Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: TbCVjK3gLmD9pMwujTvvgWIDX1Hpx+Z6d06pTqupYvA=
Subject key identifier: D6:9C:DB:07:19:86:F2:B5:20:E4:DA:C1:6B:73:25:D7:77:7B:3C:DC
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019DA3E5FBA5E3F987B5849CA92C989DC7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0FBD
Signing time: Sun 19 Apr 2026 04:00:51 +0000
Manifest this update: Sun 19 Apr 2026 04:00:51 +0000
Manifest next update: Mon 20 Apr 2026 04:00:51 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: iA1Am5jVBdYlNcHiDGSp6jR3q/yun7F1xFQH6EdZdlQ=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:fb:a5:e3:f9:87:b5:84:9c:a9:2c:98:9d:c7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Apr 19 04:00:51 2026 GMT
Not After : Apr 20 04:00:51 2026 GMT
Subject: CN=d69cdb071986f2b520e4dac16b7325d7777b3cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:06:87:d8:2c:0c:ff:b1:41:fe:5f:bd:80:
87:f6:a9:b7:37:70:3c:65:01:f1:4d:4f:c8:fc:d9:
b7:8d:86:47:b2:f4:00:7f:13:9b:c6:6c:ff:79:ef:
f2:1a:60:11:99:49:bd:de:a7:b7:3e:08:ab:82:bc:
1a:7b:87:8c:e1:de:45:2d:81:b5:a3:46:9b:90:33:
49:68:e8:12:c7:e7:6e:2b:e7:e4:17:2b:a0:b7:f1:
01:05:de:04:1d:b9:f0:0e:8a:38:2e:10:e2:13:6d:
a6:5b:36:a2:24:d0:99:71:90:98:2a:52:38:2b:22:
a7:85:03:7b:7a:58:e0:41:1a:41:70:4a:16:4d:e9:
3b:5d:f2:b3:96:2c:98:36:b4:33:7a:ed:86:b5:ca:
81:1b:26:f1:43:00:27:9c:a8:a9:d6:27:29:5c:77:
73:3f:8c:94:d5:f8:c8:9f:9f:48:47:d4:12:fb:54:
f7:7f:73:50:3c:02:88:db:ab:15:77:26:76:b5:d3:
13:ce:05:48:b7:75:38:27:ff:63:03:66:c6:2b:6c:
1f:a7:15:bd:42:1f:c4:e9:fd:0f:fe:d2:cb:1b:fa:
a6:f1:84:fb:9e:19:89:cb:91:a0:e4:2b:5a:25:3d:
58:4a:d2:3f:5e:bf:1d:02:f2:33:c6:b1:d4:3b:fe:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9C:DB:07:19:86:F2:B5:20:E4:DA:C1:6B:73:25:D7:77:7B:3C:DC
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:c9:48:8f:7c:85:2e:4c:e7:61:fd:fa:44:ab:02:18:40:
72:4c:9f:87:c0:ec:af:d2:cb:e0:ab:72:40:3a:07:c3:af:c8:
e2:75:ae:4a:00:87:da:14:2e:94:26:83:73:cb:01:d7:2e:ca:
e8:7d:de:14:18:ab:df:c6:65:da:20:0d:b2:bf:74:e7:20:28:
6a:f8:2c:76:42:af:b0:43:52:75:5d:9d:9c:6e:3c:3a:f8:6b:
87:75:9e:22:e2:3c:55:44:29:71:e8:57:54:8b:fa:65:58:95:
09:22:d2:cd:cd:97:0b:cf:2d:fd:fc:81:a4:e0:8d:fe:45:28:
cd:b7:b3:aa:e5:ca:28:13:3a:fc:6b:c1:f4:5a:7b:df:ce:51:
b2:0a:07:14:66:ed:f6:7f:2d:17:d2:88:97:9f:1d:21:9d:56:
a6:11:13:0f:ab:05:63:f7:d0:d9:05:9b:2d:02:a9:87:a6:92:
73:62:39:38:62:22:de:28:2a:b3:d6:3e:31:4b:ca:ec:83:1c:
30:94:71:dc:a2:29:88:d1:97:fc:94:79:37:aa:19:e3:a4:09:
27:f3:e1:0d:48:b1:9d:eb:0b:b3:a4:a1:a9:62:ba:76:f8:42:
2b:23:e1:54:8b:51:5f:ba:46:e0:59:82:bb:58:a7:1c:5b:5c:
68:f4:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:52 2026 by rpki-client