Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: vSgWLuJZVaX72eRh5UDAJ/z2NiKb5efFCnAhW3bhxEk=
Subject key identifier: 6D:0D:60:4F:D9:69:CC:E8:D7:B1:EA:93:1E:E6:7F:B6:02:C9:17:79
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 019D37F772A70DBE1C9B0468A9557A920765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: BwUOAUosbkGUtEyamqHZVYXCbwY.roa (hash: V018IqY7teR5n9bP9qOMX/vX2HfQD+CNCFUEpOx18cs=)
2: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: 6IRGE+zd8+wG4VfqSCHYFLwzgSAyJRXUypVPjPoACzs=)
3: xsfB_JfpX7GdwLyr4rcoKlNIeyg.roa (hash: hykg4tWFkgSD74YPm95Nlhl/vXekwDAwpTScfibWTu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:72:a7:0d:be:1c:9b:04:68:a9:55:7a:92:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=6d0d604fd969cce8d7b1ea931ee67fb602c91779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:6a:2f:cd:e5:de:16:28:b9:c3:6e:44:54:
b6:0c:36:90:dc:74:13:05:69:a8:00:3c:16:20:f9:
35:78:0d:24:43:22:14:8b:83:fa:00:80:0e:06:f1:
44:ec:90:cf:7f:91:91:87:90:89:ef:ee:ce:a3:8f:
85:5e:83:40:13:5a:ec:49:78:f4:bf:fd:b9:d3:d4:
05:b2:a9:07:bb:c3:61:1d:76:8b:9f:56:b4:b8:64:
ce:84:41:31:8e:a6:40:78:74:3c:9d:4f:d4:68:51:
e7:f1:9e:05:09:22:73:01:ad:17:b4:48:1e:64:4e:
da:b1:1f:55:72:ad:07:ce:f1:0e:12:50:e6:7b:33:
9d:63:f1:d1:6e:93:ad:f5:0e:4b:62:ba:10:ef:2b:
5a:80:28:e3:04:72:f7:74:aa:b6:3d:2f:4d:fb:75:
fc:2d:be:db:40:87:e1:80:e7:5a:da:bc:3f:f5:5c:
c4:d9:2d:ff:6e:d8:cf:3a:32:f5:a6:e1:c1:79:4a:
70:b5:61:35:9b:e3:93:41:d4:fd:3c:ce:07:48:c6:
4d:89:fe:c2:fb:15:a3:3b:7f:49:d6:71:67:4e:55:
64:85:7c:91:54:e5:b9:55:ad:c8:7f:d1:40:e9:f1:
4e:37:08:f7:b3:0f:c3:7f:e3:dd:b7:05:22:c2:cd:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0D:60:4F:D9:69:CC:E8:D7:B1:EA:93:1E:E6:7F:B6:02:C9:17:79
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:e2:57:d7:45:09:6a:fb:58:a0:a0:f3:8e:c8:92:9a:33:
db:a1:be:76:64:30:7f:15:4f:f3:0a:9b:74:1c:13:17:d5:a2:
31:3c:59:ae:c4:c2:d9:3e:f1:e3:ec:fd:ea:dc:39:74:cd:9f:
46:06:a3:26:ba:20:9d:7e:f0:5e:d5:0f:0e:f1:08:68:7a:0e:
18:51:78:be:17:85:a6:58:ee:17:98:8b:9c:11:0f:18:d3:21:
8f:bf:f3:4c:42:70:c6:45:35:45:a4:55:7e:a4:3c:36:b4:f8:
c6:39:27:1d:e4:b7:b0:fb:69:5b:d4:2b:9a:fc:46:92:5e:a3:
fe:d0:24:91:23:de:a6:19:2b:d1:68:a3:9e:fa:d0:8c:81:91:
98:19:76:46:cc:77:f7:7a:a3:a4:9a:22:ba:75:92:35:2a:9a:
da:41:ad:06:b2:d6:81:56:0b:a5:1c:b1:b0:1f:e5:bb:e8:1d:
d3:3a:f5:a6:ca:c6:e5:dc:ab:31:b0:a1:83:71:39:a1:5b:22:
80:7a:07:37:55:5d:f0:88:33:d5:31:63:a1:c5:f2:99:ce:c8:
f5:3d:ea:8d:35:95:ca:ba:16:ee:fb:68:c8:5c:1a:c6:4b:c7:
60:fa:c8:01:59:fc:f7:61:ce:4e:5b:81:2d:48:09:71:ef:9e:
2e:ba:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:27 2026 by rpki-client