Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: uucY1VfHLKgMm7/G8MWbeeCStSuH/ynawHym4iZl698=
Subject key identifier: F7:D2:D7:C9:14:1B:A7:46:EF:9A:7F:D6:18:C9:28:6F:92:64:B0:CC
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 01A1751518D8600177EB0F7B5CE86FE45D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 11B7
Signing time: Sun 25 Oct 2026 22:01:18 +0000
Manifest this update: Sun 25 Oct 2026 22:01:18 +0000
Manifest next update: Mon 26 Oct 2026 22:01:18 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: 1b4d/hISvXFZbQpDLhg/COrYHixDhfamvRzeO3IkjeM=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:15:18:d8:60:01:77:eb:0f:7b:5c:e8:6f:e4:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Oct 25 22:01:18 2026 GMT
Not After : Oct 26 22:01:18 2026 GMT
Subject: CN=f7d2d7c9141ba746ef9a7fd618c9286f9264b0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:37:a9:9e:0c:3b:fe:9c:30:71:7b:fc:ff:
62:70:7e:07:e4:ef:5d:87:3e:a7:f5:77:12:75:e3:
46:eb:eb:06:24:4b:27:56:c2:cd:e8:33:76:0b:bc:
b1:52:0e:4f:d1:b3:69:ec:a3:1e:f3:9b:bd:52:d6:
52:ab:0d:34:60:42:86:d0:60:31:4c:4e:75:a6:29:
bf:97:a2:83:bf:32:16:16:7d:3f:1d:4d:1a:82:51:
80:c8:a4:d1:72:ce:ae:c5:65:f7:dc:d8:e2:d0:4c:
85:81:1a:4c:f4:73:52:12:5c:e5:7c:c3:bb:49:31:
b6:1a:63:5c:ac:6b:e0:ff:bb:0b:45:40:5e:f2:99:
34:c7:82:a4:eb:b4:0c:69:c5:dc:2e:f9:dc:93:fe:
53:9a:9e:11:47:2a:d0:81:90:73:d2:62:f5:1b:da:
b1:e6:75:43:82:18:1a:98:06:18:9d:6b:f2:d4:ac:
e9:d1:69:62:1f:e9:b1:ab:fd:4e:2f:8f:b5:56:af:
5a:ba:94:fb:9c:ce:37:95:b1:30:6e:68:de:f6:92:
52:31:db:c9:24:99:db:09:e8:d9:33:c3:c7:4f:06:
9a:58:a4:d2:19:46:eb:fe:6f:e6:8b:da:65:55:2f:
f6:db:0a:d2:4d:d5:b5:16:dd:2d:32:2f:3a:02:4c:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:D7:C9:14:1B:A7:46:EF:9A:7F:D6:18:C9:28:6F:92:64:B0:CC
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:48:18:27:ac:56:84:6e:98:83:be:33:48:73:f5:1f:1c:
23:ab:41:44:83:73:95:c8:2c:77:f0:35:6e:78:84:0a:da:93:
63:7e:20:9f:3c:bf:ab:1f:61:92:3f:93:3a:de:2f:a7:f1:7d:
56:4f:3c:9e:3f:62:d5:4c:28:7f:ea:06:ca:1d:d3:61:a4:a2:
e1:33:2f:ee:a8:3b:1f:74:c7:a4:ec:87:ab:f1:5a:73:da:69:
4d:e2:ab:5b:f0:57:22:97:4f:f3:d7:a8:02:01:d4:f6:b2:7f:
9c:16:98:42:48:8c:84:a6:ff:da:5c:3f:94:41:3c:3b:41:fc:
fe:b9:52:62:db:70:f3:fe:89:1d:85:76:22:82:47:88:dd:08:
99:00:42:48:6a:e3:c6:8c:d7:dc:c0:da:19:f2:ff:26:43:7f:
77:98:a2:70:9f:b6:b6:5e:f6:ff:7b:16:78:56:40:1a:cd:ef:
81:b7:1e:ea:fe:c5:da:6f:1e:e0:12:7e:e8:4b:82:1b:ec:6d:
34:d3:52:b5:f0:2d:5d:d2:98:26:c1:c2:25:da:52:55:9c:b8:
55:cd:d5:a7:2f:5c:89:68:a1:18:b8:d8:9c:8f:93:99:8b:f6:
e3:fd:4f:fa:15:af:9f:0e:ec:0b:f1:96:b9:48:fa:86:b4:06:
9d:a7:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:34 2026 by rpki-client