Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: Nb4GEO3WycuOQ8s6bEyAFvPtCUTOe3gsWlG1FrZf+44=
Subject key identifier: B6:D0:16:EB:5A:54:E2:55:01:49:09:CD:13:DB:96:8B:0F:A4:78:B0
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 019D9AABFF806769A4326EC75494D59491DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:56 +0000
Manifest this update: Fri 17 Apr 2026 09:00:56 +0000
Manifest next update: Sat 18 Apr 2026 09:00:56 +0000
Files and hashes: 1: b2Anhcba4-1XQ3_KqvGEvDh-6z8.roa (hash: IL867zlsQE5TVas3yygcFF6kLWMTjmfzIf5QjUmdb4o=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: tqX4oYvEPdcqO52FudJdYM73bhMFL/GZyLkb48zH4HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ff:80:67:69:a4:32:6e:c7:54:94:d5:94:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Apr 17 09:00:56 2026 GMT
Not After : Apr 18 09:00:56 2026 GMT
Subject: CN=b6d016eb5a54e255014909cd13db968b0fa478b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:74:56:88:fd:28:ef:6e:18:a6:41:0c:84:
3e:df:0f:00:4c:21:1a:fd:09:03:14:89:83:52:87:
7a:62:9a:8d:c3:df:a9:e5:7b:d1:56:d8:84:3a:59:
6d:2c:cb:f1:6b:f5:09:ee:38:a4:6d:a2:25:35:ec:
52:77:17:26:77:15:11:69:fd:0d:5c:0f:bf:6d:ce:
18:33:e8:2f:03:fa:f7:da:3e:bd:3d:e3:2f:29:6e:
92:cf:da:0c:b3:58:dd:03:02:77:a3:c0:f9:ab:30:
5a:16:df:a1:09:c1:dd:df:f0:88:bb:97:19:e0:14:
3f:b0:99:d9:b0:b8:4b:43:70:a6:85:66:35:c0:48:
2c:50:ec:e1:f0:9c:e0:c7:99:e6:9d:ef:be:b3:33:
80:90:a2:4f:95:da:7a:75:b9:8f:bd:9e:09:08:26:
1c:78:76:77:3d:c4:20:fa:06:c7:0c:f8:ef:af:0a:
98:0d:a5:cd:ba:fe:f1:d8:f7:9e:c6:3c:65:e7:3a:
b2:c6:92:4b:b7:f0:e6:e0:95:b3:53:09:e8:18:2a:
65:18:bb:aa:c9:e8:bf:07:30:12:11:f4:95:8f:07:
69:0c:a6:64:67:dd:d1:90:f8:85:f4:c1:a4:da:f6:
3c:ee:4c:9d:95:5d:b6:49:7b:fb:6d:e8:f4:06:26:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D0:16:EB:5A:54:E2:55:01:49:09:CD:13:DB:96:8B:0F:A4:78:B0
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:0a:9e:9c:9e:76:b5:2d:ef:23:7b:62:c1:51:dd:94:ec:a8:
41:1d:7e:ee:ea:c2:23:eb:f4:26:ad:72:d4:32:ea:45:2c:ac:
a9:16:3c:9f:9b:36:de:ac:10:f6:d3:18:4a:da:dd:e1:84:ed:
99:04:56:69:91:b8:b5:84:a8:a9:ef:45:1d:bd:36:22:8a:df:
f2:6f:dd:fb:37:ec:53:e9:da:e6:13:01:89:ac:a8:77:47:e1:
9e:91:7f:a6:76:0b:60:cd:4b:cc:d2:fd:b6:d4:af:95:6a:39:
33:62:3f:08:e6:87:9e:dd:7b:68:f6:6d:54:2b:1a:4d:1e:b8:
0c:06:23:b6:48:6e:26:66:ab:2f:64:37:4c:16:dc:62:59:8f:
1e:f0:b7:fe:cb:3e:8f:d4:b2:c0:65:f6:71:49:62:14:f5:a4:
2c:e9:ff:12:4a:d8:ad:03:21:b0:34:c7:58:fd:bf:aa:a4:9a:
ce:e7:80:1d:e6:f8:bf:11:fa:30:53:4f:8f:69:86:e8:8e:69:
41:1f:ea:09:7c:2b:00:d1:01:55:64:44:04:04:8f:e7:8e:55:
e8:0f:90:13:50:63:7d:ce:ab:4d:75:73:75:e9:ef:6e:a5:c9:
e7:a8:27:e3:ff:47:27:0f:ae:7a:11:d4:ac:7a:33:95:3a:be:
51:a4:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:23 2026 by rpki-client