Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File: leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier: 8beyRLJK/dRFwXfrAbBsfw9d0rKKOs/X88sPgK9b960=
Subject key identifier: 41:3F:17:8C:36:04:53:89:26:98:2A:D2:8A:6F:43:1E:D7:8C:E3:AB
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer: /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial: 01A180E211F46CB55387D57A85B8E7C582B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number: 091E
Signing time: Wed 28 Oct 2026 05:01:01 +0000
Manifest this update: Wed 28 Oct 2026 05:01:01 +0000
Manifest next update: Thu 29 Oct 2026 05:01:01 +0000
Files and hashes: 1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: tShOV+oMIx8gA4Ltlc8hzH4d3hkBKrGTajqSMsjMn80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:11:f4:6c:b5:53:87:d5:7a:85:b8:e7:c5:82:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
Validity
Not Before: Oct 28 05:01:01 2026 GMT
Not After : Oct 29 05:01:01 2026 GMT
Subject: CN=413f178c3604538926982ad28a6f431ed78ce3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:04:44:60:7f:2f:76:bb:bc:27:61:1e:3b:
5b:c1:a5:fd:d2:58:34:1f:b2:cc:84:ad:6f:b0:00:
3b:f5:0d:ba:56:a6:ab:b6:a3:5a:ee:96:39:ae:b1:
7d:cf:43:2f:ee:81:42:c4:8c:13:46:83:48:f9:89:
42:13:00:fd:84:c4:13:8d:ee:70:47:14:ac:b1:22:
51:6b:91:0e:47:10:63:4b:74:2e:f9:5a:c6:1f:0f:
26:23:8c:e6:f2:53:ee:f6:71:f1:c7:09:89:44:1b:
ab:fa:ea:17:3e:6e:08:88:c8:81:11:71:1c:98:e1:
10:4b:ba:8e:e6:24:13:df:71:2d:77:be:e6:22:cf:
52:07:45:23:34:b4:0e:04:2f:07:7f:19:56:5a:cb:
62:49:e6:79:98:38:4a:ca:f0:cc:4a:b2:c0:47:2c:
c8:2b:b7:78:ce:60:ad:4d:be:80:75:cc:a7:27:7b:
c0:c1:4d:ed:68:1d:f7:76:1c:6b:c2:67:10:c4:79:
1e:7c:3c:7c:d8:a7:44:c4:c8:c4:e0:8c:2e:c2:46:
59:2a:93:42:d4:48:a4:76:13:eb:92:5b:6f:9f:9a:
5e:98:80:bb:40:36:96:e1:ea:51:a0:c1:79:d5:8f:
4a:d7:fd:fe:c9:ba:10:04:98:af:7f:63:9f:74:be:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:17:8C:36:04:53:89:26:98:2A:D2:8A:6F:43:1E:D7:8C:E3:AB
X509v3 Authority Key Identifier:
keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2c:ef:da:3b:41:94:50:90:80:6e:ac:fe:66:20:c3:66:20:
1b:07:2f:a5:6a:d1:d3:c0:75:ed:5f:ea:c0:3c:d7:b3:30:b9:
cb:1e:92:bb:62:2c:df:d0:a7:71:62:8f:96:67:8a:0c:3f:be:
94:6f:cf:89:ee:46:1f:b6:cd:1d:fe:6c:9e:77:0a:28:da:09:
94:ea:c8:93:3c:e1:a2:6a:4f:77:7e:ab:62:aa:7c:0d:35:54:
e4:1b:0c:4e:6d:77:10:ab:cd:97:9b:5e:df:f9:0f:50:25:9e:
46:b9:d7:2f:ff:43:cd:0c:03:74:1b:03:48:71:69:0f:5e:bf:
46:35:5f:20:32:37:59:3b:3b:08:52:4d:f6:3f:53:35:1d:5a:
22:b9:6d:cf:96:91:0a:91:71:7e:7b:8e:e0:b2:0a:e8:fc:4c:
fb:ec:65:f7:53:f5:ed:7f:a1:e1:89:61:1c:2c:12:3c:b1:e1:
be:be:88:12:0b:83:a6:bb:63:26:ea:af:07:42:5f:8f:f5:02:
56:eb:31:34:bc:94:51:60:0f:6f:ba:7f:62:13:3f:6a:65:b3:
6c:79:de:31:1c:0a:0f:13:6a:51:09:49:a6:15:d8:8e:c6:bd:
32:43:91:f7:e3:f8:b7:18:9b:75:3b:7d:7d:00:6a:31:36:16:
53:cf:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:54 2026 by rpki-client