Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: A3w0Z1J3TZjIuHQZeeev6qcDtAMQsyBQMJdDcuNDBLs=
Subject key identifier: EC:55:E1:A2:F3:3A:55:45:69:8E:C0:6D:FB:8A:A7:70:76:DF:C4:D8
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01A08D8DED6DC60FC9B9510C5B99ADB1C7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 23:01:23 +0000
Manifest this update: Thu 10 Sep 2026 23:01:23 +0000
Manifest next update: Fri 11 Sep 2026 23:01:23 +0000
Files and hashes: 1: 34LZWsNGRIKWyIHXFffnM-VhclM.roa (hash: HVcPE4gapBs4vsO0MGbu+wRDbzaDiPj/yDgrINHf82Y=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: DhjVBF36mq7WbtFWQj71L+l9I7nXj0KPiDDL3Iujr2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:ed:6d:c6:0f:c9:b9:51:0c:5b:99:ad:b1:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Sep 10 23:01:23 2026 GMT
Not After : Sep 11 23:01:23 2026 GMT
Subject: CN=ec55e1a2f33a5545698ec06dfb8aa77076dfc4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:26:55:50:d5:15:6a:6b:da:59:64:44:8b:
91:c1:e5:04:ef:f1:5a:6c:f9:03:7f:6b:92:61:ef:
7d:22:10:37:f1:88:62:22:e1:8e:b2:d1:10:22:a5:
ea:f7:77:5c:61:3b:64:03:ce:14:71:0d:88:16:05:
fc:52:96:42:ff:2f:23:27:ec:ad:43:06:d1:58:e9:
87:ea:0d:86:2a:90:88:c0:c4:78:03:9d:4d:98:73:
1f:1f:06:ea:3c:02:f0:7c:d6:ad:c5:76:7b:0d:1b:
75:df:a1:83:8d:65:3f:d5:ab:36:81:a9:e4:66:73:
5b:35:02:d5:0a:a2:c3:e0:4e:82:fa:2c:b2:6b:c6:
92:a7:07:af:18:1e:1b:e4:17:04:49:23:fb:b3:a2:
fe:e5:a3:2e:fe:80:87:cb:2c:ae:10:eb:0a:c4:df:
8b:ec:cc:a7:79:58:b3:7b:d2:bc:08:fb:b7:d1:d7:
b8:12:26:ef:62:ac:7d:af:56:5c:89:5c:55:6a:9b:
b6:05:98:c3:f7:89:9a:5d:f9:e6:d7:35:4f:bd:19:
9f:18:d6:c0:ee:d7:18:96:de:57:e6:25:f3:5f:aa:
8f:cd:2f:40:2c:3c:ed:ac:77:03:76:51:79:72:6e:
b3:6f:ae:ac:3b:03:f2:6f:d2:ed:0f:0c:e8:8c:d8:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:E1:A2:F3:3A:55:45:69:8E:C0:6D:FB:8A:A7:70:76:DF:C4:D8
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:35:e1:69:f4:a6:8a:69:51:78:6d:be:9f:79:d2:9b:23:2d:
11:9f:1d:35:48:20:f8:98:f6:55:47:73:66:f3:01:de:97:7d:
70:e3:2f:78:ed:1e:6d:f4:95:f9:03:de:ec:20:bf:39:bd:32:
fb:88:6c:28:8c:ff:84:29:40:fa:0b:e9:f4:5a:1d:7b:3b:f6:
8a:1d:9d:52:dd:3a:d0:a0:89:80:88:50:3d:e7:c8:4e:49:ab:
5e:3b:b2:0d:fb:c1:d6:db:08:c0:99:12:c1:f5:d1:14:3d:29:
a7:7e:a5:4c:68:7f:25:7d:8f:ec:c3:c7:4e:37:4b:6c:a8:2c:
3d:78:9a:f6:54:e4:c2:f5:56:b5:14:af:35:8b:fe:77:ac:bd:
62:2f:7e:36:5b:f2:b5:cd:15:82:d7:38:12:e3:01:49:9e:70:
e2:ea:1a:da:26:85:1a:c8:b4:e7:33:86:aa:96:13:ef:ef:31:
7e:76:04:92:83:fa:75:e6:85:cb:36:82:b1:9d:c0:07:99:61:
5f:b9:88:cb:4e:aa:61:7d:bd:2d:6c:ad:49:a5:64:24:38:02:
c0:7a:82:a8:e3:97:e4:c2:68:ea:b0:f0:6d:19:3c:0b:ec:e5:
ee:78:50:d7:b0:75:5a:b7:b8:48:f5:30:0d:f1:ea:c8:ab:f9:
dd:46:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:05 2026 by rpki-client