Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: VpRgVsYoizwHflk1P2OWpNTpOmqMLyLXzKrKMKqM+Bw=
Subject key identifier: 0E:69:FD:B1:0C:49:4A:87:DB:80:2D:FF:4C:F5:D6:84:DD:1A:4B:9F
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019D2696191A974D780711D147D6D4FA552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: 1nRrxRU77smaD7f3KDKdztrHMS/uqDy3U0CtpNCOQ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:19:1a:97:4d:78:07:11:d1:47:d6:d4:fa:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=0e69fdb10c494a87db802dff4cf5d684dd1a4b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:1a:cd:9d:ae:99:37:df:76:71:a6:cc:a0:
86:8e:2d:ec:33:df:2a:cb:8f:46:26:23:41:c2:ce:
03:e2:a9:5a:6e:59:f6:11:06:2b:e8:30:d6:bc:f6:
08:02:18:a6:17:31:ce:3d:4b:4f:43:08:3e:ae:4b:
91:53:5a:ca:48:9c:64:f1:d0:8e:dd:c4:ff:78:30:
61:4a:df:c4:da:88:c0:07:15:78:2a:83:a4:96:43:
8d:bc:61:6c:08:c4:53:79:bb:1d:a2:2a:e9:d8:51:
33:8b:fa:0f:e5:2e:ed:a5:38:7d:4c:51:77:91:95:
98:27:6a:af:3b:de:98:e0:b6:03:38:5d:8c:00:e7:
d8:66:8a:d0:3c:6e:3f:d5:67:5d:52:e4:59:44:af:
2d:76:ec:aa:57:1e:b8:c9:3b:ce:f5:5b:b6:e5:0e:
39:e1:86:d2:ac:6f:03:54:5e:3e:ad:64:8c:cb:cf:
2c:b2:68:3d:96:f0:a0:26:c1:52:d7:0c:f6:9c:70:
82:ac:b7:c1:0f:18:7c:87:57:e0:2f:7f:13:57:3a:
2d:0b:67:85:ec:8f:41:df:b7:2b:3b:23:b8:85:28:
ce:9c:b2:05:1a:09:64:6c:d0:14:dc:17:16:d0:89:
81:dd:60:c4:69:86:18:cf:fd:78:86:45:38:04:61:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:69:FD:B1:0C:49:4A:87:DB:80:2D:FF:4C:F5:D6:84:DD:1A:4B:9F
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:30:d1:98:35:99:d8:23:be:a6:00:51:9f:cd:3f:4c:1b:d2:
86:8b:fe:d0:70:23:fc:2e:99:4b:8d:ca:0f:68:e5:69:df:b2:
5b:16:60:b1:ab:27:ff:ce:41:87:a9:1c:53:81:0c:e9:42:16:
21:30:1d:a5:0a:6e:5d:db:4f:09:fd:f6:ab:dd:ea:e4:83:c9:
56:91:43:df:83:93:de:3b:40:51:33:8f:a0:63:bf:73:05:d4:
79:b4:d0:f3:36:0a:a7:d0:dd:90:47:6a:de:83:4c:67:0d:fa:
68:08:84:03:ae:92:72:40:03:bb:8b:7a:9b:78:88:63:48:7a:
01:59:98:77:1e:15:f1:e2:26:06:15:57:73:66:07:dc:71:d3:
71:01:5f:ec:5b:07:c6:b3:36:1c:76:a3:8c:bb:75:02:3d:83:
9a:8f:a3:e9:c4:b1:13:64:19:54:5f:3b:3b:5a:b0:42:15:4f:
10:e0:4c:d2:79:98:f3:ca:f9:5a:c4:2c:0c:bc:36:8f:b6:84:
83:6c:04:ea:98:e9:ee:ad:63:1b:99:71:9e:a4:8a:45:ae:9d:
c3:f7:cb:6c:52:e7:92:87:d3:b9:b0:d9:4a:0f:68:af:2f:b9:
c7:d5:74:30:4b:49:bc:6a:5b:63:14:19:69:61:59:fd:89:db:
87:6e:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:58 2026 by rpki-client