Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File: LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier: Qy6pKZpeseadq7EjtVBCIhY+swVJL4BUcffgZKHnZ6g=
Subject key identifier: 9F:E9:C1:CA:B6:D2:8D:1B:9C:0A:B2:3D:E4:2E:AD:4F:9E:C7:8B:EF
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer: /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial: 019DDD31188B67A0F716EF1427ED6EAE411C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number: 4D
Signing time: Thu 30 Apr 2026 07:01:15 +0000
Manifest this update: Thu 30 Apr 2026 07:01:15 +0000
Manifest next update: Fri 01 May 2026 07:01:15 +0000
Files and hashes: 1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: evF/6PEDqQvOzqaUr79T9GV1jscM+gSsa3Q3CCW2OII=)
3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:18:8b:67:a0:f7:16:ef:14:27:ed:6e:ae:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Validity
Not Before: Apr 30 07:01:15 2026 GMT
Not After : May 1 07:01:15 2026 GMT
Subject: CN=9fe9c1cab6d28d1b9c0ab23de42ead4f9ec78bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:9e:6b:7a:69:97:bc:40:7d:4b:bb:25:a4:
88:e8:33:4e:66:0e:d2:54:7c:ae:82:85:08:b8:ab:
19:82:8b:32:29:6b:42:15:6a:5a:34:6e:a7:0c:b8:
bb:49:a2:fb:3b:87:03:34:3f:41:15:cb:12:b7:8e:
81:b7:0e:21:3d:b2:48:7b:fa:0b:c4:76:4a:7c:65:
e6:4d:0a:8e:06:a9:3a:eb:6c:97:19:91:f3:25:54:
ea:59:fc:f5:3f:04:eb:14:df:bd:1c:1e:53:77:d6:
b9:2e:1e:ae:2b:67:ce:ac:ae:bd:e1:c4:2c:7c:a9:
6b:bd:23:26:a2:fd:08:34:64:9e:f6:a0:23:8b:78:
00:39:52:80:ec:e2:4c:84:80:6b:94:d9:11:2e:72:
3d:b0:d5:66:04:f8:24:04:03:e7:43:bd:f8:04:20:
77:df:e2:ad:87:d1:21:d0:09:78:68:d5:d0:1d:08:
d9:4a:1c:47:99:16:95:70:f3:a2:06:12:ff:a4:aa:
24:ee:f9:3e:77:1f:08:38:66:ec:23:eb:8d:5e:ad:
99:0d:9b:af:38:ec:38:0d:f1:a2:4d:13:f6:5c:96:
e7:ef:01:c1:72:c4:2f:75:8d:34:37:46:e8:83:95:
a9:e8:50:65:7a:b0:9a:d6:41:47:b2:2e:ed:40:9e:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:C1:CA:B6:D2:8D:1B:9C:0A:B2:3D:E4:2E:AD:4F:9E:C7:8B:EF
X509v3 Authority Key Identifier:
keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:b7:9f:94:a2:02:43:17:44:02:66:09:84:69:96:e4:6b:
95:67:d7:4f:32:06:cd:19:a2:40:f0:e4:a8:ff:df:cf:d8:3b:
b5:78:9e:8f:fd:df:4f:02:a6:ac:b1:5d:ee:a3:c9:de:a3:77:
a5:24:e6:41:da:3e:80:df:ce:b3:21:b5:37:ea:8a:1e:1c:59:
b9:17:a8:46:71:b3:18:55:2b:0a:d1:9c:43:87:22:b6:ac:7c:
5c:c8:9e:77:e9:aa:68:fb:af:0a:5f:a0:0e:97:07:88:10:5b:
f7:ef:45:78:a7:4c:59:54:07:d3:9b:1d:f4:b8:7c:3d:9d:4a:
c2:e1:0a:27:41:b9:f8:1f:3e:7f:1c:b7:09:69:62:f8:58:9d:
61:ae:20:87:a7:78:4b:fe:15:8b:d1:54:7c:cf:7d:9e:d2:8d:
59:e9:c2:24:f3:57:ef:6a:47:08:fe:ee:62:df:55:90:4b:7f:
86:f5:97:f6:41:82:86:ff:c9:bd:dc:33:66:04:42:15:1f:84:
82:1a:f2:6c:96:13:4c:5e:74:25:b1:8f:34:b6:36:3d:8b:01:
c8:4b:de:19:e0:f0:4a:83:82:ae:7c:da:1a:f4:0e:af:80:d3:
2f:3c:27:4b:86:fd:5a:e5:7a:28:08:77:f5:85:f7:77:f8:5f:
1e:4f:36:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dMRiLZ6D3Fu8UJ+1urkEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBiNmE4ZmFhMTdhZTUzMThiNTcyNjVmODZlYTU1Y2Ex
ZjRiMDIwHhcNMjYwNDMwMDcwMTE1WhcNMjYwNTAxMDcwMTE1WjAzMTEwLwYDVQQD
Eyg5ZmU5YzFjYWI2ZDI4ZDFiOWMwYWIyM2RlNDJlYWQ0ZjllYzc4YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJqea3ppl7xAfUu7JaSI6DNOZg7S
VHyugoUIuKsZgosyKWtCFWpaNG6nDLi7SaL7O4cDND9BFcsSt46Btw4hPbJIe/oL
xHZKfGXmTQqOBqk662yXGZHzJVTqWfz1PwTrFN+9HB5Td9a5Lh6uK2fOrK694cQs
fKlrvSMmov0INGSe9qAji3gAOVKA7OJMhIBrlNkRLnI9sNVmBPgkBAPnQ734BCB3
3+Kth9Eh0Al4aNXQHQjZShxHmRaVcPOiBhL/pKok7vk+dx8IOGbsI+uNXq2ZDZuv
OOw4DfGiTRP2XJbn7wHBcsQvdY00N0bog5Wp6FBlerCa1kFHsi7tQJ4gAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/pwcq20o0bnAqyPeQurU+ex4vvMB8GA1UdIwQY
MBaAFCxAtqj6oXrlMYtXJl+G6lXKH0sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVDMnFQcWhldVV4aTFjbVg0YnFWY29mU3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZDBkNzQtNzI2YS00ZTZkLWIwNmMt
Yzg2YThmZjhkMmViLzEvTEVDMnFQcWhldVV4aTFjbVg0YnFWY29mU3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZDBkNzQtNzI2YS00ZTZkLWIwNmMtYzg2YThmZjhkMmVi
LzEvTEVDMnFQcWhldVV4aTFjbVg0YnFWY29mU3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODS3n5Si
AkMXRAJmCYRpluRrlWfXTzIGzRmiQPDkqP/fz9g7tXiej/3fTwKmrLFd7qPJ3qN3
pSTmQdo+gN/OsyG1N+qKHhxZuReoRnGzGFUrCtGcQ4citqx8XMied+mqaPuvCl+g
DpcHiBBb9+9FeKdMWVQH05sd9Lh8PZ1KwuEKJ0G5+B8+fxy3CWli+FidYa4gh6d4
S/4Vi9FUfM99ntKNWenCJPNX72pHCP7uYt9VkEt/hvWX9kGChv/JvdwzZgRCFR+E
ghrybJYTTF50JbGPNLY2PYsByEveGeDwSoOCrnzaGvQOr4DTLzwnS4b9WuV6KAh3
9YX3d/hfHk82vA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:47 2026 by rpki-client