Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: c1eXoLC3gBU3fZJWDqGxzsZ6CxbT4sCqBpVTSLcqdQE=
Subject key identifier: E3:7E:00:4E:27:F8:1A:35:B8:CB:44:DE:95:0D:08:5C:6E:71:01:34
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019F946D8B33B66188D49CA265B78EE25F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 14:00:34 +0000
Manifest this update: Fri 24 Jul 2026 14:00:34 +0000
Manifest next update: Sat 25 Jul 2026 14:00:34 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: Kd3pa0s1XNNOZpG3z/D8gIZr0+IJwYQYoY27tZfOKaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:8b:33:b6:61:88:d4:9c:a2:65:b7:8e:e2:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jul 24 14:00:34 2026 GMT
Not After : Jul 25 14:00:34 2026 GMT
Subject: CN=e37e004e27f81a35b8cb44de950d085c6e710134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:36:53:6c:ee:30:ab:53:95:96:10:5b:05:
aa:5a:77:10:48:b2:bb:d9:b4:85:44:c0:d0:c1:a3:
19:bf:c5:58:dc:40:10:01:e8:77:11:47:e6:2d:3f:
c2:7a:35:9f:13:2e:2e:b2:7e:f0:1c:5b:81:ec:70:
f9:ba:24:c9:dd:6a:ad:36:3a:5d:81:5f:78:b2:e7:
82:05:83:a3:3d:8a:61:f4:91:b2:d1:07:03:99:c4:
34:38:41:f2:4b:15:19:c1:21:6b:a5:33:12:02:17:
af:d8:be:0e:49:82:49:03:16:c5:91:b8:56:02:70:
d8:23:ae:31:87:b4:3a:21:88:fe:5c:74:6b:52:ac:
73:8b:89:07:82:90:88:7e:63:b2:69:1a:c0:94:a3:
0c:47:b6:6a:26:f4:85:15:cb:a6:6f:81:3f:c1:4f:
d8:75:2e:71:d7:b2:8b:71:5b:32:b0:fc:4a:5e:9d:
93:2e:b9:d7:50:8b:1f:b1:0b:c8:7f:49:87:e0:d3:
c7:c7:75:ba:31:53:d4:68:5a:cd:b2:56:4c:e9:78:
4c:46:ea:96:15:a4:a0:3e:b0:5c:9d:0c:42:26:7f:
5d:18:55:65:c8:c8:72:0a:39:00:ec:0e:c0:6f:57:
42:61:f8:58:71:45:e7:0d:c7:d5:77:d6:39:7b:21:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7E:00:4E:27:F8:1A:35:B8:CB:44:DE:95:0D:08:5C:6E:71:01:34
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:71:73:d1:f2:27:da:8a:c0:bc:51:6f:ce:92:ef:75:cf:0a:
ec:ca:60:1a:30:dd:79:7a:7f:9f:f8:60:93:54:d9:3e:d5:ad:
83:b5:64:57:70:0b:91:17:fd:0b:f5:2a:d1:9c:c3:60:60:0e:
18:fb:a3:30:b0:27:4c:2f:96:cc:8d:b3:90:8e:21:a5:a7:9e:
48:27:c0:07:82:1b:a6:e5:a0:1b:69:ab:09:f6:89:f5:51:39:
47:9e:c0:46:49:c9:50:e3:a1:0a:7e:d6:96:ee:f1:05:dd:5d:
eb:cb:ba:ae:6f:b7:0f:d5:26:79:35:8a:3f:da:67:8e:ec:7b:
64:c5:6f:e3:9a:33:af:10:68:bb:5d:b8:fa:56:39:c5:3b:2c:
73:54:28:58:87:d8:f6:34:6a:5e:b4:69:f4:00:23:e4:99:3b:
55:8e:b2:a4:56:5a:ed:a4:d3:ef:d3:f9:80:98:73:68:80:c0:
e6:1a:10:13:07:0e:21:7a:d9:98:f1:29:0b:f0:a3:4c:c6:ee:
0d:0e:29:cd:19:3a:a8:51:28:a0:e9:e3:77:55:ce:5a:09:7e:
78:18:76:91:54:bc:64:27:c5:98:1a:22:8c:08:dd:0f:2f:6b:
36:98:9d:73:39:b7:e1:5a:8a:1f:4f:bc:21:8d:6c:2b:8a:60:
3c:6a:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:29 2026 by rpki-client