Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: wiqCb9SzNkTrhxYPNPDsco6ZKPPp1jLpEfKQBSYz7Vg=
Subject key identifier: C5:68:F9:EA:F2:93:48:E0:38:68:78:D1:DA:0F:79:36:98:9E:F0:A9
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01A0F00BFE2E8E33FA424952AA376A6DAFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1A7B
Signing time: Wed 30 Sep 2026 02:01:52 +0000
Manifest this update: Wed 30 Sep 2026 02:01:52 +0000
Manifest next update: Thu 01 Oct 2026 02:01:52 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: nRRCuyLaP83PT6YtHo+f2Txdlztn/th/zUQgBjxHgVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:fe:2e:8e:33:fa:42:49:52:aa:37:6a:6d:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Sep 30 02:01:52 2026 GMT
Not After : Oct 1 02:01:52 2026 GMT
Subject: CN=c568f9eaf29348e0386878d1da0f7936989ef0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:01:ac:4c:04:7e:b5:4a:a0:37:93:a2:15:
3b:2a:16:f9:b8:60:9b:a6:ec:94:fd:84:3e:71:ca:
a0:de:9d:98:bc:37:e2:40:e9:02:00:4c:5e:a6:86:
d3:2f:87:e4:85:d9:00:c7:25:a4:f0:31:09:db:1b:
4e:2f:33:c8:ba:6c:54:1a:e5:fb:54:30:5e:2e:15:
f6:a1:57:06:1f:7f:fd:19:6f:b0:25:25:56:17:40:
d4:a6:ca:bb:70:65:bd:5c:12:6b:31:76:80:75:16:
8e:2d:ff:d9:5a:a6:3b:f9:99:0e:bf:90:fe:27:f4:
a9:82:5f:ef:7e:0a:f3:27:9f:d5:d4:7c:bf:99:26:
38:1f:ee:81:5c:29:c5:bb:e6:ea:d9:52:33:e9:0f:
36:c2:89:36:6d:5f:ac:53:04:1e:06:32:81:cd:f0:
53:ce:2d:3f:80:aa:ad:16:21:1b:37:0d:8a:0b:6a:
ef:7f:4d:90:a4:f4:3a:b6:b1:64:c7:e0:4c:c8:b9:
56:07:81:84:a1:bf:ae:0d:0a:20:53:62:c1:90:8b:
7f:f1:f1:30:0b:17:f1:26:ff:c2:33:9c:66:50:40:
6d:42:c6:15:19:37:da:14:16:26:cd:fa:10:f2:72:
07:dd:2d:d5:5b:a1:32:18:b7:a3:1e:84:d4:57:a9:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:F9:EA:F2:93:48:E0:38:68:78:D1:DA:0F:79:36:98:9E:F0:A9
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:77:6d:60:99:b0:0b:4b:c4:d3:27:1b:dc:97:82:23:0c:1b:
b4:e6:d6:ea:00:a7:cc:7e:ee:b2:11:06:68:eb:d4:1d:dd:24:
3c:3e:cc:7f:99:9f:68:68:86:40:ac:e0:60:57:d6:f4:c6:58:
0a:ab:36:0d:ee:dc:99:b1:0f:e1:cc:38:72:ed:fb:3d:f8:86:
7e:c9:c0:2a:e7:22:0b:4b:21:20:a0:3a:b1:7e:fc:df:05:f9:
8f:ea:05:9f:ba:61:a2:ee:bc:08:fe:5f:11:b8:c8:97:c6:41:
bb:3a:ba:2a:5b:ab:61:3b:e3:63:cb:f1:af:e9:42:9d:09:65:
52:63:a3:57:9e:68:f0:c8:6b:57:7d:6a:d6:5d:76:01:8a:5d:
81:e1:67:06:39:49:b5:34:65:5f:63:98:5e:9a:cb:9e:97:20:
b0:e8:7d:64:ba:00:d7:51:15:7d:5f:fd:9d:a4:27:e7:86:fa:
5e:d2:3a:23:36:e3:88:c5:aa:c6:03:61:d1:db:60:fe:0a:54:
0f:56:73:a9:da:7e:ea:68:94:6c:69:80:71:93:9c:dd:6d:80:
5e:77:6a:7d:19:41:de:07:43:3f:dd:94:96:56:bf:86:62:0b:
62:56:62:c4:f5:d9:de:80:50:a1:01:45:63:84:16:aa:53:0d:
cc:06:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:14:31 2026 by rpki-client