Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: fhFQ8WuaJYUhf/dUKIIaPmIVALENMa1GVUCs4u31KWo=
Subject key identifier: 7D:D8:33:C8:98:8C:29:E2:B8:36:A4:96:00:96:C6:48:07:0C:CF:FE
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019EBFFEE93FBA6E1D5119BDE5A7FB7B9E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 08:00:14 +0000
Manifest this update: Sat 13 Jun 2026 08:00:14 +0000
Manifest next update: Sun 14 Jun 2026 08:00:14 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: zGQIWJwNBvH5UHfCVRbMCWoD0W7/b0wpSnJ5+t9tC1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:e9:3f:ba:6e:1d:51:19:bd:e5:a7:fb:7b:9e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jun 13 08:00:14 2026 GMT
Not After : Jun 14 08:00:14 2026 GMT
Subject: CN=7dd833c8988c29e2b836a4960096c648070ccffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:2a:dd:4b:fd:08:f9:23:52:16:06:f7:63:
e1:6f:65:c3:80:c1:b5:2d:7e:2f:1e:63:e9:b0:3f:
05:b8:fd:20:82:db:84:bf:63:a4:fe:04:ab:f7:38:
58:cb:20:d5:31:41:b6:b8:68:94:ad:ad:1d:f0:4d:
c3:06:c9:dc:d9:be:0f:1a:8e:55:8a:ec:9b:1c:31:
7b:20:e1:2d:70:8e:58:ed:bc:fb:93:5e:fa:e0:45:
50:53:8e:27:f6:73:14:cd:01:58:c7:32:17:ee:b1:
b8:37:b8:94:ab:71:9a:5f:92:da:b5:64:f3:7c:20:
d8:53:e5:43:7b:59:3c:4c:e7:ea:26:4b:cb:65:b2:
0b:4d:46:cf:62:2e:87:22:7d:51:55:a2:eb:8b:5d:
ff:21:2b:97:aa:cb:ca:cb:b8:15:7c:20:93:43:e5:
dc:27:d3:d9:f5:c9:9c:12:0a:2d:de:4e:74:00:43:
74:79:43:57:b8:e9:b4:e1:44:bf:ee:77:e1:95:96:
f0:17:fe:15:8e:48:2a:f6:6a:64:fd:a8:ca:15:da:
16:a1:1d:26:86:9e:d2:99:cc:66:32:a9:8e:36:f7:
e5:b7:77:b9:1c:92:d4:37:fa:3c:dd:6c:70:1c:e5:
fb:ae:43:05:ae:cb:b0:10:a8:d8:41:5b:e1:9a:55:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:33:C8:98:8C:29:E2:B8:36:A4:96:00:96:C6:48:07:0C:CF:FE
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:66:cd:bd:2a:12:0e:b1:94:50:aa:12:83:ce:df:c1:f7:
1f:44:21:07:83:b2:cc:53:37:6c:6f:86:81:0a:f1:9a:62:1b:
75:62:63:77:0d:c7:7c:7f:da:0e:5e:59:fb:e0:a4:0e:64:78:
d0:2c:cb:af:b1:15:5f:fd:7a:78:fc:27:fb:b6:40:88:5f:f4:
df:2b:ef:6e:15:f0:0b:7f:ca:e6:ac:04:d3:e8:08:f6:ef:95:
16:23:6e:b7:a3:3d:a3:57:d1:b8:66:a8:4b:7e:0c:f2:3a:ce:
30:24:39:70:67:6e:0d:07:3b:01:19:54:66:a5:4d:95:51:ea:
69:63:74:84:38:96:f2:f3:90:52:29:e9:c5:89:33:33:29:8c:
7b:cc:a7:f9:41:d3:f4:7b:23:1c:0c:7a:d9:d3:e9:cd:43:45:
8c:34:bf:bd:15:b1:3d:c0:fc:88:46:d5:88:22:fa:f2:52:ce:
a2:54:50:98:e9:f5:b8:62:19:48:95:30:36:7e:dd:cd:70:95:
56:01:fb:c2:41:8a:e5:c1:4f:25:5a:9a:ba:d5:94:84:b0:a2:
a1:bd:7c:fc:03:8c:9a:4c:76:b4:9e:2a:6a:12:e1:61:90:74:
35:15:7d:da:d7:10:db:ea:b2:c0:b1:ce:40:76:75:1e:4b:ef:
39:de:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:08:15 2026 by rpki-client