Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: 31O67jf6zWg5AjAwmVS9znZ9+9tmU8HKR5vzMKXC2RY=
Subject key identifier: A4:D1:DF:DE:9D:B8:2F:72:10:4C:36:DA:8E:E0:EB:61:9C:43:24:BC
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019D39AEA999A4D0911DCBF29B83BA69DF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 13:00:41 +0000
Manifest this update: Sun 29 Mar 2026 13:00:41 +0000
Manifest next update: Mon 30 Mar 2026 13:00:41 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: 3rJnaLa0VqB8dVJamBsGFkQwtEHf2cFjNUJ9q0qIl3M=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a9:99:a4:d0:91:1d:cb:f2:9b:83:ba:69:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Mar 29 13:00:41 2026 GMT
Not After : Mar 30 13:00:41 2026 GMT
Subject: CN=a4d1dfde9db82f72104c36da8ee0eb619c4324bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:eb:97:6d:cf:e8:28:1b:8e:90:f5:f8:20:
81:15:53:90:94:f2:52:9c:db:32:5d:ff:a8:62:b5:
6d:2f:59:28:08:04:2d:67:12:e0:9f:b8:9f:d7:e5:
f8:8a:e0:7d:54:4f:fd:95:8b:b8:00:c3:2d:8d:d6:
08:09:ad:0c:4f:73:64:7b:d1:c1:fb:0a:31:96:51:
97:3c:33:cd:79:fb:95:22:c5:d7:39:64:b6:3c:b6:
75:64:59:5d:0f:2e:b3:d3:44:00:1d:11:c9:4e:ae:
95:ee:8d:85:6e:52:9a:3a:ad:e4:ec:53:f3:5d:a0:
55:b1:87:cf:a7:a3:b3:28:b6:98:d9:c1:39:de:f8:
41:7d:38:79:3a:cc:6c:1c:71:c4:d0:2c:08:b3:b0:
c5:7c:1d:23:35:2e:5a:ff:2e:6f:9c:fb:7e:06:db:
86:40:cb:62:ac:1c:21:86:df:63:b6:dd:bd:2a:73:
09:4f:1e:73:a4:80:d3:75:51:6e:f0:12:6a:d2:ba:
57:25:6d:81:d6:6e:90:54:a8:fd:a8:cc:d3:51:ec:
86:89:44:d5:c0:5b:a2:9e:a2:f4:f1:ff:89:cf:7a:
79:fa:76:65:4a:ee:03:f3:a7:94:83:06:34:53:13:
95:d0:f8:3e:f1:ec:98:53:b0:d7:24:6a:95:73:0e:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:DF:DE:9D:B8:2F:72:10:4C:36:DA:8E:E0:EB:61:9C:43:24:BC
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:74:79:46:57:19:28:d4:1f:29:75:c2:da:83:eb:9a:df:3a:
39:da:10:e3:e3:72:59:6b:26:50:76:d0:c3:b2:d4:95:17:8a:
00:46:24:09:35:85:01:4f:cc:3a:ed:9a:04:85:15:ce:67:3d:
6e:0a:98:fc:be:12:a3:64:fc:1c:63:1e:e0:5e:87:f3:f3:33:
f7:96:b4:24:3d:b7:0c:40:e0:bc:ed:66:85:58:df:fd:d4:9c:
b0:bb:dc:77:de:ff:ef:99:7e:25:41:2e:0f:f3:db:5e:ac:d4:
43:21:5f:54:15:34:57:8c:01:82:d2:b1:1d:45:78:73:dc:9b:
8a:4d:12:30:4b:c2:23:09:19:7a:29:a6:a1:ac:4a:86:36:89:
06:4d:59:17:54:81:08:50:92:e8:2b:d9:2d:2e:73:3b:2f:d7:
97:3d:21:97:6e:1a:14:97:aa:0d:d0:30:15:ca:60:1b:2e:b6:
e0:12:4a:83:1f:26:13:16:fa:a9:53:0a:b8:7d:be:3b:94:91:
54:87:3b:fb:f0:a9:ba:33:d3:08:d7:7c:c7:ae:51:2b:30:71:
fc:8d:85:5a:69:af:db:ed:a2:10:a9:b0:58:76:56:36:1a:60:
b5:39:b4:b8:fb:30:4b:b4:d1:ce:c8:7c:05:b0:37:c2:c5:c0:
e0:e3:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:36 2026 by rpki-client