Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: 4zTsAuu/Nj2i/ABDpWKSz8/ePUqlSL6Mksu46n25Gsk=
Subject key identifier: 71:D7:40:01:C1:A8:AC:3E:D7:6B:1C:0B:14:99:B4:DB:2E:1E:A9:AA
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 019FA3E0A1C42376E0641E55755D6AE0FAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 14:00:35 +0000
Manifest this update: Mon 27 Jul 2026 14:00:35 +0000
Manifest next update: Tue 28 Jul 2026 14:00:35 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: cLX614MU07KdZV/qHMy/0LS05dquRm0MhowL9TMQgSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:a1:c4:23:76:e0:64:1e:55:75:5d:6a:e0:fa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Jul 27 14:00:35 2026 GMT
Not After : Jul 28 14:00:35 2026 GMT
Subject: CN=71d74001c1a8ac3ed76b1c0b1499b4db2e1ea9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:68:5b:4d:0d:47:63:40:d4:33:74:e4:48:
8e:c1:c6:ce:9e:ec:b7:e0:1f:22:bd:3d:46:89:f8:
f4:75:ad:fc:e2:f6:da:c0:b1:2e:5d:eb:48:c5:a2:
4a:52:b2:05:40:9c:60:35:a5:f5:a1:ac:b7:eb:45:
cf:a2:5b:c3:10:f1:b3:ed:af:7a:fe:ea:68:6d:d4:
b7:30:90:07:96:dd:4a:45:ec:95:37:c6:2a:21:e3:
7d:7a:36:c7:20:81:2d:c0:92:5e:30:64:35:8e:61:
1e:05:79:4d:8a:8b:df:20:16:34:0c:a1:30:cc:98:
46:be:25:66:11:00:5a:ad:d7:3b:90:85:8b:cb:f7:
6b:1c:c6:16:f9:1d:dc:fe:38:c4:a7:7c:3b:c9:b0:
3f:bc:f4:5c:5f:b6:01:c3:c4:39:85:5d:a7:0e:ae:
49:88:6d:38:6e:09:d5:fc:52:ee:19:6f:ad:dd:27:
46:10:ce:d1:0c:1e:2a:ed:37:82:8d:66:13:1c:1e:
87:f5:4d:2e:9d:d7:a3:cc:eb:f6:86:38:f9:d4:ce:
35:d5:a8:00:80:4d:e6:cb:3e:d7:84:0b:d3:82:83:
80:84:f6:8d:5e:92:9a:20:c8:08:81:ac:27:e6:c2:
83:ca:f9:bf:7d:29:35:cd:c8:24:71:0f:da:43:61:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D7:40:01:C1:A8:AC:3E:D7:6B:1C:0B:14:99:B4:DB:2E:1E:A9:AA
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:5b:70:08:bf:f1:cb:a6:92:70:2e:15:76:67:37:bc:c0:
b3:0d:c2:e9:1e:5f:28:d5:76:00:5f:a8:74:8f:00:56:aa:19:
fc:94:2b:89:7f:17:77:ce:a9:c4:16:cb:13:e5:65:62:79:39:
e8:3c:74:60:81:b0:4b:94:e5:30:c9:fd:93:56:7e:0e:7a:cb:
f6:a4:31:4b:b5:b8:6f:d8:cd:13:5c:d4:b5:30:cf:72:1b:52:
c5:5c:e8:86:ad:5e:ae:11:75:6c:41:2b:c0:c7:da:96:50:17:
07:60:6a:6f:af:87:2b:74:5e:7f:ef:37:09:9c:32:60:f2:17:
b7:96:9d:7b:20:4f:3f:aa:42:87:85:c5:8e:c7:cf:58:5f:a3:
48:be:ef:de:3d:6c:ea:5c:61:b9:df:a6:9a:a4:9b:3a:6e:af:
e9:63:c7:81:5a:71:09:73:63:26:57:87:72:4a:35:23:d9:89:
a9:1c:ea:3f:5c:92:67:a5:25:93:94:8f:7a:33:1f:72:86:f6:
0e:0e:c3:e0:8c:c2:a6:ab:fb:8e:23:2a:7c:da:f7:5c:ba:15:
8a:96:b1:62:95:2d:6e:1d:1a:c8:a4:f9:70:fe:bf:e6:75:d2:
2d:92:81:4b:af:22:7d:e8:b2:63:af:c3:4b:03:b5:8e:cc:9c:
71:7e:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:43:30 2026 by rpki-client