Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File: LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier: KaJnzFAbiT+ioARldDttQgFqxV11P2UQ2i3xRbTFvv8=
Subject key identifier: C0:49:93:80:1B:6B:8B:51:E7:D0:93:46:2A:C7:6F:D4:01:C5:C9:B1
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer: /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial: 019ED2741C5C3EA70BE3C491468BA3B72E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number: CC
Signing time: Tue 16 Jun 2026 22:01:25 +0000
Manifest this update: Tue 16 Jun 2026 22:01:25 +0000
Manifest next update: Wed 17 Jun 2026 22:01:25 +0000
Files and hashes: 1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: 6ALDwK+ckyjYS970BCB1MN9qzka2bY9SxcxXuaNBiJo=)
3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:74:1c:5c:3e:a7:0b:e3:c4:91:46:8b:a3:b7:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Validity
Not Before: Jun 16 22:01:25 2026 GMT
Not After : Jun 17 22:01:25 2026 GMT
Subject: CN=c04993801b6b8b51e7d093462ac76fd401c5c9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:76:3e:c3:b7:84:1b:53:95:0a:d7:30:0e:
5c:2f:6c:85:63:ac:69:b9:70:69:4d:2e:c1:f0:cc:
46:75:27:72:24:16:73:56:72:17:b7:8f:f6:55:43:
d2:7e:7b:2a:e1:36:51:15:48:47:fc:4e:5d:72:04:
8e:53:d3:00:85:49:06:25:70:bd:c3:4d:40:c8:4e:
e7:44:92:59:c6:d7:ff:0e:02:e9:bb:4c:87:fd:6e:
ca:8c:25:d7:d4:7a:77:5b:53:14:9a:c7:fb:2e:71:
3e:be:09:14:db:91:1a:e1:18:19:c9:27:66:40:c6:
6c:15:e7:c8:a2:c2:12:9d:99:61:c2:06:16:9b:3d:
7f:fd:38:b3:ca:60:97:84:a6:09:b4:59:f8:c2:06:
84:2f:60:6d:97:28:88:6c:54:3d:c2:36:4e:aa:ac:
2a:1a:96:2a:78:5d:bf:73:93:d7:71:8d:29:78:ca:
7b:4f:7a:0c:dd:b4:99:c7:22:86:9b:eb:07:4b:d4:
7b:74:85:d2:5a:02:f2:f6:d8:17:0b:5a:d4:bd:a9:
df:00:26:a2:df:6a:a1:bd:f9:52:83:82:da:10:9a:
24:44:87:e4:a6:cd:74:fa:84:30:34:14:a6:64:20:
cb:1c:5f:f9:51:61:a8:83:a7:f5:3c:e8:91:60:17:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:93:80:1B:6B:8B:51:E7:D0:93:46:2A:C7:6F:D4:01:C5:C9:B1
X509v3 Authority Key Identifier:
keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:ee:5f:6f:35:ce:ba:98:13:3b:6f:b7:3b:02:ef:92:4e:
9c:e5:82:35:bc:21:ce:22:f3:3b:c7:f1:35:f6:61:a3:00:7d:
87:f6:4c:01:4d:e6:62:23:53:ea:04:db:d8:bf:bb:d4:a3:24:
99:2f:44:d8:f2:fd:c3:91:2e:11:b4:7b:52:13:fb:6e:e0:d9:
e5:91:5c:d6:ef:05:b7:d5:bc:71:50:18:65:49:2d:c7:db:bf:
9d:ce:df:a2:d3:c5:6a:66:da:f1:6a:3d:fe:22:4e:f2:32:dd:
b5:e3:97:ab:e7:e5:a9:a4:b2:9a:43:50:2c:54:0b:42:8a:69:
48:18:1f:4a:87:0c:1a:f4:cc:cf:72:6b:22:b9:04:83:3d:26:
ba:96:45:90:3b:7f:98:63:04:42:5b:8b:71:5f:f4:fd:34:30:
e1:1e:69:8a:fe:f6:5d:78:6d:53:ea:a2:e1:3e:0d:b1:8e:88:
3c:d4:bd:ed:17:01:5e:ee:52:10:8d:9d:a6:77:9c:cc:21:73:
42:a0:3a:65:af:de:37:6e:03:74:e1:ea:f9:e7:46:e6:7c:98:
1b:88:cb:27:e0:57:2b:bb:5e:83:f4:eb:ac:64:bc:98:aa:85:
83:cc:57:30:d9:d2:d0:49:9f:18:58:1e:76:39:97:ce:57:d6:
dc:6b:ff:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7SdBxcPqcL48SRRoujty4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBiNmE4ZmFhMTdhZTUzMThiNTcyNjVmODZlYTU1Y2Ex
ZjRiMDIwHhcNMjYwNjE2MjIwMTI1WhcNMjYwNjE3MjIwMTI1WjAzMTEwLwYDVQQD
EyhjMDQ5OTM4MDFiNmI4YjUxZTdkMDkzNDYyYWM3NmZkNDAxYzVjOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8F2PsO3hBtTlQrXMA5cL2yFY6xp
uXBpTS7B8MxGdSdyJBZzVnIXt4/2VUPSfnsq4TZRFUhH/E5dcgSOU9MAhUkGJXC9
w01AyE7nRJJZxtf/DgLpu0yH/W7KjCXX1Hp3W1MUmsf7LnE+vgkU25Ea4RgZySdm
QMZsFefIosISnZlhwgYWmz1//TizymCXhKYJtFn4wgaEL2BtlyiIbFQ9wjZOqqwq
GpYqeF2/c5PXcY0peMp7T3oM3bSZxyKGm+sHS9R7dIXSWgLy9tgXC1rUvanfACai
32qhvflSg4LaEJokRIfkps10+oQwNBSmZCDLHF/5UWGog6f1POiRYBfMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBJk4Aba4tR59CTRirHb9QBxcmxMB8GA1UdIwQY
MBaAFCxAtqj6oXrlMYtXJl+G6lXKH0sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVDMnFQcWhldVV4aTFjbVg0YnFWY29mU3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZDBkNzQtNzI2YS00ZTZkLWIwNmMt
Yzg2YThmZjhkMmViLzEvTEVDMnFQcWhldVV4aTFjbVg0YnFWY29mU3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZDBkNzQtNzI2YS00ZTZkLWIwNmMtYzg2YThmZjhkMmVi
LzEvTEVDMnFQcWhldVV4aTFjbVg0YnFWY29mU3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2zuX281
zrqYEztvtzsC75JOnOWCNbwhziLzO8fxNfZhowB9h/ZMAU3mYiNT6gTb2L+71KMk
mS9E2PL9w5EuEbR7UhP7buDZ5ZFc1u8Ft9W8cVAYZUktx9u/nc7fotPFamba8Wo9
/iJO8jLdteOXq+flqaSymkNQLFQLQoppSBgfSocMGvTMz3JrIrkEgz0mupZFkDt/
mGMEQluLcV/0/TQw4R5piv72XXhtU+qi4T4NsY6IPNS97RcBXu5SEI2dpneczCFz
QqA6Za/eN24DdOHq+edG5nyYG4jLJ+BXK7teg/TrrGS8mKqFg8xXMNnS0EmfGFge
djmXzlfW3Gv/8Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:59:47 2026 by rpki-client