$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json) Hash identifier: Jgw/fJmjiezLEWL9W3AaGpc3O/Yh1qKpn8D+0OZTUWE= Subject key identifier: 4F:66:D3:FF:2B:40:0E:E3:8D:85:F5:7C:06:4C:F3:AA:09:CE:8C:C5 Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480 Certificate serial: 019F81FABF5D128851368B889D07E09D6C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft Manifest number: 38 Signing time: Tue 21 Jul 2026 00:02:01 +0000 Manifest this update: Tue 21 Jul 2026 00:02:01 +0000 Manifest next update: Wed 22 Jul 2026 00:02:01 +0000 Files and hashes: 1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=) 2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=) 3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=) 4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=) 5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=) 6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=) 7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=) 8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=) 9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=) 10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=) 11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=) 12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=) 13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=) 14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=) 15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=) 16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: jpBx5am0oOS2/4uAYUhKYHkNf8vukcua1HW69EYW1eo=) 17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=) 18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=) 19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=) 20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=) 21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=) 22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=) 23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 18:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:81:fa:bf:5d:12:88:51:36:8b:88:9d:07:e0:9d:6c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480 Validity Not Before: Jul 21 00:02:01 2026 GMT Not After : Jul 22 00:02:01 2026 GMT Subject: CN=4f66d3ff2b400ee38d85f57c064cf3aa09ce8cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:fa:e2:3a:b6:9b:08:45:c9:3f:4d:ae:c0: 2d:bf:f3:7e:cf:1e:8b:98:95:5c:b3:01:1c:60:b0: 8e:1f:ef:47:73:b1:4c:bc:4f:c1:64:fa:ab:9c:85: c9:6b:30:6c:aa:ae:d0:5f:1f:78:3d:8b:4f:8c:9a: d9:ae:59:6d:2f:bc:10:8a:35:36:d3:9a:e8:df:15: d4:8e:87:1c:cd:e4:5b:3c:8e:66:bf:b1:5c:49:68: 90:42:8e:96:46:dd:26:fa:86:67:d0:1c:96:f0:fd: 20:ac:fa:70:5f:76:d2:6f:6c:91:24:29:66:a2:94: 9f:35:1d:24:e5:21:73:2a:10:56:bb:63:92:fb:2e: c8:fb:58:18:c7:05:d5:2e:8d:a9:1b:58:68:7e:dd: 63:9c:db:d9:d7:f2:07:2c:14:c2:bd:b3:69:f1:4c: 37:e4:31:bf:c1:35:f6:a6:c2:8c:a4:6e:ff:6a:21: 27:e3:ea:17:0e:0f:e6:49:3b:fe:a9:72:b9:b6:c2: 51:bb:d7:33:cd:b1:0b:f8:3a:c0:92:1b:0c:39:78: 5d:81:0a:62:4c:e7:8f:72:63:25:88:18:d2:1b:ff: 23:d5:a3:97:67:a1:ba:6c:07:de:18:77:92:47:3c: c4:95:43:22:cb:92:7f:65:32:47:27:e3:4f:77:2f: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:66:D3:FF:2B:40:0E:E3:8D:85:F5:7C:06:4C:F3:AA:09:CE:8C:C5 X509v3 Authority Key Identifier: keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1c:a5:1c:1e:25:f1:76:55:13:b2:cd:9d:be:9f:aa:ae:1f: 8e:31:56:32:95:00:67:66:28:12:a1:be:be:47:aa:a6:3b:a6: 47:a2:31:3e:94:1d:e5:a1:0b:3d:22:ff:e2:a5:49:d9:b5:8e: 03:73:52:7f:28:c1:70:57:99:b0:11:eb:dd:3b:f1:09:17:7e: 22:1f:2e:88:7a:bf:5b:56:df:fe:df:75:59:54:6e:d6:77:83: d4:fd:57:a5:34:a5:69:12:e6:44:45:23:d4:2e:7c:20:f4:14: 3a:1c:73:d3:14:92:f9:90:81:0f:8d:f2:78:fa:a6:67:91:08: 2d:4f:e6:c7:26:50:6e:ac:65:b6:90:5f:7d:2a:3f:fc:1e:7f: 8c:9b:fa:a5:b2:54:84:8e:b5:12:e9:85:ed:b1:78:9f:5e:53: eb:7c:7b:56:90:ec:ed:40:e5:4e:d8:02:99:cf:2d:48:3a:c9: 50:76:67:47:cf:0e:a7:d6:09:f5:e7:da:ed:ff:73:59:74:0f: a7:5e:d4:0d:83:e5:6f:7c:62:2e:04:b7:82:45:7a:11:4c:7a: 47:e2:89:bc:c8:ce:e5:4e:60:3a:f9:33:ca:d3:b7:31:82:70: 2b:38:e4:43:44:b3:78:c1:3a:b2:d0:5b:db:f8:20:ef:95:ff: fa:5b:66:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+B+r9dEohRNouInQfgnWxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0 MTc0ODAwHhcNMjYwNzIxMDAwMjAxWhcNMjYwNzIyMDAwMjAxWjAzMTEwLwYDVQQD Eyg0ZjY2ZDNmZjJiNDAwZWUzOGQ4NWY1N2MwNjRjZjNhYTA5Y2U4Y2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgT64jq2mwhFyT9NrsAtv/N+zx6L mJVcswEcYLCOH+9Hc7FMvE/BZPqrnIXJazBsqq7QXx94PYtPjJrZrlltL7wQijU2 05ro3xXUjocczeRbPI5mv7FcSWiQQo6WRt0m+oZn0ByW8P0grPpwX3bSb2yRJClm opSfNR0k5SFzKhBWu2OS+y7I+1gYxwXVLo2pG1hoft1jnNvZ1/IHLBTCvbNp8Uw3 5DG/wTX2psKMpG7/aiEn4+oXDg/mSTv+qXK5tsJRu9czzbEL+DrAkhsMOXhdgQpi TOePcmMliBjSG/8j1aOXZ6G6bAfeGHeSRzzElUMiy5J/ZTJHJ+NPdy+lFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9m0/8rQA7jjYX1fAZM86oJzozFMB8GA1UdIwQY MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRylHB4l 8XZVE7LNnb6fqq4fjjFWMpUAZ2YoEqG+vkeqpjumR6IxPpQd5aELPSL/4qVJ2bWO A3NSfyjBcFeZsBHr3TvxCRd+Ih8uiHq/W1bf/t91WVRu1neD1P1XpTSlaRLmREUj 1C58IPQUOhxz0xSS+ZCBD43yePqmZ5EILU/mxyZQbqxltpBffSo//B5/jJv6pbJU hI61EumF7bF4n15T63x7VpDs7UDlTtgCmc8tSDrJUHZnR88Op9YJ9efa7f9zWXQP p17UDYPlb3xiLgS3gkV6EUx6R+KJvMjO5U5gOvkzytO3MYJwKzjkQ0SzeME6stBb 2/gg75X/+ltmjg== -----END CERTIFICATE-----Generated at Tue Jul 21 01:18:55 2026 by rpki-client