Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier: GpC3dflMbM728uXEN1/Qiyto40vKY6JgprPyFfZzYR0=
Subject key identifier: 17:53:E7:BA:B2:5D:35:16:00:2F:FF:1B:7E:B0:2A:3A:42:57:56:2B
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 019D273B3C812609B918FFD6FED2A4EF439D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number: 0C95
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: BnU6303K9m+1MEEpnoANlYGvQtyadtuEAEs0qijKdek=)
2: y8oZ66nLHzO58eQvPIRpmWAPl7c.roa (hash: L/V2Ozu3PD9MBYyFc1nynxKrWqd8IdYQzQ81hC8pp8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3c:81:26:09:b9:18:ff:d6:fe:d2:a4:ef:43:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=1753e7bab25d3516002fff1b7eb02a3a4257562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:1c:f8:15:d9:ee:a2:eb:6d:24:85:a1:ba:
17:13:5e:e7:48:22:d8:18:19:83:b7:bc:80:af:18:
43:ee:c2:54:48:71:21:f9:69:a0:e7:e4:71:28:8e:
71:ed:21:47:17:18:c9:3f:87:7c:3c:b3:9a:81:8d:
08:45:12:90:58:fb:e4:38:6c:f4:fb:84:01:f9:0e:
05:fb:c9:3e:fe:17:d3:bd:b3:51:ee:38:36:f4:9a:
c7:06:b3:06:70:68:24:61:b4:71:c6:e1:d5:52:0d:
21:13:8e:bd:14:5e:5a:8e:c5:da:e7:40:bf:a8:67:
17:2f:35:5f:2b:b1:a7:04:be:c1:7c:27:4f:ba:c5:
9f:7c:49:c5:2e:f5:2b:84:b3:f9:18:de:b6:00:83:
22:b0:96:63:26:d6:d4:f3:69:ac:f3:a0:55:96:d6:
f5:96:a9:88:bc:5d:8f:7a:d9:30:57:16:44:75:d2:
d9:b6:e9:bd:7e:4a:b7:0b:41:15:ba:6f:a9:48:28:
19:b5:2e:3d:f9:10:6e:b9:33:3f:db:d8:79:ee:4d:
5d:24:ef:ea:5a:5e:b5:89:60:04:fc:97:25:b6:a3:
3b:48:1f:b1:45:fc:00:f2:27:3a:50:f1:ad:82:10:
74:62:e3:37:c0:f0:05:02:3c:54:21:be:05:65:cd:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:53:E7:BA:B2:5D:35:16:00:2F:FF:1B:7E:B0:2A:3A:42:57:56:2B
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b1:ad:04:25:f0:b0:68:b3:95:de:70:77:22:56:3c:cd:10:
06:67:27:27:f0:9a:c4:f1:11:4b:fd:14:1a:8e:16:1a:5a:7e:
2a:a5:9f:5f:1c:4a:86:b1:2b:3e:41:03:c7:5e:13:25:8d:b7:
2b:84:c0:54:f2:ce:8c:89:db:4b:0e:0d:e6:77:0e:46:29:07:
6e:24:a6:fc:fe:06:88:50:a0:8c:60:4a:7e:d7:a2:5e:de:26:
62:44:46:9e:a9:b0:11:1a:75:01:c6:9b:f5:72:04:cc:9d:35:
b6:21:e9:d8:80:eb:11:54:91:c6:0c:b1:d4:10:36:56:52:66:
45:f0:f4:36:5c:21:4b:e0:6d:83:cd:08:73:72:bd:15:3a:39:
73:14:8f:43:2f:5f:26:61:0d:54:12:31:a6:10:f2:56:03:6e:
91:ab:e7:58:79:5f:ff:22:a7:1e:69:fe:b5:b9:2c:7a:80:b8:
04:49:c5:0e:8d:85:72:d4:85:29:1c:3f:63:75:f5:cc:dc:c7:
a4:4e:9b:03:8a:95:16:fc:48:50:55:88:dd:78:49:6e:dd:67:
53:08:40:46:ad:66:6d:ae:8a:0a:cb:7b:29:96:2d:cc:39:96:
a4:9a:a4:c7:0d:7d:88:4b:9e:45:07:92:b4:23:07:7f:c6:67:
cb:27:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:16 2026 by rpki-client