Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: 4P8LqpAWDc9vNMdIuoXl3/uaFTO3zonlUtYZ5QCMq1A=
Subject key identifier: EF:FB:26:D0:C5:EA:72:31:21:A2:42:43:F7:2E:FC:AB:0D:44:E2:27
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019CAAC708EBA92C71B73C410E46BC92EBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0F3C
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: 4hHPlWuCKpnVkLRS2egtRZ7xb5kPoyDcKZXa2XJpzRM=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:08:eb:a9:2c:71:b7:3c:41:0e:46:bc:92:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=effb26d0c5ea723121a24243f72efcab0d44e227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:ab:de:85:86:c9:3c:88:2b:6a:88:71:a2:
75:b3:6a:bb:8a:b1:88:26:93:62:a3:a5:70:37:c5:
9e:d1:f9:d7:98:a3:5b:dd:d2:8c:90:15:e3:ab:77:
64:b0:c6:55:72:92:10:a9:a5:61:12:6d:40:04:ae:
8f:15:21:81:b3:ad:41:64:2c:a8:60:1f:00:7c:e9:
c0:c1:85:99:68:37:b6:0b:a9:21:b2:14:20:2a:b2:
ec:3f:c5:5e:f2:8e:78:1e:bc:63:f1:cb:98:09:86:
83:29:57:4e:a8:f3:96:70:42:e7:84:80:c7:d7:86:
3a:f1:6c:bc:24:20:b3:70:c1:9e:bf:90:eb:af:ee:
27:21:c3:0e:58:18:c3:6c:7a:f3:cf:2c:81:9e:63:
d9:3a:4a:0e:88:44:68:7e:67:13:4c:b5:2b:4f:9b:
ea:0c:eb:38:50:b1:de:3d:6f:0e:30:b8:74:ef:ac:
f3:0f:45:c8:9e:dd:34:b0:48:1c:12:12:b6:9d:54:
d0:3a:ee:75:4c:3d:aa:93:c9:9a:e1:16:38:6f:3d:
7d:a6:04:87:d1:34:74:1e:04:3c:0e:86:ef:d8:ef:
b6:dd:ee:16:9b:e8:5e:bf:ad:f1:3a:1a:44:30:99:
ff:50:0f:35:ba:53:e5:4d:c2:7e:3a:50:cb:09:1e:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:26:D0:C5:EA:72:31:21:A2:42:43:F7:2E:FC:AB:0D:44:E2:27
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:95:61:83:db:f0:9f:10:0a:d3:ad:fb:d4:8a:6b:7e:66:
f3:8d:10:58:8a:f1:46:4f:64:d3:bf:7a:b8:0f:b2:f6:eb:2f:
0e:e6:a4:96:86:2f:bd:93:22:e0:11:1a:75:b0:59:3f:b3:68:
2e:4f:2e:1e:d1:f5:0b:33:d4:60:6b:1b:c7:a0:3e:23:13:92:
58:e8:a2:fa:48:05:90:1d:0a:e2:27:2a:17:23:6f:c2:4d:82:
18:9b:7f:40:b7:49:8f:8d:73:ad:b1:2b:e5:5a:35:71:e8:fc:
38:ed:89:f5:2c:db:63:20:f2:11:77:48:1d:2c:93:ad:cd:42:
3c:ae:64:f7:54:a9:83:1e:00:27:46:d2:03:b7:c4:ea:f8:9e:
70:67:e2:fb:9b:2e:69:74:2b:81:6b:ed:14:e5:19:d9:75:fe:
46:17:b6:f2:90:99:0e:18:6c:3d:52:90:d8:dc:fa:ae:1c:a0:
c9:69:7e:13:fa:5f:a5:af:17:88:7e:01:39:df:ed:1b:f1:c4:
32:78:09:14:64:b0:ae:33:02:50:dd:7b:06:52:42:24:26:42:
cd:1b:7b:fc:48:c9:0d:fa:5a:7d:1d:b6:62:3c:85:74:db:20:
29:9f:cf:16:d7:dc:2a:e4:2c:9f:18:30:e7:3d:50:a4:20:ff:
23:ab:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:26 2026 by rpki-client