Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: Z0u/qS1ReKu3Za9n6EYyIA3b8zdi/s/zHDnOGNcljgg=
Subject key identifier: CE:D5:A0:9C:6F:77:58:41:27:96:54:77:F8:06:08:A8:D5:F4:46:21
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 01A160B1DCA2E6BB699BAE890D12CDD04989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 1AB5
Signing time: Wed 21 Oct 2026 23:00:31 +0000
Manifest this update: Wed 21 Oct 2026 23:00:31 +0000
Manifest next update: Thu 22 Oct 2026 23:00:31 +0000
Files and hashes: 1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: wHctiy0J/H0/xfPSdwZCQGE96HgAObj8o7cith/E0wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b1:dc:a2:e6:bb:69:9b:ae:89:0d:12:cd:d0:49:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Oct 21 23:00:31 2026 GMT
Not After : Oct 22 23:00:31 2026 GMT
Subject: CN=ced5a09c6f77584127965477f80608a8d5f44621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:6c:ca:f9:37:45:56:d0:fd:3c:b9:f8:e5:
b0:bf:5c:78:36:94:b5:fe:7b:ac:7d:e0:80:8d:b0:
e8:5c:81:60:a0:9c:82:fd:f1:6d:a4:fc:d6:e9:12:
93:01:52:1a:e2:87:8a:c9:eb:99:1a:c4:b2:0c:29:
d1:e5:f9:97:65:ba:39:a0:f6:69:48:8b:c5:63:41:
eb:44:88:c3:e4:0d:53:19:3c:2d:ad:53:e9:12:19:
aa:a3:77:14:b8:0d:94:ce:21:47:12:c2:7d:50:87:
e6:13:62:13:2c:20:f3:50:63:a6:76:c4:e6:46:83:
cc:8c:75:e7:39:38:12:67:e8:0f:8f:fd:4e:0d:69:
71:77:6a:ca:3a:36:b3:31:83:ac:ab:51:57:c2:de:
dc:39:fd:b9:f7:fd:15:f6:f4:49:f0:f1:b0:20:3a:
fa:92:35:6f:5e:39:33:cd:d4:6d:c1:9a:7b:82:b0:
20:ab:cc:86:89:f1:a5:b1:93:82:30:3a:eb:ba:8f:
1b:e2:82:62:cf:2a:86:bb:a3:e7:98:8d:78:62:30:
e7:c0:22:18:cc:28:0e:16:c7:69:f8:38:c7:16:86:
2d:48:8a:38:1f:0e:45:1b:c6:8e:be:36:08:8d:88:
28:4b:2f:ee:34:08:6e:d7:9a:89:72:84:82:9e:36:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:A0:9C:6F:77:58:41:27:96:54:77:F8:06:08:A8:D5:F4:46:21
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:92:fa:f9:28:b6:9d:2d:e1:0a:3c:94:21:44:8b:3c:b0:17:
e4:cb:7b:1d:a6:92:98:33:86:a1:06:99:9b:9d:d3:9d:e7:2e:
cb:7c:5e:0d:b4:97:2c:48:b7:3c:a3:77:c8:dd:b3:c8:c0:9f:
50:61:be:9a:c3:5e:72:b5:65:bb:c7:2b:53:45:19:02:58:2e:
7e:b9:c7:85:09:b7:8a:36:dd:9b:e6:61:c5:4c:6d:13:72:d0:
f1:68:dc:26:47:a5:7e:03:ba:99:b7:aa:be:ce:23:bf:de:b4:
87:b1:88:75:0f:e2:a5:6a:ae:27:de:ec:94:93:a8:ee:2f:49:
dd:db:a6:d2:5b:3d:a2:9a:cf:42:de:7f:9c:5d:16:94:ba:97:
a6:a9:96:8e:61:f1:dd:5e:96:f2:1e:68:f6:f1:9c:a9:8e:94:
4a:4f:2a:85:46:49:81:48:27:1c:e4:2f:8f:67:cd:91:b8:d5:
50:b0:3a:21:91:f9:93:47:5e:21:8e:40:1f:3c:ba:c6:d1:49:
9f:72:ea:cf:60:77:9b:5b:65:d0:82:04:aa:36:63:d2:31:72:
85:d9:3f:b9:1d:e1:ab:ff:07:c9:f5:a5:35:a2:c7:7f:dd:b0:
c4:df:d1:0c:ac:0e:2e:07:bb:cc:7f:11:1a:ea:ca:a4:e6:67:
45:47:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:24:32 2026 by rpki-client