Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: Z1BwTZKGda2T0L1kQr+g5OT0RoQB9/v1AbpmYRhMZjs=
Subject key identifier: 37:5D:99:C0:E5:7F:E4:7F:84:73:BE:57:BC:29:CF:B9:B1:1E:95:C4
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 019D988654E803E6645F912E08C55BA7E3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:33 +0000
Manifest this update: Thu 16 Apr 2026 23:00:33 +0000
Manifest next update: Fri 17 Apr 2026 23:00:33 +0000
Files and hashes: 1: BwUOAUosbkGUtEyamqHZVYXCbwY.roa (hash: V018IqY7teR5n9bP9qOMX/vX2HfQD+CNCFUEpOx18cs=)
2: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: t5ZyCVM9J+VZrgqH5biTNFEiiYZAM1RfqSzhTNS2rYY=)
3: xsfB_JfpX7GdwLyr4rcoKlNIeyg.roa (hash: hykg4tWFkgSD74YPm95Nlhl/vXekwDAwpTScfibWTu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:54:e8:03:e6:64:5f:91:2e:08:c5:5b:a7:e3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Apr 16 23:00:33 2026 GMT
Not After : Apr 17 23:00:33 2026 GMT
Subject: CN=375d99c0e57fe47f8473be57bc29cfb9b11e95c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:20:eb:c6:9c:dc:1b:7e:14:6b:24:7a:6c:
5b:37:60:62:29:cd:6b:b3:1a:51:11:26:5b:89:12:
c8:c1:67:8c:52:41:3a:39:02:6d:6b:fd:7e:82:78:
3b:26:98:9f:84:21:e1:2c:0a:8a:6e:41:19:73:6f:
ec:23:ca:28:83:52:69:0c:0b:74:b0:b4:96:a2:00:
9a:43:c3:3f:9b:7b:7c:c6:9d:bf:2b:ae:af:54:33:
83:09:16:7b:22:25:1d:ef:9e:f7:33:26:79:b1:0a:
4a:2e:05:68:2b:0a:97:50:4d:5f:01:4a:06:16:34:
f2:4a:81:c9:cd:c6:6b:ba:db:46:af:5f:38:af:34:
0e:0e:27:89:80:08:80:a0:ef:6d:d4:a8:cf:ff:f7:
f8:6f:6c:79:e2:5d:1a:a9:02:79:2a:16:05:1a:de:
74:98:04:a2:07:13:bb:05:b7:07:77:44:61:64:b9:
a7:0b:1c:7f:95:57:c9:5c:5a:52:99:48:3f:5a:0a:
3d:3f:39:6c:8d:57:d0:ec:c0:a2:58:09:57:60:fc:
a8:49:57:b4:88:e8:38:3d:f1:f3:78:ca:49:66:fe:
a8:c3:19:c1:9e:a5:a0:a5:dc:35:2d:36:e3:4d:3a:
3f:09:fa:2d:6f:76:f4:a9:c1:e8:ad:cb:b2:34:d7:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:99:C0:E5:7F:E4:7F:84:73:BE:57:BC:29:CF:B9:B1:1E:95:C4
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:26:97:c2:cc:10:75:0f:1e:2d:bf:b9:4d:5f:14:4a:b3:af:
72:42:19:23:96:a7:0f:a2:91:00:57:92:b9:ab:84:44:13:ac:
90:02:90:ea:35:10:be:5a:09:d8:75:e9:de:49:5e:a4:73:69:
a5:a6:0c:82:6f:af:92:80:2f:18:0b:5b:1b:51:f7:86:5d:d5:
47:1b:c8:b1:f4:8b:99:5a:22:54:b2:2c:0f:00:dd:f6:52:92:
15:08:73:a0:b1:da:e5:70:89:c9:67:36:e5:c9:da:ad:cb:18:
92:07:61:5a:b7:58:2e:fb:92:64:8a:d3:de:3c:51:4a:93:ae:
c8:98:db:a6:2f:4a:c9:f6:f7:f8:36:b3:ac:eb:a4:03:ee:65:
02:3c:ac:79:10:df:38:10:12:7e:3a:c5:b1:d4:84:63:42:93:
55:15:bb:af:f4:34:e5:4c:e0:6d:68:63:36:c9:bc:8a:f3:b5:
3c:a5:10:e8:5a:78:46:32:2e:4f:17:3d:ab:a9:6b:33:ec:e3:
40:8c:bd:5d:98:dc:d3:27:90:3c:80:25:6a:58:3a:0e:e6:0f:
6e:67:7f:fe:62:f4:2c:a9:d0:45:6a:10:a5:e1:6f:11:55:f3:
27:60:c6:f6:bb:83:ab:01:44:1e:ba:ea:df:73:c1:c9:8e:a7:
f8:bf:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:05 2026 by rpki-client