Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: VXVxijIiugbVuXg8KUEwYhSrAPCV4flbOn5jUY8GDyo=
Subject key identifier: 17:3F:76:20:2D:B1:6B:24:A8:88:4E:3F:49:36:3F:69:7E:84:CF:1A
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019F84C42FB6C0D513B9FDD1481D1E82FF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 10B6
Signing time: Tue 21 Jul 2026 13:01:17 +0000
Manifest this update: Tue 21 Jul 2026 13:01:17 +0000
Manifest next update: Wed 22 Jul 2026 13:01:17 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: QLWRtKqJg3Vlk4dYfPa8cfgYQbz2PyMeI47qJYFXYwg=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:2f:b6:c0:d5:13:b9:fd:d1:48:1d:1e:82:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Jul 21 13:01:17 2026 GMT
Not After : Jul 22 13:01:17 2026 GMT
Subject: CN=173f76202db16b24a8884e3f49363f697e84cf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:5f:e4:a8:ad:e7:30:a0:9a:92:e0:d8:93:
d1:c9:52:59:72:2f:8c:21:0a:90:df:95:b8:c4:93:
e3:71:d2:96:43:17:7c:26:b9:09:70:8a:d5:1f:97:
e4:d3:50:fd:7d:57:1e:9a:e1:27:d1:1a:24:90:0d:
28:7e:83:5f:e6:79:a0:23:bf:cc:72:95:84:c1:0c:
e8:56:89:2b:b2:2f:89:23:d9:2f:06:49:62:58:2d:
83:86:9d:76:40:e4:f4:36:37:fc:00:aa:4b:05:2f:
74:03:7f:6f:62:65:47:74:ed:ab:4c:53:bb:7d:75:
00:c7:e4:df:ba:50:59:c7:e2:06:04:8b:79:41:b3:
b7:a3:91:48:dd:41:a8:b2:2b:da:a1:f4:72:2c:6f:
f7:85:6c:63:fb:a5:0e:99:3e:16:ab:b2:b3:ed:45:
c8:11:ff:66:71:01:90:11:65:e2:1e:ef:75:c0:e5:
89:fb:be:c3:b8:c0:be:2c:ef:ea:35:78:75:b1:e2:
24:83:f2:3a:b7:55:90:72:55:6d:6c:89:00:70:5d:
f7:ba:a6:52:3f:81:6b:34:d6:24:42:83:7b:19:da:
73:df:46:d9:da:87:fb:49:67:0d:e0:6e:a3:77:6d:
a1:ff:10:a2:d8:f4:2e:ea:45:b9:bd:5f:48:04:8f:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:76:20:2D:B1:6B:24:A8:88:4E:3F:49:36:3F:69:7E:84:CF:1A
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:db:dd:97:5a:e6:f6:99:53:3a:80:b4:d1:04:8b:10:7e:e1:
9f:ea:4c:ec:c7:0c:3f:c1:99:57:26:36:73:5a:2b:15:f7:68:
36:10:2c:70:a0:72:e3:d5:92:5d:18:65:fb:a5:18:7c:69:8b:
6f:6b:18:26:32:0f:44:24:18:3f:3f:6a:20:35:fe:ff:fa:24:
28:cb:3a:33:7e:a7:77:d5:9c:3e:c7:a4:71:32:1e:9d:6e:68:
b3:ca:f9:73:3a:61:7d:df:e6:e0:42:8b:9d:0e:fe:b2:70:38:
e0:c1:7f:13:37:51:6d:20:2a:16:28:7e:b9:17:80:83:93:b7:
48:78:d3:f8:7b:b7:35:c0:91:ca:c8:41:ff:13:e9:76:ca:06:
04:4e:c1:41:25:b9:8e:50:31:74:0f:93:cc:36:58:e3:45:79:
91:6a:2c:88:6e:0c:f8:70:a3:9f:c9:81:a1:57:42:cb:69:e8:
7d:ae:18:fd:2f:88:a7:87:05:5a:49:ae:e5:c5:d0:ea:fb:56:
d3:b9:48:cd:28:6e:37:04:a4:58:16:94:cc:c9:13:ee:57:92:
64:b0:f1:f4:be:20:2d:94:1c:80:64:a4:c2:c1:0a:40:26:70:
27:96:e1:46:28:43:1e:ef:a4:1b:87:fa:55:03:21:0e:58:79:
db:55:50:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExC+2wNUTuf3RSB0egv9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2
NGUyMDIwHhcNMjYwNzIxMTMwMTE3WhcNMjYwNzIyMTMwMTE3WjAzMTEwLwYDVQQD
EygxNzNmNzYyMDJkYjE2YjI0YTg4ODRlM2Y0OTM2M2Y2OTdlODRjZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w1f5Kit5zCgmpLg2JPRyVJZci+M
IQqQ35W4xJPjcdKWQxd8JrkJcIrVH5fk01D9fVcemuEn0RokkA0ofoNf5nmgI7/M
cpWEwQzoVokrsi+JI9kvBkliWC2Dhp12QOT0Njf8AKpLBS90A39vYmVHdO2rTFO7
fXUAx+TfulBZx+IGBIt5QbO3o5FI3UGosivaofRyLG/3hWxj+6UOmT4Wq7Kz7UXI
Ef9mcQGQEWXiHu91wOWJ+77DuMC+LO/qNXh1seIkg/I6t1WQclVtbIkAcF33uqZS
P4FrNNYkQoN7Gdpz30bZ2of7SWcN4G6jd22h/xCi2PQu6kW5vV9IBI+8pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc/diAtsWskqIhOP0k2P2l+hM8aMB8GA1UdIwQY
MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt
ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi
LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNvdl1rm
9plTOoC00QSLEH7hn+pM7McMP8GZVyY2c1orFfdoNhAscKBy49WSXRhl+6UYfGmL
b2sYJjIPRCQYPz9qIDX+//okKMs6M36nd9WcPsekcTIenW5os8r5czphfd/m4EKL
nQ7+snA44MF/EzdRbSAqFih+uReAg5O3SHjT+Hu3NcCRyshB/xPpdsoGBE7BQSW5
jlAxdA+TzDZY40V5kWosiG4M+HCjn8mBoVdCy2nofa4Y/S+Ip4cFWkmu5cXQ6vtW
07lIzShuNwSkWBaUzMkT7leSZLDx9L4gLZQcgGSkwsEKQCZwJ5bhRihDHu+kG4f6
VQMhDlh521VQbg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:39:33 2026 by rpki-client