Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
File: LEC2qPqheuUxi1cmX4bqVcofSwI.mft (raw, json)
Hash identifier: SBpKY6jngo1IMxyyOltqp/g/J85/FjYOA8Ny3AE6aH4=
Subject key identifier: CE:EE:84:13:B6:A3:D5:72:85:32:71:8A:DB:2B:13:48:E6:E8:84:A4
Authority key identifier: 2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
Certificate issuer: /CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Certificate serial: 019E1CEB413248A9A2F4EDBCA12569E7DD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
Manifest number: 6E
Signing time: Tue 12 May 2026 16:00:40 +0000
Manifest this update: Tue 12 May 2026 16:00:40 +0000
Manifest next update: Wed 13 May 2026 16:00:40 +0000
Files and hashes: 1: Gr0wbsf4oUxk-h0Zfp6SPQjHzcI.roa (hash: mjnXAIcUpMVO0TV6dBNgW8JY1xLBZLbzGH2H/vpCwsw=)
2: LEC2qPqheuUxi1cmX4bqVcofSwI.crl (hash: bx4agrSoKIUCB62v9wjp1w9lvqEKnnlsCjnRO/iJyWE=)
3: duPR63kqpScZ8MTOguIaKUgqa0I.asa (hash: bDDWD3KpTW521dLPjK7bCjfrtCS1ptLIkeMJb4Y6yJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:41:32:48:a9:a2:f4:ed:bc:a1:25:69:e7:dd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40b6a8faa17ae5318b57265f86ea55ca1f4b02
Validity
Not Before: May 12 16:00:40 2026 GMT
Not After : May 13 16:00:40 2026 GMT
Subject: CN=ceee8413b6a3d5728532718adb2b1348e6e884a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ae:c5:2c:19:25:e5:3b:56:f2:8d:f1:a5:d4:
79:5b:b4:c3:38:c6:8b:fd:8a:9f:bc:6f:7f:40:ae:
6a:b4:3e:7a:8f:58:89:d6:b2:5b:f3:7a:c4:30:8d:
b4:3d:39:e0:a0:10:e0:23:f3:70:89:de:14:d6:91:
8f:2e:55:4c:4a:7f:2f:31:27:42:38:6f:dc:b5:1e:
f4:f4:24:38:b7:42:a4:ca:79:05:d9:35:a0:d4:74:
bd:0f:ae:20:20:91:1d:50:c8:bc:45:42:1e:59:6a:
91:16:8a:d6:0c:fb:a6:b3:b6:6b:92:45:11:4d:4d:
e9:a6:10:3a:b7:93:4e:25:14:78:c1:96:39:44:3a:
67:8d:f1:36:dc:1c:7f:2b:d3:d8:89:89:6b:99:8b:
d4:16:a3:bb:55:60:43:5f:78:ce:2d:24:02:66:41:
12:a3:72:c8:75:70:de:7f:8e:bb:1c:ee:52:8f:af:
c8:2d:df:bc:38:7e:8e:9e:82:e2:aa:7f:82:9f:a9:
ec:68:85:13:0b:82:fc:37:b1:c5:03:17:57:93:80:
e7:37:93:22:da:88:a1:38:a6:e9:48:d7:2b:06:d1:
2d:50:3f:14:6f:12:76:e5:40:7c:1b:49:f7:91:d1:
61:d3:54:81:fc:20:a6:1f:d1:a7:4b:19:b0:51:87:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:84:13:B6:A3:D5:72:85:32:71:8A:DB:2B:13:48:E6:E8:84:A4
X509v3 Authority Key Identifier:
keyid:2C:40:B6:A8:FA:A1:7A:E5:31:8B:57:26:5F:86:EA:55:CA:1F:4B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEC2qPqheuUxi1cmX4bqVcofSwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8d0d74-726a-4e6d-b06c-c86a8ff8d2eb/1/LEC2qPqheuUxi1cmX4bqVcofSwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fb:58:fe:70:2e:88:5a:21:e6:37:56:df:4e:d3:f9:3a:c3:
58:a7:3f:ae:4f:5b:3a:02:9b:64:22:ef:8f:f4:3a:b5:25:bd:
fa:13:89:a6:aa:8a:a0:db:fd:82:79:b7:48:58:39:5a:43:a6:
4a:1e:ac:72:73:88:83:cd:ce:3a:b3:25:59:7e:48:09:c5:84:
32:86:bb:11:37:d7:bd:cc:dc:ec:7f:98:c3:0a:7a:04:f0:6b:
58:df:53:d2:45:ac:0d:8d:bc:cc:7c:cf:86:28:f9:d8:d2:ff:
a5:cd:0a:5b:75:d4:25:8b:d6:97:39:2b:74:16:3a:fb:c0:d3:
6c:ee:b7:b0:18:ff:a9:c7:89:d1:d5:56:02:0e:cd:3d:b9:19:
7e:fc:45:3a:ad:85:de:df:bb:26:25:43:e3:6e:38:e8:92:6a:
6f:72:fd:80:3e:56:54:d0:09:0e:4a:cb:ef:0f:bf:a2:78:24:
2a:ff:90:e3:b3:7b:3e:50:e4:92:f5:e3:53:d7:1e:a7:c4:37:
bd:53:39:05:5e:51:66:9b:8c:71:2c:bc:05:b8:cb:4a:e3:4f:
48:5a:c8:45:ff:98:d7:e8:c6:f7:3f:d1:a6:5b:8e:0d:70:0b:
10:da:d5:25:6e:2f:ac:5f:24:44:9b:47:fe:ce:f8:1d:a3:46:
b3:22:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:38 2026 by rpki-client