Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: n+DpoQB4RWjLugZPdzk+0c7SfHYKO1adq3tKICyT9fc=
Subject key identifier: BC:1D:24:20:53:62:BC:58:71:C8:E4:11:A6:6B:9B:B3:04:9C:4C:63
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019E1DC74888BC04B260F59CFBBC81D40F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 20:00:59 +0000
Manifest this update: Tue 12 May 2026 20:00:59 +0000
Manifest next update: Wed 13 May 2026 20:00:59 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: dDZsC0GQLXgCk1j7wBdu4bbvbLoabcTeDSN8pjzgIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:48:88:bc:04:b2:60:f5:9c:fb:bc:81:d4:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: May 12 20:00:59 2026 GMT
Not After : May 13 20:00:59 2026 GMT
Subject: CN=bc1d24205362bc5871c8e411a66b9bb3049c4c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:de:f0:a7:a0:b2:77:e9:27:8f:71:ee:3d:
15:0e:c5:12:c1:14:61:f2:39:08:9b:4c:b0:50:12:
15:14:c2:2f:08:dc:8d:a0:c0:27:ae:c1:55:08:b1:
c6:56:bd:a9:a5:32:27:de:b1:f1:b5:d1:14:2e:32:
4c:83:f6:7e:d7:b0:2e:86:5a:94:e1:46:95:13:b6:
aa:be:f3:cb:c1:e9:46:74:04:f6:be:87:c3:f2:92:
ed:cb:e6:34:e0:29:e1:14:47:0a:ee:a1:c0:71:5b:
4f:a0:eb:52:b2:d9:38:c9:4f:06:39:de:65:ad:6c:
bc:84:a1:01:09:f6:e4:d2:e3:58:35:fc:b6:93:5a:
c3:26:bb:79:de:58:f2:5a:61:cd:06:11:39:6d:37:
58:1d:0d:f9:69:11:a6:12:84:4c:bd:93:b7:51:c2:
ea:37:57:b3:19:70:f9:0e:0a:0e:90:a5:34:e8:40:
97:99:32:41:bf:23:06:7a:eb:90:4b:e2:37:80:40:
8b:40:87:1b:e6:27:eb:fe:a0:ac:55:f0:af:a5:10:
6d:61:f3:d8:29:28:fd:3f:8f:21:ac:57:83:d6:b1:
9e:9f:42:b0:ac:29:cf:40:a1:d5:d6:59:15:92:7e:
8c:98:ab:d9:bb:25:09:29:ff:24:da:46:81:6e:15:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:24:20:53:62:BC:58:71:C8:E4:11:A6:6B:9B:B3:04:9C:4C:63
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:8a:11:db:99:80:9f:9f:a2:e7:18:76:43:45:86:6c:64:
85:92:97:c4:a6:03:53:bb:e8:ae:aa:e6:42:84:78:67:58:04:
40:98:2d:44:93:ad:d3:b2:24:77:c4:55:0e:7b:de:89:31:6d:
a4:6c:96:13:85:bc:10:77:0b:80:8e:59:8b:7a:f1:91:81:02:
70:33:15:b2:1f:03:f8:c6:6f:61:a5:26:13:8b:3c:d7:1d:5f:
6b:87:a0:da:1f:5c:ca:af:e8:a9:58:05:8b:73:0a:44:a0:c0:
f9:ee:87:e8:6f:e3:b2:07:28:e8:12:de:22:17:c7:3c:6c:47:
db:9b:cf:88:a4:19:f9:0d:1e:e3:72:ce:d7:26:1c:ef:24:e8:
20:ca:c0:da:b9:c8:b3:a6:15:8b:59:1a:d5:a9:2a:ab:ea:9b:
3b:87:b0:6c:d7:44:b9:dc:11:08:55:b5:33:f6:72:02:3c:1e:
b6:b4:5c:53:09:e7:ba:9b:04:9d:9b:69:25:53:4e:da:d2:e5:
58:04:1c:97:21:cc:f1:c0:03:fe:c6:fd:13:c2:08:71:68:d5:
65:83:4b:d0:8f:23:60:36:d7:b2:e3:09:88:79:cd:43:74:76:
80:23:61:84:fa:57:16:8c:13:be:ad:b6:78:84:8a:d7:de:d0:
f8:dc:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:32 2026 by rpki-client