Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: cfpg/CAFyALebI57wpIOUktTPNtlEOO5J4LasneFZcc=
Subject key identifier: 38:C8:86:A2:BA:16:4B:7A:2A:D8:E9:79:10:59:AC:D7:E9:D8:5C:51
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019EC601577D52F75041CDED41B132B3B79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 195C
Signing time: Sun 14 Jun 2026 12:00:37 +0000
Manifest this update: Sun 14 Jun 2026 12:00:37 +0000
Manifest next update: Mon 15 Jun 2026 12:00:37 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: 8eSkDB1qH7FDy/+sG7uA+MVmsbd5SQx9KkHYo3hWhqk=)
2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:01:57:7d:52:f7:50:41:cd:ed:41:b1:32:b3:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Jun 14 12:00:37 2026 GMT
Not After : Jun 15 12:00:37 2026 GMT
Subject: CN=38c886a2ba164b7a2ad8e9791059acd7e9d85c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:0b:4b:1c:cd:4a:2f:47:78:36:66:c3:cd:
a5:78:3d:bc:c2:5f:d3:73:28:a8:0e:ad:51:29:18:
65:4d:55:fe:09:d5:25:ff:09:0b:03:fe:d6:77:a9:
55:14:97:c1:48:ea:8e:f8:c6:e9:16:9c:24:da:f5:
70:fe:19:5e:1a:bb:4d:2f:9e:24:8a:9e:fc:7c:73:
f1:f5:17:02:21:73:b1:12:59:14:7b:20:62:ee:c2:
76:ef:de:3e:75:a2:70:20:05:89:6e:cb:bc:93:7f:
2d:d3:19:d1:73:d0:0f:78:91:00:b2:3c:58:09:4a:
58:33:58:58:3b:e1:bd:8e:e6:d3:85:f7:cf:d8:35:
91:6a:ee:e4:e3:bf:8b:97:7d:f0:85:f8:bf:26:b2:
e0:21:41:50:4b:73:9f:f7:69:74:11:e9:3d:31:7f:
d7:cb:60:df:52:3e:dd:f5:c1:3f:98:c9:af:fc:8f:
1b:3c:03:ca:3f:bf:f1:48:24:55:88:3c:a7:50:ca:
0b:38:73:d6:ae:91:8d:16:5e:b9:a4:28:13:55:f4:
73:2c:23:a9:27:ce:89:84:92:cd:8a:7f:1a:74:43:
db:73:30:44:73:e8:8b:b4:21:79:b4:40:55:bf:86:
fd:db:2f:dd:a7:0c:a6:84:16:c0:20:12:49:f3:24:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:86:A2:BA:16:4B:7A:2A:D8:E9:79:10:59:AC:D7:E9:D8:5C:51
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:d4:16:45:3f:11:71:08:c5:eb:42:41:4c:4f:82:88:5d:
2d:46:ed:52:1d:01:47:01:66:fe:c2:58:7a:59:0f:d5:14:4f:
28:d0:b3:f1:c5:3f:7d:4f:9c:e7:c4:04:3c:50:9d:b4:a3:07:
f7:9a:d1:06:e7:23:d8:a1:9f:9f:73:74:05:a5:35:ca:8e:9b:
73:74:ff:e7:b7:07:28:7b:00:98:9f:15:3f:9d:06:b8:0c:ad:
65:66:86:fa:91:0e:1f:87:cb:ed:91:ef:dc:98:f9:47:b3:76:
d7:ae:c6:8a:dd:00:81:0e:2a:0b:3d:7b:61:2d:86:50:4d:44:
3e:01:ca:20:2d:8e:e7:99:82:ee:91:85:16:8a:fb:f5:6e:89:
8e:8b:d8:6d:89:18:f1:f9:41:a6:05:b5:3b:d7:6e:cc:62:a9:
c8:01:7d:8a:ec:12:83:18:8f:1d:dc:55:72:c2:cf:63:ec:4a:
a0:17:c6:67:05:be:bf:6e:19:cc:35:22:f3:fe:60:cc:83:86:
49:0c:8b:b4:f4:69:f7:38:3b:c1:bb:01:18:dc:87:00:53:88:
9d:33:fd:9a:9f:80:a6:e4:38:1e:07:00:5c:1c:68:d3:c0:7b:
36:3a:d1:3a:41:75:09:ae:b2:c7:89:49:ad:da:24:c6:d0:27:
83:8a:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 14:04:16 2026 by rpki-client