Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: N2n/qaWOG/7hIwy043VZgNZ9lCZAtA9f4RB1yPH7aoE=
Subject key identifier: 4F:9D:0B:9D:20:3B:DD:AE:97:20:23:EA:22:4C:E9:05:EC:48:0A:24
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 01A0DB71B02250CD3160818A6521E7F21E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 02:00:55 +0000
Manifest this update: Sat 26 Sep 2026 02:00:55 +0000
Manifest next update: Sun 27 Sep 2026 02:00:55 +0000
Files and hashes: 1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: fMnS59lTPj4l9AgsP872QU9sQaQCmCnB8ejoEQSEmBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:b0:22:50:cd:31:60:81:8a:65:21:e7:f2:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Sep 26 02:00:55 2026 GMT
Not After : Sep 27 02:00:55 2026 GMT
Subject: CN=4f9d0b9d203bddae972023ea224ce905ec480a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:05:43:d5:85:6b:9a:28:07:23:b3:61:27:
2d:63:e6:98:79:06:f5:33:69:3e:f5:4f:7b:07:10:
eb:09:70:ce:85:4e:da:a2:12:55:e0:00:94:f7:14:
52:72:0b:fb:fd:03:b7:be:37:ac:46:9d:eb:06:45:
f3:b7:96:ac:0f:04:ff:da:1b:dc:1c:b4:c4:b6:9c:
06:74:9d:41:c0:ef:7e:3c:5a:94:6a:0c:7d:57:54:
f2:43:2e:94:80:17:78:64:71:d4:3b:4d:fd:65:6c:
c4:f7:99:c3:78:4a:41:d4:50:6b:d6:be:c7:ec:be:
51:b9:9f:ee:64:39:e3:dc:88:d1:ca:0c:70:92:4d:
ce:b3:8e:82:0d:f3:9c:35:62:73:88:e2:a6:6a:a3:
5b:71:cf:d8:94:7b:9c:e9:15:8e:74:a0:2e:7f:ef:
64:41:d1:b2:20:96:6d:56:f7:bd:0f:bf:65:5f:94:
d1:84:e3:aa:f3:58:df:28:73:ac:a0:7b:f8:95:48:
63:47:76:5b:5f:fd:a7:b8:d8:51:28:0f:46:ab:9d:
4e:89:d7:14:11:b0:e1:e5:d1:ca:61:3d:2e:90:3e:
cf:38:15:82:a0:57:0e:c2:b9:2f:3b:3c:82:ed:38:
df:d5:ff:75:bf:77:09:db:4e:71:dc:28:81:f6:d8:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9D:0B:9D:20:3B:DD:AE:97:20:23:EA:22:4C:E9:05:EC:48:0A:24
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:27:5e:31:6a:5c:c1:cb:49:ec:cb:9f:2f:8d:5d:25:01:b0:
dc:12:c5:e7:11:30:be:34:82:7d:e4:2b:a1:1d:34:83:6a:e7:
6c:22:4f:87:ed:e3:9a:89:08:8c:f4:2c:4a:e3:74:c4:04:65:
a9:a3:57:eb:06:39:ad:ae:ba:f3:4e:2e:57:5a:27:d1:18:44:
32:ec:f9:f9:0b:1f:08:f7:01:32:b0:18:f3:53:6d:84:6a:de:
95:45:83:59:5e:13:19:83:fd:54:b6:4d:23:19:19:e3:1b:e4:
77:59:76:50:76:c2:af:f6:1f:66:c7:1d:c6:3a:35:0a:1a:00:
b6:36:6d:a2:58:be:59:59:ee:33:fe:87:25:20:f9:ba:d0:c2:
de:f6:dd:96:62:b2:59:08:19:4c:40:bf:52:fc:55:cc:12:75:
22:33:d4:9a:c1:b2:a7:0b:23:7d:63:cd:51:b6:5e:9e:0d:9d:
1e:9b:a7:a3:07:70:01:7c:d9:0f:16:a3:58:ea:aa:06:3b:20:
0b:a2:7b:66:50:12:e2:0d:bb:2a:4b:19:3c:c5:9d:b4:89:6c:
41:9e:74:ba:92:7a:98:02:d3:b7:46:6a:eb:02:2c:5e:9c:54:
46:11:af:d6:b0:2f:23:91:51:6f:d1:08:9d:6c:7d:25:33:6f:
c6:00:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:51 2026 by rpki-client