Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: tI9QwPpNtaF9ELFyPAkJat6BoxUXkePDL44PWpKaA88=
Subject key identifier: E1:EE:29:19:C6:04:72:55:06:03:C1:05:C3:C9:9F:C7:6C:84:C3:71
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 019D38664E0726F36BC3678572B1E2A23170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: WvaE/PE4M1zxPI+woSTZjOjub6SuuDAooacXBLYDH5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4e:07:26:f3:6b:c3:67:85:72:b1:e2:a2:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=e1ee2919c60472550603c105c3c99fc76c84c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:f0:c0:58:75:a9:c4:1e:96:d7:5f:5a:db:
7b:93:2b:7e:f4:c3:9d:3b:28:35:c4:9a:17:93:20:
02:2e:c2:97:67:be:06:de:a5:75:fd:7b:91:37:14:
58:ea:72:86:8e:d1:f8:21:7a:6c:6b:5e:f1:63:5b:
90:8e:26:0b:eb:a3:76:f9:a5:f1:e8:49:eb:86:56:
69:90:4b:31:b5:fd:74:96:f7:13:28:12:dd:76:f1:
9f:dc:75:c0:b3:77:cd:0b:c4:19:9c:7d:d7:d2:33:
ed:a8:52:db:81:49:26:fd:3f:50:c3:fe:d0:44:af:
8c:b4:cd:3e:32:d1:bc:ea:d7:b2:f9:3b:2d:9b:bb:
6b:41:c0:18:b0:d8:a5:28:3e:2b:dc:d5:5b:2e:74:
35:6d:74:4d:97:f0:25:cc:b4:40:7f:28:ca:f2:9f:
bd:2c:d1:bc:76:db:f8:6b:c4:9c:7e:62:0f:bc:b1:
77:9e:5a:02:7d:1a:44:7f:0e:49:6d:2c:73:7b:e7:
32:0a:18:8e:c6:23:8c:8d:7d:60:a2:b5:45:73:80:
8d:0b:82:84:e1:0a:5f:a7:2f:cc:1d:a4:94:f9:3b:
d9:85:6f:6a:4f:e5:c6:af:69:83:1f:c0:eb:0d:8c:
53:ed:7d:e7:26:c5:5a:dd:de:c9:55:85:b0:d7:4a:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:29:19:C6:04:72:55:06:03:C1:05:C3:C9:9F:C7:6C:84:C3:71
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:b5:16:92:54:79:7a:b7:0e:e0:ea:1c:59:88:92:62:a4:
92:aa:ac:e0:6e:10:f4:28:55:74:68:29:f8:c2:e8:24:d9:82:
69:b0:6e:21:14:1e:83:15:6d:e7:b9:20:52:21:44:1e:5e:37:
ef:b2:29:90:0d:be:6d:36:9a:2f:7b:a2:a0:c6:29:5b:2d:68:
c0:28:46:0e:c5:7e:a9:e2:6e:57:37:5e:b7:29:85:99:92:13:
a4:dd:30:2d:aa:4f:35:54:8c:58:b0:47:77:6a:67:18:15:4f:
1d:2d:ae:ca:72:6b:7c:24:54:1f:ce:ed:4e:8e:f1:3d:cd:17:
14:c2:83:b2:a7:8a:0a:6a:43:c3:13:03:b9:cb:1b:8c:cc:61:
c1:b3:ec:2a:8d:0f:54:24:76:94:9b:75:2d:da:9c:f3:7d:af:
84:9d:66:23:5a:14:ed:54:b2:8f:d0:91:68:5b:ea:e1:49:6b:
bf:1a:46:91:c6:ae:df:7a:b0:9c:13:5d:e1:9e:11:65:31:3f:
c8:4d:1c:ea:b6:a6:f4:77:f9:7e:34:2d:78:5d:5a:08:14:77:
05:70:a1:80:2e:3a:d5:7c:0e:01:64:d1:40:35:df:43:da:4a:
b3:9d:3c:c5:7a:66:d7:0f:e7:d4:3e:20:0c:57:61:e5:45:28:
35:c0:eb:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zk4HJvNrw2eFcrHiojFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTM3OTEzNTJhYzgyYzlkMjA3NDM0MjRjZGM2MTcwMDk2
ZjRmYWYwHhcNMjYwMzI5MDcwMjAxWhcNMjYwMzMwMDcwMjAxWjAzMTEwLwYDVQQD
EyhlMWVlMjkxOWM2MDQ3MjU1MDYwM2MxMDVjM2M5OWZjNzZjODRjMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDDwwFh1qcQeltdfWtt7kyt+9MOd
Oyg1xJoXkyACLsKXZ74G3qV1/XuRNxRY6nKGjtH4IXpsa17xY1uQjiYL66N2+aXx
6EnrhlZpkEsxtf10lvcTKBLddvGf3HXAs3fNC8QZnH3X0jPtqFLbgUkm/T9Qw/7Q
RK+MtM0+MtG86tey+Tstm7trQcAYsNilKD4r3NVbLnQ1bXRNl/AlzLRAfyjK8p+9
LNG8dtv4a8ScfmIPvLF3nloCfRpEfw5JbSxze+cyChiOxiOMjX1gorVFc4CNC4KE
4Qpfpy/MHaSU+TvZhW9qT+XGr2mDH8DrDYxT7X3nJsVa3d7JVYWw10p/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHuKRnGBHJVBgPBBcPJn8dshMNxMB8GA1UdIwQY
MBaAFJXjeRNSrILJ0gdDQkzcYXAJb0+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xYTQ3MmYtYTEzNy00MmM5LWFjOWYt
NGMyYzBjOGYyNDYyLzEvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xYTQ3MmYtYTEzNy00MmM5LWFjOWYtNGMyYzBjOGYyNDYy
LzEvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj+1FpJU
eXq3DuDqHFmIkmKkkqqs4G4Q9ChVdGgp+MLoJNmCabBuIRQegxVt57kgUiFEHl43
77IpkA2+bTaaL3uioMYpWy1owChGDsV+qeJuVzdetymFmZITpN0wLapPNVSMWLBH
d2pnGBVPHS2uynJrfCRUH87tTo7xPc0XFMKDsqeKCmpDwxMDucsbjMxhwbPsKo0P
VCR2lJt1Ldqc832vhJ1mI1oU7VSyj9CRaFvq4UlrvxpGkcau33qwnBNd4Z4RZTE/
yE0c6ram9Hf5fjQteF1aCBR3BXChgC461XwOAWTRQDXfQ9pKs508xXpm1w/n1D4g
DFdh5UUoNcDrSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:59 2026 by rpki-client