Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: Par6SnbwA4k0V5W7I4xb6sqwZMvPeJ1KBNQu+1V+y28=
Subject key identifier: 8D:6A:89:69:60:0E:D6:3F:F7:7C:7F:8E:9F:BE:E2:9C:37:65:C0:03
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019F1AFACDE3362B812EB60DCCA3175E86BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1988
Signing time: Wed 01 Jul 2026 00:01:12 +0000
Manifest this update: Wed 01 Jul 2026 00:01:12 +0000
Manifest next update: Thu 02 Jul 2026 00:01:12 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: pZi/rxgU2rlWgI2PcnIiAvnHu7ySemFAIGp4C0Ka42c=)
2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:fa:cd:e3:36:2b:81:2e:b6:0d:cc:a3:17:5e:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Jul 1 00:01:12 2026 GMT
Not After : Jul 2 00:01:12 2026 GMT
Subject: CN=8d6a8969600ed63ff77c7f8e9fbee29c3765c003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:16:0e:81:46:d7:f1:5f:6b:90:21:12:8d:
c2:0b:26:e6:cb:9e:6b:57:0b:3b:12:91:d9:10:8a:
ea:7d:57:57:44:b1:57:20:1d:74:b9:28:31:8f:e2:
1e:4b:f6:f9:d1:6e:d7:5f:69:e7:e0:6a:66:34:7c:
a5:09:1d:84:e9:b0:6e:f8:c2:2d:b2:3f:6c:09:bd:
c4:e5:6f:99:f3:8f:12:7c:e2:44:fa:d3:f8:f1:07:
db:ea:89:ca:23:8f:15:a4:7b:a4:d4:b2:d8:c2:25:
61:80:12:a6:ab:c1:24:f7:79:fb:fd:ce:2d:7c:1b:
a8:37:9f:24:fa:97:04:7f:a5:a3:36:e6:b3:30:81:
f2:6f:f8:46:9f:e5:08:95:2a:57:53:ac:98:c0:3f:
0f:5a:da:75:17:35:0f:0b:18:76:dd:9c:42:d7:ac:
5b:d6:73:35:ec:a8:5e:25:35:85:1f:ca:f1:1c:85:
bb:8c:2b:a2:0d:0d:4c:e7:be:05:6e:ec:7a:39:c7:
66:1a:9d:09:af:c5:c4:df:de:ad:2b:a2:89:2f:cf:
40:2a:20:31:4f:27:67:17:e3:75:1c:8b:ee:cd:d8:
ca:e7:90:5b:ec:1d:19:75:10:53:85:f7:9e:be:32:
57:87:5e:18:d7:d0:6d:fb:13:9d:cd:81:ed:16:50:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:89:69:60:0E:D6:3F:F7:7C:7F:8E:9F:BE:E2:9C:37:65:C0:03
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a6:fb:75:3f:4e:f1:ec:e7:43:6a:68:71:a1:95:31:c9:3b:
0f:45:66:74:5f:2d:d5:af:29:da:9b:04:ce:fe:d0:4e:ad:89:
47:f0:59:c5:72:2c:91:47:8b:42:8d:ee:c0:8a:8b:48:97:85:
f8:87:bb:ea:02:84:9d:54:eb:8d:9a:64:84:3c:86:a4:95:94:
50:7a:a9:b4:0d:7a:f7:30:27:40:95:be:c3:17:9d:dc:fa:e9:
c4:19:83:d7:0e:56:a6:10:dd:f7:5f:fa:56:9f:88:48:ff:b6:
68:d5:00:a1:17:6d:1e:cb:30:23:b5:10:6b:79:6f:f2:d3:b7:
fb:8d:b9:25:14:c5:00:d0:69:aa:97:e3:29:59:6c:af:18:cb:
54:94:53:75:e3:a5:49:80:f0:56:80:16:26:9c:f3:a0:f7:be:
f4:df:0a:b2:db:1f:62:ea:4d:61:be:f1:65:82:34:ec:68:41:
1d:ce:70:dd:cb:77:6e:fd:a9:34:af:b4:3a:b9:63:fb:07:df:
19:bf:1c:19:73:50:93:0a:3b:e3:02:42:ee:c5:b1:ff:40:bc:
f9:ae:1e:5e:2a:b7:eb:71:9e:cc:ac:76:35:42:c2:3f:1c:e4:
81:77:43:75:21:64:5b:cd:ac:b6:45:b1:ec:9c:d5:f8:07:5b:
79:5b:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:32:34 2026 by rpki-client