Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: whthq49w+t1zE57SvIejXtlXPzcNmLx+ifT/TNdsg7k=
Subject key identifier: F3:C2:C8:6E:B2:0E:97:92:78:07:BA:99:34:48:C4:F3:38:75:6C:81
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019D28BB3DE10BBEDA66E549D7F2EA023866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: HPe9hoXg2J7NwYkWp1ulbJfIvuAEA9qod8iBpmoV1jE=)
2: mErxX7o9KOjw8GdLWTS3K7g0Gvw.roa (hash: 57yv7/TrVuuZh6M3vcjM71XDa4tykmDTs42OjrfBYGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3d:e1:0b:be:da:66:e5:49:d7:f2:ea:02:38:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=f3c2c86eb20e97927807ba993448c4f338756c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:b8:e4:3c:d5:f8:c6:02:39:d3:67:6c:ef:
03:40:67:ab:bd:ed:2a:6e:ab:64:58:d2:7e:80:8a:
7c:b0:80:be:06:78:8b:80:3c:b5:0f:a3:94:c2:3a:
a4:2b:10:19:c8:ee:2f:92:90:4c:78:8a:22:d0:93:
29:4b:d6:be:18:6d:7b:6a:16:34:93:14:1f:47:5f:
12:aa:fd:5e:ca:ea:7d:b8:9a:64:50:ba:d0:e4:f5:
2c:a8:e7:24:05:e5:f0:cc:9e:8e:d1:35:40:11:ff:
0e:c5:13:af:dd:a5:2c:4e:9a:57:7b:95:66:41:78:
1d:d8:b3:14:b7:b2:43:36:63:e4:55:ff:24:58:a4:
4d:c1:ee:2e:01:d3:86:55:a0:53:b0:70:d2:6d:b7:
a1:b9:54:ab:1c:65:22:7a:fe:07:9e:6d:44:2c:29:
0c:46:42:35:c2:47:a9:28:a9:4e:6d:eb:3a:4e:6f:
77:46:24:d9:35:e4:3b:d1:3d:e9:bd:84:cb:eb:64:
3e:c0:6e:b4:44:f2:8b:7f:a9:71:62:61:67:31:0b:
bb:a6:d3:90:ec:b6:b4:ee:81:37:5b:e8:bc:f3:b4:
65:d0:39:b9:f1:a9:7f:19:84:ef:c4:a2:9b:b0:22:
34:3e:c9:81:67:5f:17:18:bc:79:49:f7:c9:fe:dc:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:C8:6E:B2:0E:97:92:78:07:BA:99:34:48:C4:F3:38:75:6C:81
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:aa:50:d9:c8:4c:f2:60:a9:4e:31:77:ac:0d:5b:fc:26:62:
9f:37:2e:75:41:d9:2e:22:04:67:7d:e4:35:55:66:e3:2a:ab:
d6:12:8b:28:4c:62:3a:a2:3e:9d:64:1b:cf:3f:fd:a4:5a:4c:
24:a4:db:2c:f7:6a:e3:a7:9f:a4:51:c8:19:8f:17:87:b9:20:
e8:c1:e7:52:55:79:18:73:7e:20:fb:98:14:87:9e:4e:c2:d8:
7c:33:02:43:42:aa:07:92:3d:0b:b3:90:b2:61:87:b1:cb:32:
6a:cc:64:ec:17:ba:ee:73:b1:41:6c:ac:40:c4:6a:9c:f5:8f:
bc:d0:68:10:eb:9c:2c:6e:ca:d7:ae:0d:32:fd:a1:f2:b9:52:
f3:10:5c:15:43:42:fe:fa:d1:4c:f2:a3:ee:f6:51:94:27:52:
10:01:6b:10:07:d5:d7:f4:25:3d:ae:e6:a3:11:c5:23:34:2e:
e3:b5:2e:3f:2f:fc:09:e7:5c:00:7f:9b:4e:30:6c:54:26:da:
94:93:56:4b:01:ec:0b:05:53:23:61:7b:aa:e6:3e:21:23:a4:
34:86:be:77:18:61:b7:4b:b0:3e:ec:70:87:0e:22:e1:54:55:
72:0b:a4:83:4f:24:b3:91:3c:c2:2e:b6:47:b1:21:ba:d7:3a:
33:51:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:13 2026 by rpki-client