Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: 41xfPcYesvxJaXh60gczyeR0aEsouvrJSH8AV6En9Bw=
Subject key identifier: 21:DE:D3:23:09:04:35:00:31:CD:40:12:CD:EE:E3:3B:99:E1:B3:97
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019CAAFD36E898996D9CE9447A7062E6DF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: pjqLQQiYAHhgn4kVI6hi4+kkxMDlrVF89/AW2xpiZvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:36:e8:98:99:6d:9c:e9:44:7a:70:62:e6:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=21ded3230904350031cd4012cdeee33b99e1b397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:e1:d0:b6:69:d8:a6:8a:43:b7:2b:3d:3b:
48:c1:bc:ba:7b:87:08:1f:c2:b4:64:3d:97:e7:68:
e8:06:4e:50:53:89:b5:e3:86:a6:e5:eb:f7:e8:4b:
d9:3e:0b:45:e3:32:d0:48:da:fc:49:13:d2:ea:f8:
cc:f2:a1:2f:57:f7:94:ba:d9:3e:52:20:2b:27:4e:
f3:f4:19:aa:ed:2d:7d:d2:a6:a5:f6:bb:f5:5e:e5:
34:d2:9b:a0:e3:33:ef:15:4d:9c:43:ca:99:b0:b3:
07:6e:a5:87:42:19:44:8f:91:77:0b:a0:4a:78:ac:
04:4d:2a:1d:51:67:39:58:07:2b:58:b4:d6:df:91:
4d:42:d2:92:88:e6:29:eb:96:89:97:47:37:32:4e:
93:80:9c:8e:8e:12:cd:38:e5:e3:0d:47:2c:df:7c:
8c:42:8e:67:99:f4:cb:c9:b2:6e:17:41:c5:1e:10:
16:1b:32:bb:2e:64:60:44:8d:d0:54:3d:2d:79:c6:
9d:8b:9f:64:7f:8d:59:a5:c7:09:61:6c:e9:cf:3b:
e0:55:d4:e1:22:15:fd:47:2d:48:e6:74:4f:31:d5:
8f:62:24:53:30:a2:9e:b2:78:a7:2f:d6:95:20:c6:
69:96:ef:54:51:51:8c:7e:f7:60:7d:3c:bc:18:7e:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:D3:23:09:04:35:00:31:CD:40:12:CD:EE:E3:3B:99:E1:B3:97
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:aa:de:c9:ae:20:b3:89:a6:f2:18:cc:fe:f5:e3:53:fb:dd:
2b:12:3f:4e:84:37:93:2b:1f:95:66:8e:1b:01:00:20:52:a9:
3f:93:58:4e:46:7e:ca:b7:7c:2b:d8:52:51:88:ca:88:c8:98:
c6:52:84:8a:50:8d:94:72:2c:34:23:33:98:c8:c0:e0:96:9f:
21:d6:50:4e:93:62:c7:ed:19:94:e3:8a:e1:4e:b6:44:5b:57:
bf:9d:7d:77:e6:6c:a4:5b:bc:33:49:eb:55:e4:34:11:89:e1:
2b:2f:29:9f:9a:1b:ec:0d:c2:5c:3e:8f:96:bd:9d:12:41:ff:
70:02:bf:71:bc:c4:0c:15:44:e1:cb:09:51:9f:d9:f4:71:7f:
03:58:6d:34:98:14:a6:6e:65:f4:c8:b4:f5:10:7d:86:40:62:
d7:39:d2:cd:6d:60:54:bc:17:37:97:28:18:30:5b:8b:60:b1:
8d:56:7c:b1:fc:12:0a:20:c6:54:f0:f4:b6:d5:b5:10:50:6b:
98:2b:4b:de:83:1a:d0:1d:d3:51:10:59:46:fa:fa:e7:e4:c5:
cf:8d:37:f0:66:11:7f:8c:10:16:d2:3b:73:e1:54:97:e2:bd:
06:dc:5c:0c:0a:b4:77:16:49:85:f3:7c:f2:dd:59:55:98:e0:
90:ac:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:31 2026 by rpki-client