Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: vTaKyPJi9z5OSpg/CJnGTnDltUSK4gmWcNGKkazFoEo=
Subject key identifier: BD:EA:22:5C:7F:E0:5D:9B:BD:2D:00:F4:71:A0:FC:97:A3:D1:C0:31
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 01A1355A609E345671EC33BC01E8A3A2B214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 1196
Signing time: Tue 13 Oct 2026 13:01:17 +0000
Manifest this update: Tue 13 Oct 2026 13:01:17 +0000
Manifest next update: Wed 14 Oct 2026 13:01:17 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: yrk9SXrUh4l7Dj1and1dPHlTdcRrUHbmyM48a4CThHo=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:60:9e:34:56:71:ec:33:bc:01:e8:a3:a2:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Oct 13 13:01:17 2026 GMT
Not After : Oct 14 13:01:17 2026 GMT
Subject: CN=bdea225c7fe05d9bbd2d00f471a0fc97a3d1c031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:b4:67:12:d2:28:1f:a6:ff:5f:2d:3f:4f:
3f:ad:02:e1:4d:f3:14:7a:b1:50:36:24:e3:d2:4d:
08:9c:49:7b:b2:71:29:b0:2f:61:a0:36:e1:b0:d7:
c2:72:56:f2:5d:e6:ec:03:88:68:cc:59:53:d8:5d:
f5:88:f2:2f:e2:81:48:4b:93:13:5e:cf:5c:1f:f0:
2e:1e:82:84:44:fe:45:a7:d6:5c:51:a8:01:e8:ad:
b3:75:7b:c3:f3:a8:94:d6:b7:db:b5:d3:18:4f:2e:
cf:85:7a:57:75:61:cd:91:c1:b9:6b:56:59:63:d3:
41:32:32:60:f3:4e:cc:30:85:e4:2c:f2:2a:22:c8:
e3:c5:26:7a:4d:9a:2e:55:c4:35:ac:47:ff:6e:d6:
dc:a0:f3:5c:c9:c2:42:72:e7:c6:cf:8b:6d:9c:2f:
3f:1e:7e:c1:75:93:d5:02:0a:bb:8c:ff:ca:91:2b:
de:d2:ae:93:e3:fb:d6:c3:fc:de:a1:15:05:ff:a8:
e2:be:2f:c2:9f:59:6b:3d:20:38:ed:14:a2:6c:8e:
9d:97:3a:27:2e:49:25:1e:b9:e2:81:9d:7f:d7:bf:
ed:38:dc:6b:8f:87:99:da:1a:c1:74:3b:c2:a6:f0:
0d:7f:d0:11:61:47:43:57:4d:44:ac:a8:eb:55:6a:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:22:5C:7F:E0:5D:9B:BD:2D:00:F4:71:A0:FC:97:A3:D1:C0:31
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f9:cc:5a:e6:4c:ee:3e:9a:dd:e9:89:2f:90:52:3d:12:1b:
ba:72:13:44:53:b0:e5:ae:f1:52:5f:06:74:8a:f5:90:06:39:
db:15:7c:67:b9:b8:8a:a3:7b:ef:23:08:fe:51:0b:46:45:2d:
63:4d:e7:f5:ea:51:ea:15:be:6e:26:49:87:f4:8a:1e:64:cb:
8c:54:e6:ee:2e:b2:fa:7d:83:6f:ad:cd:c9:0c:d3:f4:27:11:
d6:2e:68:69:42:17:5d:15:9a:4c:81:a1:c7:b5:d4:6a:9d:24:
b2:ca:af:9e:af:0d:78:54:c7:52:42:bf:74:ed:68:e2:85:04:
61:e3:2c:64:94:07:57:48:d1:2e:8b:f9:23:6c:fd:7a:88:a0:
1f:41:3a:ce:70:e0:cf:b5:68:bc:34:dc:d9:a2:6a:b7:bd:01:
cb:02:18:a9:f4:9e:b3:e2:ad:20:77:31:a7:21:44:e8:00:fe:
2c:31:3e:52:b1:78:ad:5b:f4:2d:97:d6:24:61:da:b0:c3:22:
e4:cb:fc:48:0b:74:21:84:7e:f8:71:7d:ee:ef:d7:9b:e7:f5:
d7:9c:fd:a4:69:7e:22:d9:e2:d6:e0:18:d6:e5:0b:a5:ca:1a:
02:00:71:35:1d:35:8a:e8:10:5e:4a:18:b6:e1:22:76:c2:a5:
02:10:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:50:09 2026 by rpki-client