Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: 78Fudiat5mQGolnrisCQ0ommfrFPM1vbTKP4PawIqpY=
Subject key identifier: D2:7F:C5:D9:3A:6C:7C:D0:85:BC:D2:83:80:75:DF:F2:BD:DB:1C:CD
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 019D3940E3A8E91EADACA5283CDF1E3126F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 117B
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: LoExB3SySSOSvyA87CRCDE0Kt-g.roa (hash: qT5LlbFo1gEnOuh8HOShKNDJzx+51hr1jlt2Cq6Q304=)
2: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: rL1PBtgMoqsatLbBdfzniHD3CAqxGQk1/A3cipv6o7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e3:a8:e9:1e:ad:ac:a5:28:3c:df:1e:31:26:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=d27fc5d93a6c7cd085bcd2838075dff2bddb1ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:ef:75:f4:d6:4b:ee:50:cb:c3:db:01:30:
ad:f8:c6:74:0c:17:20:a6:af:fe:35:45:05:aa:46:
51:2f:46:ac:b6:b6:0f:1f:49:a4:69:0b:da:a9:8c:
d2:53:bc:66:5d:0d:3f:43:a2:70:55:05:e9:44:eb:
bb:44:a3:58:bb:55:4e:0e:65:3e:bb:2c:1f:c0:b6:
7e:bd:a5:0f:fd:5b:ce:2e:cc:dc:0d:4c:cf:e8:92:
a7:0f:a6:28:a6:f4:5c:46:25:6d:fa:6a:28:46:7e:
87:94:67:cf:16:88:07:8f:5c:b3:92:04:29:3d:6a:
18:b8:b0:96:f5:e4:91:ec:5a:f7:5d:17:44:d2:0b:
83:18:c5:b2:04:b5:c6:90:49:30:94:72:c2:ae:14:
21:b7:6f:ab:82:da:4b:ac:05:6b:10:7f:b9:a7:66:
bc:d3:51:b5:86:a3:e0:24:d2:59:ba:1f:d4:4d:cc:
61:1d:57:04:a6:fb:6e:a9:fe:e1:c8:d3:a8:18:9a:
dd:2c:7b:96:71:87:ca:f7:de:d5:f0:80:89:1d:4f:
58:54:30:75:20:c3:68:95:68:1c:9b:d6:24:d7:63:
87:36:b0:7a:99:9e:f2:5f:af:ff:fb:b3:ea:c1:09:
34:97:78:77:7a:f4:7a:a6:96:9f:3a:68:97:7e:1c:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:C5:D9:3A:6C:7C:D0:85:BC:D2:83:80:75:DF:F2:BD:DB:1C:CD
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:75:57:42:6c:c6:f2:57:c7:10:3b:eb:f6:9f:96:e5:ac:
f8:02:06:4f:45:a4:6e:ef:a5:1e:d3:6f:57:3d:9e:bd:c0:59:
9b:3c:4f:a3:3d:fd:b0:76:1e:19:4a:c3:8b:67:81:c9:7d:be:
1e:c7:6f:a9:b2:0f:84:ad:4d:66:74:f2:4c:66:16:cd:0d:42:
04:64:4b:33:62:13:5a:c7:d5:34:16:0f:84:4f:b9:6b:8d:b8:
a2:28:ec:12:71:fc:50:79:11:ec:64:e8:3e:16:b6:d8:12:ff:
2c:55:31:c7:25:26:33:0c:4b:1d:92:30:98:6c:d9:12:fa:e0:
3b:ed:7f:43:b8:dc:d2:f7:5c:c6:4e:76:d4:8d:c9:a1:13:b4:
a3:fa:a8:75:39:86:c2:9a:b3:8a:e5:bc:2b:62:c9:30:e1:6c:
31:fc:2e:f3:64:94:d6:a8:09:7c:7c:42:aa:57:74:0b:22:cc:
c9:8c:ef:57:75:84:b0:e5:c7:b6:73:2c:e7:1b:17:1a:d3:3c:
08:04:06:4c:4e:12:5a:05:bb:82:f4:1e:93:40:cd:f3:06:f6:
c5:cf:11:d1:eb:23:08:3e:ff:76:4b:bf:23:70:dc:c1:36:1e:
ac:50:33:e2:03:90:af:00:bf:54:a1:74:da:85:17:e2:e7:d6:
71:99:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:34 2026 by rpki-client