Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: p7HdmrHraLUt3DWOvE6O8idGlGDCpzDfFMvKIKDtPkE=
Subject key identifier: 7B:2E:C6:8D:4D:8D:81:23:7C:82:27:5C:27:0F:9C:F4:44:D7:63:76
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019D284D3538C35CC7BCA063CE282217FFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0F7D
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: 1N+DqWc6u8AsTBrQss49Lq+mff3rgAXyPlpG9tyT1dM=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:35:38:c3:5c:c7:bc:a0:63:ce:28:22:17:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=7b2ec68d4d8d81237c82275c270f9cf444d76376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:ba:ec:db:0e:a3:15:d5:5a:18:0c:53:84:
b2:9f:d1:09:df:c7:20:db:29:d0:b6:20:98:41:a7:
c1:f5:8a:2a:ce:c3:56:7d:a8:38:a0:0f:b1:6b:a5:
9a:6f:9d:aa:a5:5a:31:a6:9f:70:11:c3:59:ce:cc:
fe:f4:13:1e:0c:17:cd:9f:af:b1:a4:6f:ba:ae:e7:
26:1e:79:5d:66:2d:31:85:88:d2:fc:07:11:c7:cd:
d6:20:f6:28:4e:34:6b:a0:88:41:80:0c:72:4d:4d:
13:66:81:a0:62:cf:87:f6:43:96:37:a9:14:4b:b8:
ce:45:b4:44:1e:ba:70:96:a7:ae:d2:cc:d9:8c:f3:
97:2c:97:f1:da:4a:4f:16:3c:f7:74:7b:ab:a1:76:
e2:42:20:e1:6f:26:b2:3b:3b:e1:ae:b0:6b:dd:76:
ae:d5:0f:15:6e:35:8c:4c:93:84:7d:19:e9:d5:60:
ab:f3:31:78:09:8c:f4:4f:d8:0f:45:8a:46:95:59:
88:ba:cc:ac:f1:22:e2:b5:bf:7e:2b:82:36:ba:4f:
0d:aa:69:3e:71:4c:04:98:af:16:77:67:42:89:d5:
c8:7a:96:54:bc:56:c0:54:81:88:97:3a:d5:66:60:
9e:a5:8c:93:22:ac:56:fe:df:77:ee:cb:93:97:1d:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:C6:8D:4D:8D:81:23:7C:82:27:5C:27:0F:9C:F4:44:D7:63:76
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:b2:30:e3:fc:d9:8b:e8:42:c6:b1:45:f6:b1:2e:bb:74:
77:4c:c4:6f:53:23:7a:36:a8:90:97:13:7b:2d:eb:6a:3d:90:
7a:cd:f0:6f:64:10:b8:c5:c3:c0:91:40:89:56:47:2c:b3:f1:
f3:5e:ba:65:30:f2:5f:df:f4:d7:54:ab:12:2b:e0:f1:b9:2c:
ca:66:53:7c:4b:46:89:6e:5b:76:45:db:f8:71:6c:78:aa:08:
f3:44:de:c1:88:7b:f7:e7:e7:59:2b:f5:3a:a7:ba:56:ac:01:
ca:5d:25:3a:2a:eb:da:a0:9a:b2:58:af:93:8a:9b:d8:35:bf:
15:06:3c:99:1b:b3:84:c1:d5:f6:af:c0:f6:d7:df:8a:36:92:
17:e9:d0:a6:44:63:57:02:ff:60:d1:85:c9:2f:50:af:9e:6c:
8b:ed:ad:8e:bf:d8:8a:35:1a:e3:f6:b1:bb:2e:02:ec:3f:76:
13:58:f2:5b:f6:d9:0f:76:e4:9b:72:38:34:d3:26:96:1d:c4:
d5:a0:7a:3e:d4:9a:5f:05:5a:38:28:a4:3d:ff:04:ab:84:50:
d8:93:ce:47:47:15:df:ea:5c:b9:21:85:31:db:97:63:90:c9:
a2:ed:1b:63:05:af:7a:c2:e9:0d:76:17:72:47:67:40:43:33:
72:aa:fe:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTTU4w1zHvKBjzigiF//jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2
NGUyMDIwHhcNMjYwMzI2MDQwMDQxWhcNMjYwMzI3MDQwMDQxWjAzMTEwLwYDVQQD
Eyg3YjJlYzY4ZDRkOGQ4MTIzN2M4MjI3NWMyNzBmOWNmNDQ0ZDc2Mzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oS67NsOoxXVWhgMU4Syn9EJ38cg
2ynQtiCYQafB9YoqzsNWfag4oA+xa6Wab52qpVoxpp9wEcNZzsz+9BMeDBfNn6+x
pG+6rucmHnldZi0xhYjS/AcRx83WIPYoTjRroIhBgAxyTU0TZoGgYs+H9kOWN6kU
S7jORbREHrpwlqeu0szZjPOXLJfx2kpPFjz3dHuroXbiQiDhbyayOzvhrrBr3Xau
1Q8VbjWMTJOEfRnp1WCr8zF4CYz0T9gPRYpGlVmIusys8SLitb9+K4I2uk8Nqmk+
cUwEmK8Wd2dCidXIepZUvFbAVIGIlzrVZmCepYyTIqxW/t937suTlx20iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsuxo1NjYEjfIInXCcPnPRE12N2MB8GA1UdIwQY
MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt
ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi
LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBmyMOP8
2YvoQsaxRfaxLrt0d0zEb1MjejaokJcTey3raj2Qes3wb2QQuMXDwJFAiVZHLLPx
8166ZTDyX9/011SrEivg8bksymZTfEtGiW5bdkXb+HFseKoI80TewYh79+fnWSv1
Oqe6VqwByl0lOirr2qCaslivk4qb2DW/FQY8mRuzhMHV9q/A9tffijaSF+nQpkRj
VwL/YNGFyS9Qr55si+2tjr/YijUa4/axuy4C7D92E1jyW/bZD3bkm3I4NNMmlh3E
1aB6PtSaXwVaOCikPf8Eq4RQ2JPOR0cV3+pcuSGFMduXY5DJou0bYwWvesLpDXYX
ckdnQEMzcqr+SA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:48 2026 by rpki-client