Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: NThZ2bZCTf3H7RIG73/Kh6G0PymWRAxK+1+15wSAKls=
Subject key identifier: C9:61:46:56:29:3D:BB:FB:F9:8B:12:A8:49:AE:1D:2D:5D:59:F8:B0
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019E216DA15D20BABF1D41C4B21B6538A5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0FFE
Signing time: Wed 13 May 2026 13:01:33 +0000
Manifest this update: Wed 13 May 2026 13:01:33 +0000
Manifest next update: Thu 14 May 2026 13:01:33 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: HJL0ezY9uUBE6EB5g9tfAWgaQsq83z7vHH+dCCOCupw=)
2: TA0cz_6zsJUKfNluQZhCxktBkLY.roa (hash: uvzonztC0nUJaKss/c/7QmJOjzTq+4kXZeDu1iN/DMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:a1:5d:20:ba:bf:1d:41:c4:b2:1b:65:38:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: May 13 13:01:33 2026 GMT
Not After : May 14 13:01:33 2026 GMT
Subject: CN=c9614656293dbbfbf98b12a849ae1d2d5d59f8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:cf:e6:75:0b:ea:8d:c4:e6:34:9a:a6:9b:
b0:cc:27:b7:53:94:5e:3e:74:9a:4f:36:5b:67:86:
34:64:ab:dd:ce:59:7b:53:65:85:54:b5:08:38:8b:
a8:61:4f:88:b0:5c:30:75:eb:ee:97:c4:16:a6:9b:
3c:45:de:7a:77:ae:d5:6f:8b:33:26:0d:45:af:d3:
a5:21:34:f8:01:55:6a:e1:a7:36:46:d6:c3:f7:9d:
33:8c:e5:d7:39:bf:3d:bb:86:68:54:28:11:c9:7e:
4b:b0:a2:30:d5:13:3b:7e:1a:bc:1f:5f:da:13:8d:
b2:08:a7:17:f4:e3:75:6b:d0:76:64:d9:24:16:74:
b3:4f:41:c9:eb:0e:3a:52:5b:53:0c:98:2e:b8:63:
85:98:56:e9:eb:55:8d:ac:3b:2e:2b:1c:c6:e5:ac:
23:4a:ce:2f:4e:70:83:44:2a:7a:2d:cb:40:76:21:
bf:a2:60:4e:53:3a:65:d1:35:b7:ba:bc:ba:33:d2:
fa:75:63:47:55:8a:30:1d:43:7a:b0:5d:ce:1b:95:
58:f0:76:bf:13:f8:2f:f9:1a:7d:ab:79:1f:ed:02:
09:bd:6f:93:e9:f0:c6:0a:6d:3a:f1:8e:5e:08:4d:
5e:cc:d0:ce:29:68:4c:63:e2:b7:bb:b0:16:07:bc:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:46:56:29:3D:BB:FB:F9:8B:12:A8:49:AE:1D:2D:5D:59:F8:B0
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:68:ae:83:98:56:dc:04:1c:92:2e:13:a9:d8:d2:6a:2e:33:
f9:58:19:61:19:27:95:e3:8e:ab:15:f8:6a:b3:64:08:ee:65:
da:d1:38:de:c1:e7:be:30:f5:ac:44:48:c7:06:65:2f:7e:b1:
46:b1:d2:d9:a6:b7:cd:8d:5e:f9:6c:88:ac:2f:97:6a:8c:67:
09:00:ec:8b:db:a8:38:b6:46:80:dd:20:57:00:04:4f:3b:17:
ac:2a:f6:a4:39:1c:16:59:fd:24:34:fe:37:5c:d2:98:a1:1c:
f6:8c:3b:87:c6:58:5f:92:ce:69:a5:e1:2c:d4:1c:10:13:74:
50:4c:36:91:ee:98:e2:8f:51:d0:d4:44:91:ad:13:aa:c7:a4:
af:b6:c3:91:c1:c6:df:9d:73:5d:7a:41:85:73:b2:4c:d7:da:
03:22:91:ba:0e:62:18:96:18:2c:f9:12:af:9b:86:20:6f:06:
6b:d6:db:ed:b6:fe:3e:b5:a3:4f:c8:97:9c:f9:a6:dd:29:6e:
b7:fd:c0:ca:52:2f:90:77:01:8d:bd:a5:2a:2f:fd:9d:d2:e5:
32:fd:a5:b0:8b:8a:3b:d8:cd:dd:26:a2:99:27:d4:9a:3a:a8:
74:78:0c:92:b5:fc:50:20:d2:09:2e:94:83:5a:ae:2b:16:f1:
a1:e7:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:59 2026 by rpki-client