Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: A7u8SzSiwqneGUK7eBwwskxOnA66qH7jQrYZ1y4p+yg=
Subject key identifier: 95:F0:BC:FB:6D:CD:6C:6E:3E:C8:0A:2D:4E:E8:7A:8D:C3:51:87:E8
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019FAB9A76E7BE842A6FEB985D2A221FDF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 02:00:54 +0000
Manifest this update: Wed 29 Jul 2026 02:00:54 +0000
Manifest next update: Thu 30 Jul 2026 02:00:54 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: WUeKFDDqaYMxpLByKod4TaoeJ6xbJOQJ6zJwt37TB8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:76:e7:be:84:2a:6f:eb:98:5d:2a:22:1f:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jul 29 02:00:54 2026 GMT
Not After : Jul 30 02:00:54 2026 GMT
Subject: CN=95f0bcfb6dcd6c6e3ec80a2d4ee87a8dc35187e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:29:46:e3:f8:33:c6:b6:8d:fb:76:3a:47:
9a:a6:2d:cc:0b:43:44:2e:92:23:f0:43:7b:87:ad:
e1:eb:1d:f9:52:10:1a:83:35:a3:d0:fb:72:73:09:
78:5f:81:ae:30:7e:96:85:82:34:0e:68:b1:86:ff:
62:d1:9e:68:21:22:48:d3:77:37:5e:e2:67:b3:a0:
bb:3f:f3:e6:86:25:58:c6:17:8d:7f:1c:c8:25:e6:
13:ea:68:be:86:fa:1f:8d:ca:34:16:0b:33:ce:24:
87:a2:c1:55:37:da:f4:16:dd:f7:ca:9c:fc:0c:62:
5b:21:1c:c3:48:38:ca:5b:95:be:df:4e:26:4f:fe:
38:9a:66:19:7e:ec:07:ff:1e:37:4f:09:9c:5d:a6:
d8:c9:19:de:2e:27:9e:51:4a:b0:7f:f2:4d:48:30:
93:9a:1e:03:bb:96:9a:71:e7:82:1c:0c:1c:23:f4:
f5:89:3a:24:6e:d6:38:58:de:f1:38:39:b3:76:6a:
7a:ac:be:10:49:0a:8d:58:01:07:c7:a2:b2:e8:c8:
f0:f3:a7:9d:ab:38:79:89:b4:b4:29:bf:03:10:57:
70:ac:22:46:7c:f9:dd:bc:99:c8:5b:9f:7a:0c:ec:
d4:8d:4a:7f:c2:a8:1a:93:4d:9b:33:e6:67:87:7f:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:BC:FB:6D:CD:6C:6E:3E:C8:0A:2D:4E:E8:7A:8D:C3:51:87:E8
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:b9:28:f5:7b:de:9f:e3:10:05:45:d6:8e:7a:3d:85:13:
4a:5e:f1:7f:b5:fa:1f:96:73:30:01:56:76:83:ca:27:4f:2c:
aa:90:5a:ba:e9:99:5b:fd:ac:2b:8c:7d:80:ed:a6:23:0e:95:
d9:65:8b:d6:8e:53:2c:5f:f7:0e:a9:62:39:fe:71:af:9d:19:
62:42:c2:99:88:85:91:5a:f9:29:5b:20:ff:52:39:2b:21:08:
44:cd:50:2b:49:df:68:40:4b:03:8d:b7:52:74:1a:cc:42:8c:
6a:a3:e7:ab:0f:ec:40:4a:e8:5a:7b:10:ac:0c:e2:15:e6:16:
81:c5:fc:da:fa:49:ee:ec:eb:f6:ab:06:63:40:21:fc:dd:ff:
39:87:95:1e:60:c4:6a:9b:9f:63:b9:63:f1:47:11:c1:86:1c:
16:13:5b:89:b2:19:06:b9:1b:2f:52:f0:c1:72:3a:91:b4:bf:
a6:33:42:74:fe:43:a9:d2:62:1a:ac:5c:d9:86:13:19:ed:4b:
24:c4:b2:c6:50:e5:8e:73:94:33:ee:3b:64:97:05:98:85:41:
c6:97:1b:56:f5:d6:ae:f2:b8:47:1a:ee:70:be:d9:57:60:cf:
f0:44:55:9d:8d:02:d3:0f:47:fa:52:2e:df:74:78:9a:79:46:
a4:97:0e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmnbnvoQqb+uYXSoiH9+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2
YWE4OGIwHhcNMjYwNzI5MDIwMDU0WhcNMjYwNzMwMDIwMDU0WjAzMTEwLwYDVQQD
Eyg5NWYwYmNmYjZkY2Q2YzZlM2VjODBhMmQ0ZWU4N2E4ZGMzNTE4N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqApRuP4M8a2jft2Okeapi3MC0NE
LpIj8EN7h63h6x35UhAagzWj0Ptycwl4X4GuMH6WhYI0Dmixhv9i0Z5oISJI03c3
XuJns6C7P/PmhiVYxheNfxzIJeYT6mi+hvofjco0FgszziSHosFVN9r0Ft33ypz8
DGJbIRzDSDjKW5W+304mT/44mmYZfuwH/x43TwmcXabYyRneLieeUUqwf/JNSDCT
mh4Du5aaceeCHAwcI/T1iTokbtY4WN7xODmzdmp6rL4QSQqNWAEHx6Ky6Mjw86ed
qzh5ibS0Kb8DEFdwrCJGfPndvJnIW596DOzUjUp/wqgak02bM+Znh38aLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXwvPttzWxuPsgKLU7oeo3DUYfoMB8GA1UdIwQY
MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt
MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy
LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJu5KPV7
3p/jEAVF1o56PYUTSl7xf7X6H5ZzMAFWdoPKJ08sqpBauumZW/2sK4x9gO2mIw6V
2WWL1o5TLF/3DqliOf5xr50ZYkLCmYiFkVr5KVsg/1I5KyEIRM1QK0nfaEBLA423
UnQazEKMaqPnqw/sQEroWnsQrAziFeYWgcX82vpJ7uzr9qsGY0Ah/N3/OYeVHmDE
apufY7lj8UcRwYYcFhNbibIZBrkbL1LwwXI6kbS/pjNCdP5DqdJiGqxc2YYTGe1L
JMSyxlDljnOUM+47ZJcFmIVBxpcbVvXWrvK4RxrucL7ZV2DP8ERVnY0C0w9H+lIu
33R4mnlGpJcOPw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:55:56 2026 by rpki-client