Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
File: leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json)
Hash identifier: HC7IzRni3rCGo075S/ssEMoBmX4eGUBMpf7Vvs3Sh8s=
Subject key identifier: 5D:CA:A0:EC:E8:BE:37:0D:A4:3C:EA:8A:33:AF:B2:EF:5F:F8:11:01
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial: 019D37C095D73CAF29853C9683F5AB260F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
Manifest number: 0385
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: _nwT7ESfHVfxuJ5xuyAyCnmBj3E.roa (hash: 0sqZhNRQl0O1OrhKsd69Nxx6CI7ZCmRXpC58u8z0xWk=)
2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: 7EFMOrdMx1BPiMKNDYKnaAAaRHRn3rRip+6vlJacXyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:95:d7:3c:af:29:85:3c:96:83:f5:ab:26:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=5dcaa0ece8be370da43cea8a33afb2ef5ff81101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8f:e6:3b:57:19:22:89:de:6c:c9:e9:3b:77:
51:a1:e3:48:94:e5:d8:34:7d:d2:b9:34:40:39:ad:
74:dc:ba:b0:f7:6f:87:08:c2:cb:e9:d6:f9:4d:da:
ad:f8:42:86:77:00:5b:15:67:0e:fa:c4:5b:87:ff:
c4:eb:d8:7c:86:1d:7b:63:86:b4:dd:fa:86:58:a8:
89:22:6f:7e:13:db:b4:2a:79:c8:06:78:c5:3c:a7:
ac:b5:93:3a:b0:c6:f7:70:a0:03:c2:9b:d8:42:87:
a5:18:1a:f4:81:f2:36:7a:dc:c2:c4:eb:30:a4:31:
19:46:5e:da:56:4a:64:67:2c:a2:26:20:5d:3d:61:
4c:4a:bc:91:b9:42:1a:04:15:df:37:2c:61:10:45:
4a:4a:08:cf:a5:76:09:84:cb:c7:da:59:91:cc:0c:
bc:f0:9c:1d:c8:1e:79:e4:bc:7c:ff:28:35:dd:bc:
3a:6e:28:95:06:e0:52:40:4a:94:f5:29:74:28:3d:
42:46:97:38:35:14:4f:af:8f:d9:5d:36:fd:a1:28:
08:af:e3:cb:a1:ec:8a:be:6c:64:51:e4:13:d4:c1:
f8:44:84:89:af:4c:06:37:bd:f7:8a:df:db:2e:6a:
80:a0:03:e3:60:20:81:71:2a:3a:03:36:dd:99:a0:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:A0:EC:E8:BE:37:0D:A4:3C:EA:8A:33:AF:B2:EF:5F:F8:11:01
X509v3 Authority Key Identifier:
keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c1:28:dc:ec:c8:45:d1:39:d9:e7:14:d2:a1:97:72:c5:16:
0e:0c:79:27:67:37:ae:bd:98:30:a4:4a:3b:df:85:e2:c2:d8:
7d:0b:9e:97:0c:37:91:88:94:56:fb:f6:3c:01:b5:7a:3a:9e:
72:90:6d:d2:22:8d:75:88:5a:60:a8:eb:a6:c5:e0:47:fe:51:
0a:d9:21:c6:3b:6f:76:04:9d:93:51:92:a5:8e:5e:85:1d:dc:
d2:d0:aa:24:8f:f5:3a:25:85:4b:1b:14:f9:02:30:15:4b:8d:
f1:f7:98:d2:83:2f:37:9d:b7:99:60:33:0e:be:61:8b:3e:86:
a8:2c:43:a7:79:80:1f:1c:7c:2d:17:1e:65:0a:e3:bb:0c:94:
97:11:7a:f9:a0:46:45:c1:c0:11:b1:81:ff:e3:58:48:7b:17:
26:22:e3:ba:46:9a:f9:f1:14:fe:b1:2e:b2:9b:9f:11:49:2a:
b5:87:89:37:1f:16:b6:7d:d6:e5:4c:dc:8a:45:57:fc:fb:f1:
c6:35:b1:98:85:82:c4:70:ec:aa:49:83:5f:2a:cc:b3:4c:a1:
6f:8a:1c:fc:a9:71:97:be:78:26:8f:3f:29:86:7f:da:dc:89:
e9:a1:b7:9b:b0:1b:a6:14:12:69:9b:b4:28:61:c4:65:fd:78:
2b:1d:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:31 2026 by rpki-client