Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File: LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier: ZqJbNX/oyhL04GiUB4SzRt2CrAHuH20ZTlokcZrhubk=
Subject key identifier: 7B:98:98:54:E1:BE:0A:07:81:AD:C5:74:89:BA:04:BC:16:D4:18:73
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer: /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial: 019FF9ED0D3BFD02E4EA05A39B4979343C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number: 0165
Signing time: Thu 13 Aug 2026 07:01:29 +0000
Manifest this update: Thu 13 Aug 2026 07:01:29 +0000
Manifest next update: Fri 14 Aug 2026 07:01:29 +0000
Files and hashes: 1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: RImfGSs/VVxotGevgCPkT8wSqru2BIoekm6yE1VL+fQ=)
3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ed:0d:3b:fd:02:e4:ea:05:a3:9b:49:79:34:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Validity
Not Before: Aug 13 07:01:29 2026 GMT
Not After : Aug 14 07:01:29 2026 GMT
Subject: CN=7b989854e1be0a0781adc57489ba04bc16d41873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:1a:01:b6:b9:17:00:65:79:0f:ee:26:a0:
f6:76:9e:9a:5a:18:4d:cf:95:ef:7d:07:0a:84:01:
cf:13:26:24:61:9b:f7:5b:1e:5a:5b:75:93:d1:c2:
1b:1f:e4:c8:1b:20:31:c6:ed:d1:e6:e1:8c:c2:30:
9b:b8:d4:30:1a:8d:e3:f3:7a:63:9a:8f:d3:50:cc:
ae:09:5c:1e:d0:0e:60:12:92:29:d9:5e:98:10:87:
2e:a6:fb:a5:2f:65:ab:9b:39:33:73:5a:4f:92:2c:
29:1a:a2:31:87:3b:a8:c4:f1:45:42:f0:53:e9:62:
c9:32:cd:1e:97:88:d3:57:60:4f:63:34:f3:66:ea:
3a:de:04:f0:83:bf:dd:fe:36:c5:1e:53:d0:5d:bf:
d3:41:78:21:60:ec:35:2e:43:1c:46:a4:9a:e7:f3:
aa:6f:c1:72:a4:48:f8:76:ef:48:81:14:58:26:36:
3e:3d:c5:51:a1:b4:07:db:4d:70:3c:a1:6f:c8:bd:
16:7d:f5:63:92:d7:50:d6:04:27:f4:60:ac:78:ee:
fc:3d:f4:f6:60:11:0c:3f:fc:5e:f1:9c:80:97:dc:
51:fa:6c:26:b3:c4:fa:4f:47:f8:9d:c7:db:c9:f6:
7a:83:2c:7e:15:72:9b:e9:1f:53:39:6c:62:7b:86:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:98:54:E1:BE:0A:07:81:AD:C5:74:89:BA:04:BC:16:D4:18:73
X509v3 Authority Key Identifier:
keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3a:84:a7:8c:68:b8:95:92:f8:0c:cb:5d:be:60:8e:71:6a:
64:83:ec:4a:a3:8a:71:ef:b9:84:32:88:cc:d0:ef:57:14:70:
fb:5b:06:a5:c4:41:ee:ea:65:78:c9:3f:d6:03:4a:7a:22:1d:
c4:09:d5:4b:d5:b7:16:2c:17:6f:55:8a:ec:88:b1:e3:ac:f0:
ce:11:18:00:cc:6f:1e:bd:80:77:a0:06:3f:07:5b:90:72:16:
57:e7:60:e6:9d:43:61:c8:84:10:7b:96:96:e5:b4:ff:f1:d6:
30:3b:ac:4b:1d:05:cd:dc:b9:ce:7e:f8:c7:88:66:34:4c:21:
9f:a8:fc:98:04:8b:2f:f1:16:89:94:04:ce:af:2c:89:1e:3c:
71:49:b9:da:12:6e:ea:71:d5:54:0a:7d:14:31:34:ac:78:c8:
35:19:20:54:d4:f2:fa:75:e8:a4:f5:75:1f:4c:dd:96:a5:49:
3b:81:b5:8e:6e:27:24:a5:02:07:b1:db:dd:67:98:e2:d0:41:
f9:53:77:5f:71:ef:38:da:2a:07:08:6b:ff:bf:ce:bd:d4:27:
e2:70:dd:3a:ca:70:c2:47:1a:b2:53:ec:a1:a3:d0:64:bd:b6:
09:31:90:49:ec:8d:4a:a3:ec:4c:b5:12:7a:b6:6b:a8:27:1d:
ed:6b:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:01 2026 by rpki-client