Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: OqxWQiocUY5STAN0Gs9/PVaZt5x4VMqPagr9VNJ8Mqs=
Subject key identifier: 9C:1F:5F:A0:22:D8:9C:AE:7D:D7:D4:B8:AD:5F:8B:C9:22:25:95:0C
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 019D389C1C2548139567F871D120C6D5C80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: qig8jIUFanv6I+g9StEKWHg4fwb1M4kr8dWIUb2Okgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1c:25:48:13:95:67:f8:71:d1:20:c6:d5:c8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=9c1f5fa022d89cae7dd7d4b8ad5f8bc92225950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:86:cb:1c:b5:08:c7:b2:1b:34:46:d2:83:
1e:30:ac:5f:08:66:02:5b:7d:b3:33:f2:6e:9a:5d:
0d:ab:16:bb:6b:2d:3b:26:02:a4:fb:7a:27:9c:88:
ee:e4:eb:64:90:1c:62:1f:77:bc:9f:f6:78:2a:c9:
a3:4d:41:1b:38:4c:40:5b:ef:69:ff:46:4d:97:8b:
7f:1b:f0:c6:15:9d:19:9b:31:16:b4:08:8b:66:50:
95:67:88:a5:00:fb:cd:4f:41:30:69:51:4b:f0:56:
a5:7d:a1:fc:b5:32:c1:37:3c:5b:6c:49:cd:38:5b:
bb:b8:a3:3c:06:51:eb:95:b6:4f:a6:ca:3d:b8:32:
a2:36:d5:15:1a:1d:15:ad:91:88:68:87:09:93:ff:
9b:e6:eb:97:25:2a:95:67:f3:25:e9:43:11:ef:43:
91:0f:9d:a9:67:bc:d2:31:cb:9f:c6:17:9b:77:0e:
5c:58:44:5b:33:c3:26:0d:57:f8:c4:db:e7:7a:14:
6a:17:5d:42:9f:7b:b1:d3:6c:4b:15:cb:6a:9a:26:
60:13:25:1b:15:11:83:d3:2c:ea:b5:06:5a:d8:7d:
79:49:fd:a3:c7:50:d3:50:f6:ec:3d:9e:a2:13:af:
07:a7:cd:24:b6:92:e1:17:34:ee:82:d7:e9:1c:d7:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:5F:A0:22:D8:9C:AE:7D:D7:D4:B8:AD:5F:8B:C9:22:25:95:0C
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fe:1e:1c:65:16:ac:78:99:4c:5b:3b:83:e3:aa:3d:65:9d:
81:71:99:70:c5:b6:2a:7f:58:17:61:52:9a:c9:de:af:c4:ab:
8b:fb:db:6f:46:3c:01:f9:4c:ab:96:53:88:75:eb:20:aa:be:
1e:de:54:43:75:84:4a:e3:92:b4:48:97:18:1e:86:32:20:eb:
39:a9:47:fb:80:56:76:a0:2c:e3:29:8f:5d:ea:00:5e:9c:fe:
3e:38:81:0c:ba:f9:6f:34:45:10:4d:3e:33:50:ab:f0:3d:24:
62:d2:9b:ee:df:ca:9d:ec:59:e3:f4:e3:81:1b:fc:0e:16:2b:
14:e5:83:7e:74:bc:bd:25:46:c5:a0:8e:8f:18:23:72:be:ba:
58:f9:c8:39:ee:d3:f7:9f:96:70:39:60:d4:72:ad:37:4f:15:
52:e3:9c:54:76:f7:7b:06:64:e3:06:92:a2:25:f6:a6:41:e7:
57:8d:60:ef:dc:c4:ba:5d:4b:12:29:0e:dc:cd:36:04:1f:bf:
e5:2d:68:d5:a2:7b:c8:18:22:3a:11:a3:a8:f2:cb:d9:8c:6f:
e2:09:de:d2:a1:d3:34:b1:e3:4f:60:dd:22:52:a2:14:8b:e3:
63:81:89:02:70:2e:17:92:9f:53:8a:d9:49:d4:7e:43:a1:a8:
0d:e1:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:15 2026 by rpki-client