Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: n+0ch5Tr9lbIjFB5OKeImZiC2THJlvTIIR6aocjWJxY=
Subject key identifier: B4:4A:2F:B6:38:DF:81:31:AD:39:93:89:10:84:26:5F:A5:8D:FA:D0
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 01A178F1904142085F3288560374490CA278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 11B9
Signing time: Mon 26 Oct 2026 16:00:59 +0000
Manifest this update: Mon 26 Oct 2026 16:00:59 +0000
Manifest next update: Tue 27 Oct 2026 16:00:59 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: TtMhwXtDHYbDMf8v7kbmJyTfFu4Z+GHCpUakIOzfOk4=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:90:41:42:08:5f:32:88:56:03:74:49:0c:a2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Oct 26 16:00:59 2026 GMT
Not After : Oct 27 16:00:59 2026 GMT
Subject: CN=b44a2fb638df8131ad3993891084265fa58dfad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:ae:9b:b1:d0:89:32:5a:8e:34:01:16:14:
41:46:ff:9f:3e:e7:d2:2f:6d:23:30:2a:37:e7:aa:
8b:0b:83:46:d1:9d:a8:7e:82:74:6f:a6:3f:a1:e3:
d1:62:fc:f3:3f:55:ea:98:b5:51:8a:41:63:59:c1:
9f:5b:d3:d1:cd:53:a4:eb:c1:18:ff:f7:8e:44:1d:
e6:7a:79:eb:42:e8:03:b0:ff:86:a6:6d:ae:43:fa:
6e:4b:58:1f:ab:b8:1c:97:4c:ca:48:8a:a1:1d:1c:
05:36:56:8f:28:ad:d3:cb:b5:da:de:1b:3d:e6:52:
30:cd:99:f0:6a:e8:51:c0:8d:58:4d:94:d2:a9:5f:
69:e7:fb:23:31:6f:93:13:12:9d:fb:43:bd:c4:fe:
c8:fe:ed:a1:32:0d:fc:56:a3:3e:e6:68:a0:c1:33:
3d:a9:06:34:dc:ff:85:42:d3:ff:62:ce:e6:da:47:
72:e6:c5:04:08:24:c1:f2:d1:56:3f:8a:d6:df:a9:
3b:d6:63:be:fe:b5:be:71:f2:15:bd:71:fa:56:ec:
23:97:ae:5d:12:f5:18:f3:a9:1b:df:35:0f:d1:ab:
02:04:43:42:1d:3e:f4:31:93:85:97:2a:39:71:db:
0a:c3:bf:ee:2d:7e:09:c4:90:ea:a3:a0:c4:d6:47:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4A:2F:B6:38:DF:81:31:AD:39:93:89:10:84:26:5F:A5:8D:FA:D0
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:a7:bd:c8:32:50:d0:c2:55:35:b3:15:19:f6:47:78:99:
11:35:32:c7:98:68:d2:00:50:f2:c2:e3:bc:1c:85:cb:71:07:
09:64:cf:e5:bf:85:43:06:fb:1d:70:ed:19:61:53:aa:61:37:
fc:04:f0:56:47:6e:de:aa:b0:3b:fa:de:da:cf:29:ac:05:c0:
64:7a:47:59:6f:66:97:14:b3:55:49:4f:af:7d:6a:5c:68:9c:
ed:21:30:8e:e2:d5:a7:9b:00:bf:6b:de:1f:f1:71:fa:01:5a:
99:a5:6c:cd:f2:2b:d5:b6:ba:aa:c7:42:d3:d5:0c:99:76:a0:
9f:cb:34:4d:c6:13:5f:76:af:a5:11:40:ea:b0:dd:05:44:a4:
77:d8:f0:ec:ad:fc:7c:d5:c4:fe:82:40:f8:f1:bb:60:a8:a5:
78:61:e8:0b:c8:3a:07:eb:85:b6:b3:40:d4:a6:35:f1:6f:49:
2c:81:d6:9d:26:92:3b:5c:f4:c1:9f:45:1c:79:b2:81:72:ec:
9a:e4:ed:ed:b3:11:db:20:ca:c4:19:26:97:da:d9:bc:fc:01:
3a:7f:cd:4f:ee:4f:e7:6c:ba:01:a3:16:ed:71:d8:d7:37:6a:
b8:85:ff:f5:4d:51:23:29:d7:38:c3:be:89:f5:a5:8d:e3:8d:
1b:47:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:32 2026 by rpki-client