Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: 45CoiJEUUw9dSp779Rm6wcYMUHqV0UM4U7+Cod4HnFY=
Subject key identifier: 85:6F:8B:4F:DB:AA:18:A5:30:16:F4:E3:18:1F:A6:AB:71:E6:15:68
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 019D2A7284A145D6373759B378846E0B6103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:41 +0000
Manifest this update: Thu 26 Mar 2026 14:00:41 +0000
Manifest next update: Fri 27 Mar 2026 14:00:41 +0000
Files and hashes: 1: BwUOAUosbkGUtEyamqHZVYXCbwY.roa (hash: V018IqY7teR5n9bP9qOMX/vX2HfQD+CNCFUEpOx18cs=)
2: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: oc3UyO69ywNvGFlrmqOLxRSfSISCdo+JbrmCtaeCx64=)
3: xsfB_JfpX7GdwLyr4rcoKlNIeyg.roa (hash: hykg4tWFkgSD74YPm95Nlhl/vXekwDAwpTScfibWTu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:84:a1:45:d6:37:37:59:b3:78:84:6e:0b:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Mar 26 14:00:41 2026 GMT
Not After : Mar 27 14:00:41 2026 GMT
Subject: CN=856f8b4fdbaa18a53016f4e3181fa6ab71e61568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:88:6c:b7:94:1e:de:e5:00:fd:0d:cf:50:
c9:04:1d:3a:83:19:7a:ee:e1:c5:4c:39:43:df:40:
19:78:f4:be:54:4f:5e:41:62:f4:02:fb:99:fb:ef:
de:7f:9b:5f:60:f3:12:74:6c:a4:5b:17:f4:31:d3:
8d:05:e0:c8:80:a7:df:cd:af:77:9f:27:cf:d8:3b:
3a:13:fd:0a:96:83:e1:e6:65:72:f2:5c:02:23:b4:
a6:de:b0:4f:a9:78:72:e5:25:47:e9:45:32:8a:56:
f4:b6:66:27:09:4c:46:c7:99:70:04:c7:15:7d:07:
c9:ad:11:f8:ce:33:63:e7:a1:36:e3:15:b6:e0:dd:
5b:07:c2:d8:83:15:c8:77:d9:44:31:72:dc:a6:02:
e0:d5:f4:24:19:7b:fa:d5:21:65:e0:04:ec:05:bb:
fe:9a:b4:fa:cc:27:51:45:fc:a0:7c:4f:0b:a8:6a:
72:29:41:44:27:8a:cc:21:c0:b5:3d:60:90:48:30:
02:37:d5:82:8c:79:c6:90:69:e9:6d:dd:8e:47:d9:
f0:aa:d3:df:ec:25:99:a6:21:56:f1:2d:a8:df:c5:
5b:85:46:e6:84:f3:a8:91:b0:cf:a6:dd:b0:d0:d4:
58:a0:cc:47:53:83:eb:e7:48:b2:6e:5a:a6:32:9a:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6F:8B:4F:DB:AA:18:A5:30:16:F4:E3:18:1F:A6:AB:71:E6:15:68
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e3:ab:8b:88:0e:f6:9d:2e:0f:73:9c:b7:bb:76:89:55:12:
18:d7:16:ee:83:36:9e:ae:7f:d3:a2:33:7e:07:b2:2a:0b:77:
5b:94:91:91:fd:0c:52:fa:de:6c:3c:c2:9f:4f:fc:40:61:fe:
4c:40:fe:65:13:18:aa:5e:1c:9c:81:59:02:a9:fc:52:1a:56:
2e:bf:7f:5d:8d:ce:4b:3b:60:b0:3d:d6:15:3c:e1:f8:43:aa:
3b:2f:df:21:eb:c8:66:95:66:b4:2b:65:80:f0:84:c8:70:87:
19:37:ca:bf:78:86:73:68:9c:ac:04:b7:f0:49:7d:63:5d:4f:
be:43:18:a9:02:01:9b:8a:d7:1c:bc:a9:62:1b:08:8a:54:50:
28:76:f6:13:a4:6e:25:6d:30:32:6d:41:7e:e8:07:d7:d0:04:
fe:7a:e9:2c:8f:46:8d:50:ec:f2:52:b5:44:8a:21:99:04:52:
a9:59:9c:2c:f0:a9:92:79:68:96:6e:f8:0f:c1:0c:d6:7f:46:
c3:e4:be:76:c4:c6:1b:75:98:01:64:85:66:0f:e5:e1:ee:90:
1e:ec:30:ae:20:38:45:31:c4:90:82:6b:89:0b:cc:e8:4e:54:
c8:3c:7b:d4:7c:c5:47:ed:46:2f:08:b3:5c:0a:01:5d:d9:cc:
6c:1a:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:54 2026 by rpki-client