Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: uIYdF0YRyhFyFMtEK12FLE9PZ5Et394lnTHPJeYWbf4=
Subject key identifier: DB:2C:AB:CB:B5:37:E4:A8:2B:8A:92:1F:E5:A3:16:BE:F2:86:92:EC
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 019D38D3CC49DB46FF774647E21B7940C526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 0CE3
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: 4j2l0R0oiX3sFLga6aYE81cIPxI.roa (hash: RzXR10l18GypZ8d4diV18s33YCTUu7qf7Qk1hWsnKR4=)
2: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: m1/RG1mkUCnPwD9BTIQoydAwcN7GmR9wYILBXw8L5QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cc:49:db:46:ff:77:46:47:e2:1b:79:40:c5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=db2cabcbb537e4a82b8a921fe5a316bef28692ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b8:49:99:7b:34:7a:5e:0e:03:81:b4:b6:bd:
95:98:b9:0f:68:3a:64:e4:b5:35:79:ad:ae:06:b1:
8c:a8:80:29:12:ea:8e:36:ee:66:d7:97:d0:70:5c:
d4:b4:4d:82:60:e0:15:47:93:47:80:6a:ad:0d:95:
c5:c7:35:ef:d1:ce:12:37:b7:1d:9e:c2:7c:cd:a9:
78:17:0d:02:7e:5a:f0:b9:fd:63:ad:ed:e0:da:4e:
7b:1f:d0:08:39:e5:cc:70:9f:34:84:27:46:67:f0:
2b:3c:39:45:da:4e:5c:9e:c2:d6:67:ed:57:01:b7:
67:f7:c7:a9:20:fc:f3:19:ff:73:36:80:e1:d9:03:
1c:8b:97:81:31:e3:d6:87:28:26:61:e0:eb:64:bf:
60:4d:27:7d:c1:f4:46:73:c3:6e:1d:4e:ff:f5:53:
bc:07:8b:6a:28:40:c7:71:f5:f2:85:7e:20:8f:68:
52:12:79:30:ce:06:1d:0b:06:42:54:2e:a2:fa:85:
ce:5a:d7:6a:cd:c9:f9:0b:3d:6c:36:f7:17:46:35:
3c:b7:78:f9:f1:e4:c0:4e:43:7a:87:d3:95:51:80:
55:a7:60:e9:15:ea:b8:ac:de:43:3c:4d:27:7d:bd:
ea:e6:39:3c:76:2b:06:d8:91:28:c9:a6:ec:04:46:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:AB:CB:B5:37:E4:A8:2B:8A:92:1F:E5:A3:16:BE:F2:86:92:EC
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:d4:c8:94:22:32:ca:32:30:dd:6f:36:d5:18:fa:be:78:
a9:98:63:02:41:4f:ee:c1:8f:5b:7f:b8:43:a9:7d:99:b6:a7:
33:13:95:1b:19:da:1d:d6:6d:37:fd:c5:41:ec:68:ee:ec:39:
06:6f:bb:82:59:2e:c6:ee:3c:11:ae:9a:51:6b:22:43:f3:90:
1c:a5:02:fb:15:6d:f8:91:48:ef:bd:f3:0a:82:b3:be:1c:8b:
81:dd:2a:25:8a:7b:fb:19:6b:17:0a:48:25:1f:89:8b:8f:54:
ea:31:3f:30:88:16:f9:37:42:45:e0:72:b4:9b:a2:26:a4:c8:
d0:83:3d:b8:ef:0e:46:f5:68:7c:90:30:52:92:b0:e2:a9:96:
86:4a:fb:ed:a0:05:09:6c:f0:1c:fd:d5:92:15:00:0e:71:9a:
2c:4f:9b:46:4c:bc:79:17:ab:35:07:e1:7b:cb:e4:2a:60:d0:
a9:77:2e:6e:c3:72:62:af:ea:ac:6c:a5:36:56:72:ed:cb:d0:
bd:d1:de:b1:0c:d0:31:18:0a:a7:8a:c0:f4:d7:47:18:3c:e0:
ca:3a:1f:ce:98:ef:ba:ec:a0:d5:99:e1:f4:4e:d8:c2:e3:48:
ee:a9:6d:f3:91:44:22:66:a3:97:90:20:43:fd:aa:f6:2c:59:
5d:8f:e8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408xJ20b/d0ZH4ht5QMUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZWE3OGIxMmQ0MzViOTdkZWZiZjkyYzc0MjY1YzM0MzNi
YmQwMjkwHhcNMjYwMzI5MDkwMTM3WhcNMjYwMzMwMDkwMTM3WjAzMTEwLwYDVQQD
EyhkYjJjYWJjYmI1MzdlNGE4MmI4YTkyMWZlNWEzMTZiZWYyODY5MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77hJmXs0el4OA4G0tr2VmLkPaDpk
5LU1ea2uBrGMqIApEuqONu5m15fQcFzUtE2CYOAVR5NHgGqtDZXFxzXv0c4SN7cd
nsJ8zal4Fw0Cflrwuf1jre3g2k57H9AIOeXMcJ80hCdGZ/ArPDlF2k5cnsLWZ+1X
Abdn98epIPzzGf9zNoDh2QMci5eBMePWhygmYeDrZL9gTSd9wfRGc8NuHU7/9VO8
B4tqKEDHcfXyhX4gj2hSEnkwzgYdCwZCVC6i+oXOWtdqzcn5Cz1sNvcXRjU8t3j5
8eTATkN6h9OVUYBVp2DpFeq4rN5DPE0nfb3q5jk8disG2JEoyabsBEaQxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNssq8u1N+SoK4qSH+WjFr7yhpLsMB8GA1UdIwQY
MBaAFC3qeLEtQ1uX3vv5LHQmXDQzu9ApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NmZhZWQtODdjMC00YjAwLTgxNzgt
YTFkY2MzZmI5YTRmLzEvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85NmZhZWQtODdjMC00YjAwLTgxNzgtYTFkY2MzZmI5YTRm
LzEvTGVwNHNTMURXNWZlLV9rc2RDWmNORE83MENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvDUyJQi
MsoyMN1vNtUY+r54qZhjAkFP7sGPW3+4Q6l9mbanMxOVGxnaHdZtN/3FQexo7uw5
Bm+7glkuxu48Ea6aUWsiQ/OQHKUC+xVt+JFI773zCoKzvhyLgd0qJYp7+xlrFwpI
JR+Ji49U6jE/MIgW+TdCReBytJuiJqTI0IM9uO8ORvVofJAwUpKw4qmWhkr77aAF
CWzwHP3VkhUADnGaLE+bRky8eRerNQfhe8vkKmDQqXcubsNyYq/qrGylNlZy7cvQ
vdHesQzQMRgKp4rA9NdHGDzgyjofzpjvuuyg1Znh9E7YwuNI7qlt85FEImajl5Ag
Q/2q9ixZXY/oFw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:20 2026 by rpki-client