Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: Wpwc2MtpFb8ztqSgjIYox5vMZx1bCajhM+JMu9HRjqU=
Subject key identifier: 6F:19:8B:0C:4C:9C:5D:4F:6C:00:92:28:4A:9D:B9:5B:64:4C:13:93
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 019CAD228FEC80F2CB30373295D2A2289ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:49 +0000
Manifest this update: Mon 02 Mar 2026 06:00:49 +0000
Manifest next update: Tue 03 Mar 2026 06:00:49 +0000
Files and hashes: 1: b2Anhcba4-1XQ3_KqvGEvDh-6z8.roa (hash: IL867zlsQE5TVas3yygcFF6kLWMTjmfzIf5QjUmdb4o=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: Tl0a4gBSZbqv9wlFlQHMHiE3nycAvt9X8/+kCSHph/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:8f:ec:80:f2:cb:30:37:32:95:d2:a2:28:9a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Mar 2 06:00:49 2026 GMT
Not After : Mar 3 06:00:49 2026 GMT
Subject: CN=6f198b0c4c9c5d4f6c0092284a9db95b644c1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:53:fb:f5:00:09:95:c8:fa:e6:22:ee:94:
b2:85:39:9e:16:08:00:b9:0a:58:ea:d0:64:9f:e2:
b0:e5:81:f6:50:53:98:5a:c3:2f:19:05:52:5a:af:
9e:00:78:f4:1c:7d:25:06:56:46:10:00:cd:81:a1:
bc:8f:73:48:bf:f3:82:ad:b3:26:62:f5:6d:16:3f:
66:3d:ce:76:b2:45:b3:de:d6:5c:91:bf:65:19:f9:
26:c5:48:db:b1:87:b9:25:1c:3e:b0:65:63:c1:3f:
6d:fd:34:24:05:ef:12:92:2e:77:2d:59:b8:ac:d5:
ad:ea:36:ec:16:75:cc:4c:e0:a4:47:8f:77:ad:ed:
6f:e4:52:15:73:ac:8f:a8:84:7d:93:b1:7e:4e:fd:
c3:5a:e4:c4:62:50:eb:1a:da:c2:7d:f4:bc:c9:8a:
46:77:9e:8e:f3:14:44:bd:85:92:4c:28:51:18:1f:
2a:97:26:f2:aa:a9:d4:93:e5:ab:f1:12:8c:e1:ab:
d7:ec:23:35:3f:30:e0:6e:cc:56:58:7f:e2:5f:f2:
2d:81:95:5e:8e:39:3f:ea:f1:0c:2c:5e:df:5a:6f:
39:25:4f:3b:6f:92:2c:68:7b:8b:aa:8a:0c:c2:08:
95:09:72:b6:39:24:0b:0c:8b:07:40:88:c5:ed:7b:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:19:8B:0C:4C:9C:5D:4F:6C:00:92:28:4A:9D:B9:5B:64:4C:13:93
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:66:03:ed:fd:27:42:c3:a8:b1:ef:e4:f0:11:66:03:94:ac:
55:78:0d:9b:45:27:b1:d5:0b:e5:25:fd:f7:ff:55:18:88:99:
ca:33:9e:07:63:80:2b:a9:03:a0:36:d1:ea:e3:bf:df:52:52:
62:08:c2:86:69:2f:ab:12:b0:9a:03:fb:08:b4:2c:da:ee:f5:
43:de:5f:8d:35:20:05:40:a5:93:95:51:d0:31:93:6d:79:a4:
2d:bb:0f:72:c7:8f:94:bf:b7:f3:14:cc:dd:b1:6e:2a:ee:bc:
75:c9:51:68:ad:5c:a1:c0:82:12:0f:00:6d:f4:2e:76:ac:ab:
fb:f5:45:f3:7f:8f:39:80:4a:f5:73:67:00:f3:8e:90:f8:ca:
d3:32:41:9c:45:d0:3f:e8:f8:94:a5:de:55:9f:a4:66:b8:a7:
9f:06:59:0b:71:dc:b7:b8:7b:45:ad:21:ac:f0:8b:27:c1:4d:
02:5d:33:de:ba:4b:50:a4:de:91:3c:e6:b3:1a:ef:a4:45:a8:
a4:2f:59:b1:e2:37:d3:ca:3b:13:7c:8a:3a:60:8c:79:c0:54:
0a:97:dc:c6:60:f2:83:e1:0d:87:43:e5:43:12:cf:7d:78:f4:
71:3a:6a:17:08:7d:5b:0f:f9:7d:4b:77:82:ea:6a:31:ae:27:
05:5f:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:00 2026 by rpki-client