89:a8:16:e3:37:23:2c:4f:3d:35:a6:26:1e:a8:
e1:66:d7:b0:14:cf:fa:e6:4f:c7:b4:6b:ac:95:0d:53:a2:72:
44:8c:82:f4:ec:76:ef:e0:1d:f2:a1:96:ea:5a:43:13:75:2f:
ea:76:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:06 2026 by rpki-client