Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File: LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier: FI/8+QUSnhLMd171iPKfnGSkvqgzOBJrfz+SS6wxwMA=
Subject key identifier: 35:BE:04:0E:99:40:8F:E1:D8:D6:3E:C0:19:75:1C:D5:CE:DB:EE:9C
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer: /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial: 019EFCF2ECE6BC499BFFB6A1C332BA422951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number: E2
Signing time: Thu 25 Jun 2026 04:03:59 +0000
Manifest this update: Thu 25 Jun 2026 04:03:59 +0000
Manifest next update: Fri 26 Jun 2026 04:03:59 +0000
Files and hashes: 1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: rd7xDG3TPb7cG7G8u0UbAjowM+7NwwIPfv9yfR5+gpE=)
3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:ec:e6:bc:49:9b:ff:b6:a1:c3:32:ba:42:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Validity
Not Before: Jun 25 04:03:59 2026 GMT
Not After : Jun 26 04:03:59 2026 GMT
Subject: CN=35be040e99408fe1d8d63ec019751cd5cedbee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:f0:13:61:2a:f1:e6:30:ca:bd:e8:9e:54:
e6:68:25:3f:5f:cd:a9:23:f7:b8:f7:a5:72:5e:4a:
bb:70:1a:88:79:27:20:3f:94:2a:08:56:89:77:73:
47:12:a9:67:6e:df:e6:5d:05:07:5e:8d:a8:be:b3:
16:bb:51:21:2e:88:bf:af:e2:28:0d:42:de:f4:31:
fa:4f:1b:46:8c:68:5b:33:44:58:b6:15:4e:e5:2a:
c2:89:44:1c:6e:91:80:37:49:ec:cc:04:7b:3a:84:
86:c7:01:e7:82:d4:7c:8a:bc:73:cd:45:42:eb:e6:
ac:bb:be:b6:7e:15:a4:14:74:82:97:56:fc:16:c7:
34:f0:1b:3c:7a:46:a6:57:a1:f6:e2:ae:d6:82:c2:
04:bf:7e:90:16:b8:c9:50:3b:31:14:f7:64:ab:42:
d6:64:ed:9c:ee:5a:bd:f4:27:a4:81:54:41:e7:86:
c9:7b:ab:7f:6b:95:98:53:cd:de:da:5c:56:7d:24:
f1:11:e0:14:be:19:03:a8:ba:bd:5c:0a:39:6a:3b:
30:d4:19:0f:63:ed:ac:20:28:a8:1d:06:91:c5:11:
b6:79:18:e8:36:43:fa:23:ee:83:c9:14:dd:16:e2:
66:c5:ea:dc:01:51:87:cb:b2:bd:fc:9d:67:5c:f5:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:04:0E:99:40:8F:E1:D8:D6:3E:C0:19:75:1C:D5:CE:DB:EE:9C
X509v3 Authority Key Identifier:
keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:83:c2:cd:10:63:dd:f0:51:a2:03:fc:07:0a:c0:46:ae:c5:
39:51:4d:d7:2d:94:10:c3:63:47:f6:bc:a8:be:a5:7a:5c:ae:
dc:fd:2d:a8:45:ca:26:bd:f1:1d:97:dd:8a:35:77:c7:6c:11:
dd:44:11:5b:3c:55:11:40:99:06:15:57:88:7c:b9:94:67:b0:
3c:35:a8:9f:a3:e9:56:f8:a6:98:10:0f:50:72:ff:39:e5:d7:
36:e7:28:4f:a2:aa:a9:47:6d:0b:fd:c0:b1:f4:ec:82:8a:5a:
9f:2a:5e:84:39:fe:63:49:0c:e8:98:5d:e6:49:34:45:f0:ca:
a7:ab:f9:e1:55:2d:2b:d8:65:2c:e9:06:c4:77:c7:1b:2d:c5:
52:b2:24:4a:a4:74:de:9e:22:06:66:a6:49:e8:40:0b:d2:27:
09:db:87:26:93:83:40:79:02:a5:60:33:4d:c5:29:d4:09:f8:
12:74:fc:2b:4e:40:c9:f5:af:22:21:2c:69:e2:d4:75:97:96:
bc:fd:69:2e:8d:19:38:e0:a3:99:1c:b3:35:fb:13:d0:c0:4b:
4b:ab:bf:4f:20:4b:6b:b0:1c:bb:a4:8a:ee:af:4e:07:3b:48:
fc:cd:87:0b:9c:09:6a:86:f0:25:ca:93:e9:79:0a:39:96:7c:
c2:6b:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:44 2026 by rpki-client