Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: XV30gHL8Tq/MtstmKBXpIfgbGp/VvUYWekhWXSOaMNE=
Subject key identifier: C3:04:E3:81:24:BF:BA:16:C1:84:B0:F1:65:5D:82:10:25:9A:DB:57
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019E3117A41E08B94B1710C47C82F0BAD660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 14:01:33 +0000
Manifest this update: Sat 16 May 2026 14:01:33 +0000
Manifest next update: Sun 17 May 2026 14:01:33 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: xCdAhpL3IodWIYKGz0OIrb32X2TSbbA6g7S0W0NH39s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a4:1e:08:b9:4b:17:10:c4:7c:82:f0:ba:d6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: May 16 14:01:33 2026 GMT
Not After : May 17 14:01:33 2026 GMT
Subject: CN=c304e38124bfba16c184b0f1655d8210259adb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:26:ae:53:4e:24:ec:08:4c:85:67:27:1f:
f1:67:12:04:2d:8f:2c:27:c9:31:66:4b:be:94:04:
1d:ea:0b:9f:da:bf:95:01:f5:36:03:62:ac:23:48:
4d:3f:ff:49:34:68:81:c0:df:d2:bc:c2:a8:d6:dc:
a5:90:4f:bf:e0:98:ba:72:9b:4c:62:73:f7:93:2d:
df:69:d6:b3:b1:fa:0d:38:35:6e:92:1e:77:24:25:
e0:2d:2b:20:3b:eb:97:34:40:ff:63:f9:bd:62:d7:
aa:d3:ae:83:6a:84:db:11:81:15:42:4e:a1:98:3b:
ad:a3:1f:37:23:74:5f:33:e0:96:67:8c:29:9e:0d:
b8:6f:34:79:0b:b5:49:6f:2f:83:b5:9f:b3:de:67:
85:bd:19:1e:e9:12:60:7b:ed:6a:da:0c:e8:87:5d:
7c:90:4d:38:ae:e7:9d:fc:e6:a1:b6:cb:b9:3e:c0:
df:0f:bb:46:be:57:a4:3a:21:9d:cc:5a:52:f5:e2:
7d:a4:3a:9a:39:df:9f:7c:25:93:d1:52:59:c0:72:
0d:9d:f1:c7:34:2c:e5:76:ce:46:f8:d7:8f:b9:60:
e6:e2:06:a2:0c:fe:bb:2c:69:1a:a7:bd:b2:0b:1d:
d7:07:a3:b7:90:aa:f4:8f:de:7e:e2:09:1f:41:84:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:E3:81:24:BF:BA:16:C1:84:B0:F1:65:5D:82:10:25:9A:DB:57
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:af:96:c9:b3:c5:04:77:98:bd:de:ea:c9:27:61:27:5c:4e:
b1:ea:03:b6:3a:83:8e:36:79:b5:08:c4:34:7f:4b:62:67:11:
35:8a:ec:0f:81:3c:f0:1e:5d:7a:f8:4c:61:36:c0:5d:3d:c6:
a7:2a:33:48:5a:74:ac:db:5c:b9:72:33:5f:3d:8b:d3:03:34:
47:b2:4d:25:f5:eb:fa:17:e6:cb:77:98:83:ec:0a:37:71:82:
d9:64:bb:60:2b:ad:55:43:62:42:eb:cf:66:93:9d:b8:51:ee:
87:1c:35:54:8f:3a:92:16:e0:89:60:19:5c:a9:ef:4f:d1:fd:
58:f0:fc:0d:b3:26:0a:38:3c:2f:a7:54:8f:62:86:88:78:59:
78:6c:d5:e8:5b:39:24:98:3f:0c:49:b2:26:80:da:09:0f:95:
47:30:1f:77:c8:8e:15:fd:8a:9c:c2:08:0e:18:0c:67:68:a3:
e5:0b:ca:c8:fc:24:ff:81:da:ac:02:09:e9:be:c6:cf:70:67:
80:44:4b:aa:8c:bb:6a:48:79:f7:86:38:d1:01:f7:5c:5d:98:
b0:be:60:15:20:92:3f:ac:e0:56:03:c7:60:3a:39:b8:80:a0:
a3:8a:e6:ab:e9:34:f3:c3:bd:10:76:b3:2f:b8:d3:70:80:b4:
fb:fe:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:22 2026 by rpki-client