Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: OnxnTWnB4AgB7SNa+VNk8Jcx390hGK8WmtgUGoMj0FM=
Subject key identifier: D8:84:3A:BE:AF:7F:E5:43:8C:1D:8D:62:DB:9B:AB:C8:1E:B6:64:DE
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019D98867E575007C6B055F7BC544B2A21A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: UJOAG+0p4Xx8aiWf2aFzltKPZa/ceK181LsmKZ89kxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:7e:57:50:07:c6:b0:55:f7:bc:54:4b:2a:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=d8843abeaf7fe5438c1d8d62db9babc81eb664de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:c0:be:18:2e:0a:f9:7b:6a:3b:ec:33:81:
e4:7c:f9:4e:2d:05:7c:b2:1e:05:33:56:84:ee:10:
fa:82:72:f1:af:96:74:7f:77:29:88:77:15:f8:e0:
af:f3:8c:78:25:29:3f:63:26:16:68:5c:50:3a:a4:
6c:85:6a:7b:6e:a0:0f:49:0b:85:aa:e9:c7:80:d8:
29:82:d8:78:08:8f:54:7e:46:ee:69:97:a5:71:02:
83:9a:65:d1:f2:cf:6e:1f:70:7c:4a:79:f6:92:84:
eb:a7:10:9d:9e:b8:c6:90:06:95:1f:b8:ea:b1:aa:
de:48:36:2c:31:ba:55:b5:79:ec:c7:53:bf:02:72:
c5:02:65:10:fc:a3:34:1a:55:93:4d:71:d0:6c:89:
6f:05:db:58:8e:bc:5b:b9:b9:4a:6a:8c:fa:54:5a:
87:80:55:e1:c6:b7:6a:7a:cb:34:03:f5:d2:7b:e7:
eb:e3:3d:a6:41:ab:86:96:d6:7f:d6:b5:7b:0e:e1:
c2:bb:0a:10:0b:dd:3f:47:cc:ae:b6:ae:ea:65:ef:
18:1c:39:73:ef:47:94:e4:8b:11:3e:fd:4c:97:b8:
c5:29:c1:c7:52:02:60:35:ee:40:20:b4:47:27:96:
45:f2:83:39:de:c3:9e:ed:69:c2:d5:cd:7f:15:8e:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:3A:BE:AF:7F:E5:43:8C:1D:8D:62:DB:9B:AB:C8:1E:B6:64:DE
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:06:3f:9a:79:7f:32:a3:bf:6d:50:a1:b7:b2:cb:00:9c:50:
f3:a1:44:c1:cc:ed:83:48:1f:bc:10:ef:67:f5:0b:45:26:19:
41:4a:1b:3d:e4:b2:35:8b:c0:fe:e3:a1:e0:75:c7:64:59:a3:
00:a3:b9:a0:d9:05:7a:5e:d0:ed:98:b1:3d:e7:7d:b5:c9:17:
6c:59:21:2d:7a:47:26:2f:51:2a:22:95:7f:ab:07:92:45:6b:
ef:0f:46:c4:47:67:22:79:e1:09:5c:bd:97:0d:b9:61:18:4b:
38:a4:86:9e:97:22:96:bf:a7:7a:2a:9d:23:76:c7:5d:1c:e2:
7c:76:e7:41:78:17:10:9d:2c:44:d0:49:28:69:72:2c:c8:ea:
77:8d:1c:60:d8:9e:6d:d7:89:03:5a:a4:7d:87:e0:ea:c1:c6:
68:27:80:bd:8d:a1:ba:f5:c9:e7:06:9e:7f:5e:99:bd:5a:27:
b2:cd:da:11:ca:5e:10:25:11:e9:59:4e:e7:f2:89:f9:57:33:
64:2d:24:be:0d:a8:49:6d:dc:56:ac:6c:46:2c:68:3f:29:a6:
4e:91:c9:cb:94:6a:bb:ca:f0:9d:e0:4c:cc:c2:eb:8d:f1:13:
61:e6:ed:53:a8:02:d7:80:a8:5c:15:58:15:94:3f:25:91:50:
02:90:cd:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhn5XUAfGsFX3vFRLKiGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2
YWE4OGIwHhcNMjYwNDE2MjMwMDQ0WhcNMjYwNDE3MjMwMDQ0WjAzMTEwLwYDVQQD
EyhkODg0M2FiZWFmN2ZlNTQzOGMxZDhkNjJkYjliYWJjODFlYjY2NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygfAvhguCvl7ajvsM4HkfPlOLQV8
sh4FM1aE7hD6gnLxr5Z0f3cpiHcV+OCv84x4JSk/YyYWaFxQOqRshWp7bqAPSQuF
qunHgNgpgth4CI9UfkbuaZelcQKDmmXR8s9uH3B8Snn2koTrpxCdnrjGkAaVH7jq
sareSDYsMbpVtXnsx1O/AnLFAmUQ/KM0GlWTTXHQbIlvBdtYjrxbublKaoz6VFqH
gFXhxrdqess0A/XSe+fr4z2mQauGltZ/1rV7DuHCuwoQC90/R8yutq7qZe8YHDlz
70eU5IsRPv1Ml7jFKcHHUgJgNe5AILRHJ5ZF8oM53sOe7WnC1c1/FY5N3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiEOr6vf+VDjB2NYtubq8getmTeMB8GA1UdIwQY
MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt
MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy
LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwY/mnl/
MqO/bVCht7LLAJxQ86FEwcztg0gfvBDvZ/ULRSYZQUobPeSyNYvA/uOh4HXHZFmj
AKO5oNkFel7Q7ZixPed9tckXbFkhLXpHJi9RKiKVf6sHkkVr7w9GxEdnInnhCVy9
lw25YRhLOKSGnpcilr+neiqdI3bHXRzifHbnQXgXEJ0sRNBJKGlyLMjqd40cYNie
bdeJA1qkfYfg6sHGaCeAvY2huvXJ5waef16ZvVonss3aEcpeECUR6VlO5/KJ+Vcz
ZC0kvg2oSW3cVqxsRixoPymmTpHJy5Rqu8rwneBMzMLrjfETYebtU6gC14CoXBVY
FZQ/JZFQApDNAg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:19 2026 by rpki-client