Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: 2X2dH4X39STGQObF+vzN8G3jquzTsD++Z+MmLL8gg5c=
Subject key identifier: 27:F7:89:23:80:4E:03:00:56:BE:8B:35:68:18:48:05:81:C5:36:09
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019D38D330C7C5D03E9EDAE06E7486FE83E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 0652
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: S66d551JroD6MSIEZ_42ExhqO5k.roa (hash: t3UcVYuNtk2YzWoEW72cC2ZSBix9HCSCO3JVqXCUzCU=)
2: VxEWsPAkHIxtvkrHED-wCH1kUI0.roa (hash: 8vUxWPnKT69GjCXQn0MXD3bHdB31nVJ/4lTKFyOpw+g=)
3: aVFkjMqYn2rDvWK_4Er7veowmzc.roa (hash: a0eU89LPDvn15SbN8UifKQ8En1lFGp7ZEcjuxOeXD3w=)
4: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: 25WZMI4NKD+9GhRWp9t1Yo5c6h2Rt+mDtmxNqDKBnQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:30:c7:c5:d0:3e:9e:da:e0:6e:74:86:fe:83:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=27f78923804e030056be8b356818480581c53609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:74:10:e5:f2:d0:4a:55:01:63:d5:49:61:
a6:29:4b:7f:e8:91:c6:b4:6a:5f:b1:af:a8:67:14:
08:f9:60:5d:8b:1f:35:0e:58:f9:94:65:d7:0f:41:
18:69:17:94:20:94:a6:09:d0:75:9f:e1:66:55:68:
62:21:50:e7:47:00:c6:98:99:59:a2:32:0d:14:88:
5c:33:45:2a:07:c5:54:df:a0:cc:7f:ef:8f:b4:e7:
67:96:df:a1:bd:e9:d5:24:a5:d5:2d:2b:62:73:e7:
5e:6a:cb:72:c3:bd:c1:30:f4:c4:4b:0d:f5:6e:bc:
fa:93:56:0e:8a:82:b8:a3:39:c8:bc:b7:08:09:e8:
96:47:31:05:93:e0:2b:03:15:fd:3c:c3:a0:e1:29:
d8:ac:42:a2:3e:b6:a4:af:da:96:d3:d7:8a:8d:a3:
60:05:27:27:19:7c:2a:a8:41:4c:68:d4:fa:ba:d5:
94:d0:59:a3:46:19:e2:2f:bc:1d:bd:b0:a7:a7:1f:
16:a9:71:54:2b:82:34:62:52:db:ff:15:4d:d5:c7:
e4:84:40:c4:ea:5b:9d:6b:97:96:3e:bf:be:92:fb:
52:dc:08:07:a6:72:67:41:16:b5:d7:13:86:ab:76:
6a:cf:7c:2f:41:25:40:5a:a4:5f:20:eb:a6:5a:fa:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F7:89:23:80:4E:03:00:56:BE:8B:35:68:18:48:05:81:C5:36:09
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:d9:c5:e5:21:88:63:27:f2:42:11:fa:5b:15:ee:24:f9:
cd:5c:cd:4d:03:4c:d6:72:bc:83:ae:09:13:9f:33:e3:73:21:
df:db:57:61:37:38:83:e6:ee:79:64:39:72:b7:01:30:77:bd:
3c:1c:d5:f0:63:74:e7:2f:a4:62:6d:44:ff:f2:3a:de:89:c6:
af:f2:a8:14:60:ca:54:26:d0:87:0e:00:10:e5:f4:a9:02:14:
63:f1:82:68:34:b8:3c:cf:53:d5:dd:49:de:3e:17:7a:4c:bb:
0b:4c:eb:79:04:4e:36:60:6c:b4:24:6c:22:eb:db:58:e1:42:
bb:73:21:f2:89:c1:df:94:20:2c:43:45:02:eb:3c:cc:68:57:
9c:39:77:3b:8b:52:2a:63:a1:cf:e3:73:7d:af:64:46:ac:47:
f2:05:bf:96:f3:c4:95:f8:c6:99:2d:39:75:eb:42:6b:40:e0:
a2:5d:73:0c:e7:3a:a1:d4:2a:fa:58:cf:86:4e:a9:06:bb:90:
01:4e:eb:3c:ae:0e:3c:78:5d:89:3d:c6:55:6f:f8:ea:1b:44:
63:bc:20:5e:93:ce:3d:c0:74:06:8b:16:c7:fe:ca:96:c6:aa:
93:ce:79:e0:e5:23:b1:e4:79:75:d5:b3:08:11:4b:67:0e:7d:
4d:54:a3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:45 2026 by rpki-client