Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: +YFhDrmPqXdA1u+jlrpAo1Y28n23MszInR/1/aLqsuE=
Subject key identifier: 04:38:CC:D1:0C:7D:F5:95:1C:3C:08:D8:F0:3F:D2:BB:18:16:87:EA
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019CAB34A05259E9F07906B9F69F3D70F85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:01:18 +0000
Manifest this update: Sun 01 Mar 2026 21:01:18 +0000
Manifest next update: Mon 02 Mar 2026 21:01:18 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: WRdkV8mM7R9RDGt+hZqp/xEkWXdaTXAoBTa23kbdMUA=)
2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a0:52:59:e9:f0:79:06:b9:f6:9f:3d:70:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Mar 1 21:01:18 2026 GMT
Not After : Mar 2 21:01:18 2026 GMT
Subject: CN=0438ccd10c7df5951c3c08d8f03fd2bb181687ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:9f:b9:d4:e5:c4:46:a3:00:36:e8:50:df:
66:cd:d6:ef:94:1d:5a:d2:19:d4:0e:54:22:1a:d2:
73:ab:79:64:1b:47:86:39:26:dc:32:7e:74:5e:0d:
b5:11:ed:96:e3:3d:99:8c:01:ce:49:51:3f:e8:ab:
b4:c9:28:77:82:e7:02:50:d3:5f:92:8e:29:a3:8e:
a8:6b:d2:0c:a4:c1:0c:dd:ee:39:35:25:3f:4f:fe:
05:72:73:a8:59:12:3e:af:4b:47:51:4b:ce:1c:6a:
c2:35:2b:fc:c5:9f:1f:67:e0:55:93:33:5c:d1:36:
b0:34:ef:b0:bd:7c:6d:ad:4e:ad:e5:8b:1e:6e:3a:
bc:e9:26:9a:da:79:8e:06:ad:7b:5c:7a:66:f3:a9:
22:be:6f:a1:9f:51:4d:bc:53:a7:9e:6e:f1:4c:e5:
c9:23:61:69:70:4f:6b:5d:cd:cd:c9:b0:7b:3c:92:
0d:60:dc:73:51:a4:50:d4:c8:b1:61:e2:3c:2d:d0:
7a:f1:bd:1e:ed:e4:6a:11:98:40:7e:47:29:f8:9b:
4a:c8:50:d8:b8:dd:b2:0e:04:aa:45:b4:b0:52:f3:
fb:cf:f2:45:af:4c:3f:08:92:71:ee:2a:db:f4:86:
da:0b:d4:e2:de:c6:2e:f4:54:6e:81:84:a9:f6:60:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:CC:D1:0C:7D:F5:95:1C:3C:08:D8:F0:3F:D2:BB:18:16:87:EA
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d9:3c:f6:ae:82:c4:b2:a6:6f:89:85:24:13:5f:25:a7:cd:
3a:74:84:1d:53:47:22:43:19:08:35:33:e3:20:7e:c8:a6:8a:
39:a6:cb:16:73:b0:b2:c3:41:dd:6b:5e:d4:e7:2d:46:65:4e:
68:cf:1b:7c:57:74:eb:be:42:19:50:84:e3:65:e0:97:2b:c2:
e3:aa:01:bd:b9:b9:fe:fd:94:f3:ac:dd:91:f4:70:bb:f6:70:
55:64:7b:d3:a7:19:ad:81:7c:45:4d:21:40:1d:fd:e8:73:8b:
54:b7:00:ad:26:16:f6:04:0a:c0:c2:a7:6a:21:d6:40:5b:70:
8f:49:0d:af:fc:2d:48:82:b7:db:49:90:0d:4b:f4:b7:c1:24:
d3:1b:bc:55:98:7c:53:44:8d:e8:c6:62:ea:50:7a:4c:97:96:
76:e0:46:f6:83:1b:84:bf:91:cd:b3:02:af:74:fe:26:1c:b3:
98:12:4d:40:96:97:b4:cd:5d:b0:69:71:7d:4b:71:34:33:c6:
98:5b:23:aa:c3:78:ce:3e:00:dc:ce:97:22:9f:f4:2d:9d:61:
2b:8e:6a:89:b3:ef:e1:a5:10:2a:93:e4:75:c0:da:0a:2e:69:
e8:fa:f8:bb:a7:c2:2d:e8:0b:5d:7e:52:6e:cf:61:fc:f3:58:
07:62:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:31 2026 by rpki-client