Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: sh6PjdGhim8ES0KKV4HZgY1s2H4A3oy4I3DgI7yqmxQ=
Subject key identifier: 95:B9:B8:64:0C:99:9B:8F:8B:D4:B4:29:62:5F:13:2E:46:1E:67:BE
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 019D29CDF969C8B4466EA14416FDA145EC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 1173
Signing time: Thu 26 Mar 2026 11:00:57 +0000
Manifest this update: Thu 26 Mar 2026 11:00:57 +0000
Manifest next update: Fri 27 Mar 2026 11:00:57 +0000
Files and hashes: 1: LoExB3SySSOSvyA87CRCDE0Kt-g.roa (hash: qT5LlbFo1gEnOuh8HOShKNDJzx+51hr1jlt2Cq6Q304=)
2: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: LCHXeljiR13C3owgH6TSWxO4zHnL5+wZCu3nKybCFok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f9:69:c8:b4:46:6e:a1:44:16:fd:a1:45:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Mar 26 11:00:57 2026 GMT
Not After : Mar 27 11:00:57 2026 GMT
Subject: CN=95b9b8640c999b8f8bd4b429625f132e461e67be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:47:0c:64:96:bb:6c:41:58:10:a6:81:b2:
37:9f:dd:92:2d:53:26:6a:68:d7:53:a4:aa:30:74:
64:dd:d2:26:01:32:97:2e:5c:4f:fd:eb:5c:38:aa:
77:fb:13:aa:8f:94:71:ae:f3:8f:e7:5f:29:12:76:
2e:be:df:8a:0c:b4:63:95:ef:cf:98:b1:97:fb:66:
a9:d9:8d:b8:0b:50:12:d8:4b:4e:23:56:2c:d9:22:
79:a6:6e:43:1c:bf:02:28:de:a6:0f:19:da:63:5f:
71:34:4a:a8:aa:6f:a0:72:a7:77:94:86:09:a1:40:
33:55:40:02:0a:a7:c9:46:5b:1a:0d:d5:1a:89:94:
1e:54:67:f7:23:b1:43:63:04:7a:8c:2f:72:9a:c1:
22:8a:64:ff:5c:8d:29:c7:14:4e:a2:d9:77:ad:b8:
ab:60:d2:68:54:d4:9b:13:dc:7e:e5:44:c4:9b:41:
7b:9f:da:ed:b2:7b:f8:16:4c:0f:6f:11:f9:70:48:
b9:f5:c5:a0:5d:d4:bf:cd:bf:1a:a5:25:d5:d3:e0:
eb:cd:78:3e:06:7d:1c:de:c1:55:06:ea:84:08:6b:
b9:65:0f:bd:61:7e:8d:c6:c1:31:11:6d:12:d5:fc:
00:20:7a:54:bb:71:15:6a:7c:18:a9:34:34:1b:51:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:B8:64:0C:99:9B:8F:8B:D4:B4:29:62:5F:13:2E:46:1E:67:BE
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:23:91:ba:68:4f:d4:5f:26:d6:53:68:a6:92:40:05:fb:92:
39:5c:79:7e:7c:89:1f:88:17:8a:5c:ed:cf:a0:83:d3:28:0d:
ef:ec:51:29:b7:a8:00:bd:57:d7:d9:c3:d0:6e:36:0e:e4:49:
ac:13:3d:47:ad:5b:5b:84:58:5b:bc:8e:06:d9:d3:0f:a5:2c:
d4:fb:bb:77:fa:f0:ed:83:c3:1b:11:cf:c5:75:b6:6a:6b:c6:
96:75:6c:c3:5a:7c:3a:9c:27:8d:f7:06:4c:46:6b:d9:8f:b6:
5a:6b:f5:84:fe:4b:c1:d6:e0:f4:61:e1:94:23:d5:f6:b6:80:
52:42:36:23:8b:81:ac:a1:5a:68:9e:dc:84:35:9f:2e:bf:38:
f2:09:5f:d8:97:74:ba:92:0f:cb:ce:7f:5a:34:f8:57:bc:b3:
ec:81:03:b7:cb:d1:f5:49:4e:09:61:92:e4:df:95:20:bf:4f:
9b:52:bc:cc:12:be:1e:75:47:80:5d:93:55:51:5e:83:09:cf:
7c:57:c9:c3:21:24:ab:0c:81:16:ad:c2:d9:4c:51:ac:53:86:
84:d5:1e:6a:30:14:c1:5a:28:f3:3f:d7:8f:d6:65:76:75:0a:
48:a1:24:1d:1c:ff:76:9d:9d:b9:f3:a2:f0:a7:c8:27:db:55:
b7:b8:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:33 2026 by rpki-client