Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: 4OEmhBfHg3Cl0AiPpUAJLI6POT3HRAJYR5gXlT9SajQ=
Subject key identifier: 8E:68:F5:DB:11:7F:F9:36:43:1F:0F:68:2E:B6:E7:E6:45:9A:C4:71
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01A1980E4C140E80A973E923C950EF844E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1AD2
Signing time: Sun 01 Nov 2026 17:00:36 +0000
Manifest this update: Sun 01 Nov 2026 17:00:36 +0000
Manifest next update: Mon 02 Nov 2026 17:00:36 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: tE70DOQxufXtFaZvlcf8XrZLtgXrZ7dybgrvH4ZLGOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:0e:4c:14:0e:80:a9:73:e9:23:c9:50:ef:84:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Nov 1 17:00:36 2026 GMT
Not After : Nov 2 17:00:36 2026 GMT
Subject: CN=8e68f5db117ff936431f0f682eb6e7e6459ac471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:65:4b:8a:4a:5a:e3:58:c3:4f:0d:e8:1f:
24:62:78:49:73:60:af:43:b1:9f:bd:fd:39:22:9b:
a5:3b:c0:ef:f1:77:cd:cf:82:d6:17:42:2c:85:88:
47:25:1c:a7:c4:2c:0b:64:d3:7b:cd:2e:c4:78:42:
0d:93:83:63:ba:7a:9f:bf:3d:9c:e0:3b:9a:de:9f:
12:89:88:8c:b5:0a:1a:c0:58:a8:f9:17:b2:f2:c3:
dc:6e:11:f6:50:4f:15:82:48:51:24:ab:60:52:00:
54:7c:89:e5:38:f2:a8:7a:93:64:2c:6a:1e:84:63:
fa:20:a4:1e:ea:82:a3:a2:68:fc:ee:48:90:c6:99:
33:a4:56:59:c2:05:de:65:29:4b:51:fe:95:12:99:
89:3d:12:28:4d:0a:63:f7:e2:f1:82:9a:c0:e1:c7:
99:be:ff:54:c4:56:f8:b9:59:98:f6:ae:77:68:31:
bd:85:c2:bb:d6:40:f1:62:ae:0b:50:bf:a1:38:b3:
91:8e:f0:45:ca:44:c4:66:f6:ab:25:10:ec:34:fa:
0f:2f:e4:e3:f8:ac:be:a9:d7:19:19:29:fe:9c:c7:
7a:44:7a:e4:54:c7:0f:46:4f:33:cc:67:e4:09:b8:
e9:3d:d5:1d:7a:5b:06:c8:0d:ff:71:1c:33:90:f4:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:F5:DB:11:7F:F9:36:43:1F:0F:68:2E:B6:E7:E6:45:9A:C4:71
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3a:24:b1:70:1d:78:17:c0:0c:84:ef:88:0d:67:23:69:6f:
45:7e:89:08:e5:cf:e4:98:08:ae:44:f7:15:d2:4f:52:39:82:
91:98:cf:6b:6a:70:2f:f6:96:9e:11:81:7e:77:99:fb:d5:87:
31:94:aa:32:31:20:99:9a:7a:b1:eb:19:12:18:93:80:b1:cc:
06:5a:fd:5a:43:0f:29:eb:b0:0e:70:cf:17:1b:00:eb:0e:27:
f5:a2:f7:e7:6d:5a:99:a3:08:ce:80:05:b0:eb:99:fa:c2:22:
dc:06:a3:c7:4c:0f:d8:a3:43:56:3a:81:2b:7f:a9:37:5c:79:
6c:16:b8:bc:5c:13:0c:4e:6f:6a:93:cf:8f:4a:5b:ca:0e:91:
31:ab:36:47:b3:c1:58:ac:7e:58:37:03:99:44:57:88:84:f3:
79:0c:f7:0b:3d:d4:44:aa:e3:be:7e:40:b6:34:de:c6:2c:28:
c3:e1:aa:9a:94:00:3a:a3:a4:57:9d:cb:07:0c:14:4a:a0:69:
06:22:25:79:1e:64:d6:e2:9e:2a:b3:7b:99:d8:e7:24:29:7d:
c2:96:56:dd:1b:93:59:bb:a1:8f:1b:78:66:ff:81:00:e4:91:
9d:9b:34:ac:82:00:41:02:5b:57:5a:a9:5a:ef:4c:43:73:9e:
f6:a4:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:58 2026 by rpki-client