Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: q2P3Rzv8E0Uumf2GelyUvjwNAd+p13iNs0UJ5lQZYSY=
Subject key identifier: 31:D1:12:07:E3:C8:13:6F:61:A4:D3:98:D2:73:0D:62:7E:5C:E1:A2
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019D39E5CADD0F8779C767C853738AB8E3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:54 +0000
Manifest this update: Sun 29 Mar 2026 14:00:54 +0000
Manifest next update: Mon 30 Mar 2026 14:00:54 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: fwTLmM+kRH2QvC5pGgJGz26DtrcXRZ1OarbRn7YzAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ca:dd:0f:87:79:c7:67:c8:53:73:8a:b8:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Mar 29 14:00:54 2026 GMT
Not After : Mar 30 14:00:54 2026 GMT
Subject: CN=31d11207e3c8136f61a4d398d2730d627e5ce1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:8f:db:1f:71:c9:8b:4c:f6:4b:e0:8b:26:
1d:1b:98:88:d6:13:95:d7:84:ee:73:33:f6:af:69:
8a:c8:b3:29:fc:cf:a2:6d:d8:bd:17:08:22:43:17:
ed:06:44:ca:8c:b7:1a:56:ef:26:f6:95:a2:2f:0b:
a3:bf:b6:d9:b8:fc:79:89:5c:14:05:33:d5:92:fc:
67:42:16:f5:6e:25:65:2d:12:07:8e:51:49:12:0a:
08:cb:e4:be:a0:4b:58:9d:8b:b2:42:bb:71:77:4b:
6e:83:73:c0:c8:85:e2:83:c7:17:f7:35:d3:91:d3:
fd:65:b9:21:ad:f1:d3:bb:0e:92:3e:b1:10:cc:58:
b0:d6:5d:36:a6:5f:c9:96:5a:51:09:35:6f:c1:fd:
0d:b5:fc:7d:d9:ba:71:a9:2d:bc:b2:58:36:4e:f9:
1f:c1:a6:3d:cc:6d:3b:13:bb:99:2e:61:75:d4:39:
14:2d:6a:d3:ab:cd:84:5b:da:08:2f:0e:d9:fc:fc:
a7:06:c7:16:2f:cb:00:e3:ab:13:6b:99:20:fa:41:
ea:cf:97:41:37:8c:c8:6e:01:e0:f9:81:01:1b:90:
8c:6f:f3:0e:6a:35:43:d2:f3:1a:c4:8d:62:2d:76:
84:bd:46:43:86:32:06:fa:13:1b:a0:85:bc:2c:89:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:12:07:E3:C8:13:6F:61:A4:D3:98:D2:73:0D:62:7E:5C:E1:A2
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7f:81:29:1c:c0:ff:e5:84:68:b6:82:82:22:f5:ea:c1:5c:
04:7f:0d:d3:eb:fb:e2:4b:98:4e:d6:b7:18:64:15:94:ae:2a:
82:a1:4d:05:58:fa:12:1c:d5:d3:8a:c1:d5:fd:40:91:45:00:
ca:25:59:3c:50:2f:70:bc:d5:8d:6e:4b:63:98:3f:22:24:7a:
cb:6c:db:dd:ac:b9:ea:b1:5e:5e:4c:98:83:8e:aa:92:bd:5c:
60:0e:d5:28:e8:07:04:02:5b:49:8d:f9:03:e9:72:62:12:ce:
66:bf:6a:b4:c3:df:57:99:bc:5d:48:59:8d:e1:c3:e8:8c:df:
9e:8b:68:2d:c1:33:60:de:95:37:c6:a6:c1:41:bf:b3:a2:ab:
19:67:b6:a9:9d:24:0b:98:37:f3:da:47:65:57:bf:33:2a:db:
af:bb:9a:af:f4:2a:52:50:0a:72:5d:d9:98:fd:1d:00:c8:1b:
15:5e:54:8e:84:fc:0a:4b:36:f7:6c:15:23:13:74:ed:56:36:
9a:31:7a:ed:96:42:fe:ed:85:00:36:19:be:c8:02:e8:fa:96:
cd:db:4a:9c:47:3a:48:19:0a:1c:df:5d:1f:e4:79:0f:9c:a0:
3f:a0:c7:4d:d3:62:ed:6e:3f:74:b4:38:24:bf:be:ec:91:db:
de:8b:f7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055crdD4d5x2fIU3OKuOOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2
YWE4OGIwHhcNMjYwMzI5MTQwMDU0WhcNMjYwMzMwMTQwMDU0WjAzMTEwLwYDVQQD
EygzMWQxMTIwN2UzYzgxMzZmNjFhNGQzOThkMjczMGQ2MjdlNWNlMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEuP2x9xyYtM9kvgiyYdG5iI1hOV
14TuczP2r2mKyLMp/M+ibdi9FwgiQxftBkTKjLcaVu8m9pWiLwujv7bZuPx5iVwU
BTPVkvxnQhb1biVlLRIHjlFJEgoIy+S+oEtYnYuyQrtxd0tug3PAyIXig8cX9zXT
kdP9ZbkhrfHTuw6SPrEQzFiw1l02pl/JllpRCTVvwf0Ntfx92bpxqS28slg2Tvkf
waY9zG07E7uZLmF11DkULWrTq82EW9oILw7Z/PynBscWL8sA46sTa5kg+kHqz5dB
N4zIbgHg+YEBG5CMb/MOajVD0vMaxI1iLXaEvUZDhjIG+hMboIW8LIkX+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHREgfjyBNvYaTTmNJzDWJ+XOGiMB8GA1UdIwQY
MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt
MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy
LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX+BKRzA
/+WEaLaCgiL16sFcBH8N0+v74kuYTta3GGQVlK4qgqFNBVj6EhzV04rB1f1AkUUA
yiVZPFAvcLzVjW5LY5g/IiR6y2zb3ay56rFeXkyYg46qkr1cYA7VKOgHBAJbSY35
A+lyYhLOZr9qtMPfV5m8XUhZjeHD6IzfnotoLcEzYN6VN8amwUG/s6KrGWe2qZ0k
C5g389pHZVe/Myrbr7uar/QqUlAKcl3ZmP0dAMgbFV5UjoT8Cks292wVIxN07VY2
mjF67ZZC/u2FADYZvsgC6PqWzdtKnEc6SBkKHN9dH+R5D5ygP6DHTdNi7W4/dLQ4
JL++7JHb3ov3Zg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:06 2026 by rpki-client