Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: SwqnsTCA+5PaPtjDhqSYS0xYzfcFNB3fZ6JVDS+F40g=
Subject key identifier: 6C:2B:F1:01:0D:10:5B:54:C6:FA:74:3D:C5:D9:AD:D4:45:6D:D1:EA
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01A1035BB69217026A4A714B4CAD4DB0CFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 20:01:44 +0000
Manifest this update: Sat 03 Oct 2026 20:01:44 +0000
Manifest next update: Sun 04 Oct 2026 20:01:44 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: EmqPQPjsvPsrwGs7IjYotQIluok9bs+NFiZkBdVsgEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:b6:92:17:02:6a:4a:71:4b:4c:ad:4d:b0:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Oct 3 20:01:44 2026 GMT
Not After : Oct 4 20:01:44 2026 GMT
Subject: CN=6c2bf1010d105b54c6fa743dc5d9add4456dd1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:a3:20:55:50:65:b6:1e:6a:3f:b4:f0:b2:
29:65:53:61:a0:5c:30:3f:ad:a4:a6:9b:a9:e2:b6:
34:8b:6f:cd:1a:0b:61:d1:4a:24:88:d3:8e:f9:03:
0e:6d:9b:f4:99:77:07:f5:9c:1c:13:dc:34:93:71:
e7:e5:e8:66:1f:53:12:b8:75:89:ea:3a:60:31:23:
30:17:88:e8:0b:7a:5c:7a:76:3d:e1:12:2c:1e:4c:
f6:61:4c:14:b1:41:7a:12:11:b6:d6:91:13:26:a7:
44:38:40:2a:4d:7e:8e:d1:d8:5a:08:82:72:b6:1a:
5d:cb:a3:7d:57:a3:c4:5a:af:e7:22:ed:13:b9:d2:
18:13:dc:34:40:de:8c:e0:8a:fc:0e:8f:70:77:51:
5a:3c:a9:13:20:92:d1:c7:d0:d6:c6:5e:c4:14:d1:
17:7e:91:19:ee:54:86:7c:c9:a2:e8:e7:3e:28:81:
81:89:82:07:47:65:df:b3:0f:c1:d9:6a:33:1d:dc:
42:76:c1:43:d1:d3:96:9f:f2:41:5b:d8:06:95:ce:
4d:54:94:01:36:0f:fa:e9:8d:eb:80:79:da:d1:de:
32:41:4c:f5:45:c8:fe:e9:21:19:5a:97:f5:d7:e1:
6c:6a:4c:02:bf:bd:43:7c:02:dc:3a:44:1e:25:23:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:F1:01:0D:10:5B:54:C6:FA:74:3D:C5:D9:AD:D4:45:6D:D1:EA
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1e:d0:69:c5:07:8b:96:af:30:cc:74:98:a7:ee:94:41:56:
26:bf:c1:f5:f3:23:82:a7:9f:3c:ea:6c:85:a6:17:39:d4:51:
64:ff:0d:b7:b5:22:bd:04:64:00:25:09:e2:90:a6:f1:70:93:
2e:56:5a:59:1e:4c:60:26:8e:aa:3b:d3:65:8e:7f:73:cf:9d:
4f:11:b0:8d:25:d2:b9:f0:6b:e2:9a:fb:6a:72:d1:61:6e:19:
03:db:90:f7:b8:d9:56:20:6d:73:95:48:25:de:26:a5:61:75:
e0:29:75:40:37:0a:20:8c:a6:0a:44:c1:9f:3f:af:ac:92:ae:
12:2f:e5:7a:fe:18:c0:c1:aa:8e:2f:82:46:bc:ab:8c:d4:40:
80:2c:19:78:9d:c2:e7:9f:4d:a0:1a:e8:11:49:a1:38:65:30:
72:25:03:68:01:74:31:ca:c2:34:c1:ec:34:16:04:75:45:78:
97:30:b5:7b:ce:31:3a:57:e6:7a:9e:b6:ea:38:9a:e1:45:67:
67:f7:b5:b4:f4:80:82:cd:bb:45:f1:6b:76:c8:5d:d2:bc:97:
78:e3:6c:ab:8c:a8:80:8e:64:f0:d4:30:b3:6b:a1:b1:ab:e2:
19:d3:19:02:b6:49:bc:6e:47:89:cb:22:a4:1b:f6:b0:63:a7:
e6:d6:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:45:49 2026 by rpki-client