
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier: WmV8fC/mplIzrRhYuw646F73KgxIBpGGpKEIb7KYqzE=
Subject key identifier: 56:0F:70:DE:83:A7:A1:52:85:12:60:B9:62:DD:DD:D7:2B:CF:01:BC
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A13DEF3311A51585F2FB457C5B53772201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number: 1AFC
Signing time: Thu 15 Oct 2026 05:00:48 +0000
Manifest this update: Thu 15 Oct 2026 05:00:48 +0000
Manifest next update: Fri 16 Oct 2026 05:00:48 +0000
Files and hashes: 1: 0h-gynlt37_ccfmJ3_-3V9IsODo.roa (hash: lhk56T89fsYDt9b3bZzoR43znTFjvZYbijTV/1C9Si0=)
2: 12XypOmAoK-znDuRGzrupuKutfk.roa (hash: P9k11qqs9f8MRYZwezW+mHJfypy+dvRBToyALf+wv/k=)
3: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
4: 9_fIp1CrRLVWNXP_yuAJPlq6MeM.roa (hash: fEfAioq58Qn6gkCRV5wbbyUYPTK8yDR4QNBJQS2uhgk=)
5: DNixYNCfOx-3pVzNrpIjVDu3-bM.roa (hash: 8RDkaqODnshrgOrJsbzCFmxnXNivbhGSmZclcOklkTM=)
6: DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa (hash: uYInFYzDeRAdWcAcrc9tbS0qrMrDwJVw7F9l4//iM4o=)
7: ETkKagkgQjnGBNgqOyAmTkHn0P4.roa (hash: 6KoIwag+dQ/SFaGrb0LDubj89Z8MHJmf6ejIXexoZAM=)
8: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
9: GgJTJx_b5aOrjfbC7HKHi62LrcY.roa (hash: PnUpyulLa8GGkQy4mSxl7aVOPLy8nEhjtw1K51C+1bI=)
10: Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa (hash: TU3oVPvyWOIEJstN9ZVVdTsiXgUUc4Vlg6zQUCF02SE=)
11: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
12: Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa (hash: v3/IENdSa8OyjnUENK4zTVbFIGnNSEC4jJo2ZT+P0fw=)
13: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
14: Xwtva-5JS24pgtPa6RiyB6jgWs8.roa (hash: 4crKYMPlObMDOjEeTCvMoGko6l7Xz46lTNJ2hPww31s=)
15: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
16: dYKy0V0V-kDfDOZR4gtFzNeiaww.roa (hash: ECNi8rSbsFUBmyj3614uPGhFINVbMd3PxyWgQRCiork=)
17: gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa (hash: e17L5xzP7AyerioqF9cvfemAnnXUxd+u4XnsDKjQioc=)
18: kb6gSfM5mGHVL2sldaFxnmKjhg0.roa (hash: M9+8l6+F24TF6oMlUeKq+hsgUYqqlaAwBaPlCZF5HRE=)
19: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: ink6EQjbi6W7VQ7MH21oa0Fj2nZL3U5fg9e9x2zwCuk=)
20: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
21: tO4CEoSB6kxpv7bhTHEnpWackIc.roa (hash: FEK2OPgPfqRTSL5u/YZmiQXmpGK2M6+AWhKFOM6G6As=)
22: x2QeoV9YjEnvngKa8MC3rROtI0s.roa (hash: TLUO3bCDce91dJPd3p+jeNSpDA+KWUjSTGFeGUMfFFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:33:11:a5:15:85:f2:fb:45:7c:5b:53:77:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Oct 15 05:00:48 2026 GMT
Not After : Oct 16 05:00:48 2026 GMT
Subject: CN=560f70de83a7a152851260b962ddddd72bcf01bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:73:50:93:72:07:1f:08:3e:b2:1e:3f:61:
9a:f0:b8:ce:77:23:6a:aa:c2:0f:65:d2:d2:61:91:
5f:2e:3c:69:5f:3b:72:c1:44:83:da:55:44:d7:93:
2a:21:71:18:85:bf:5f:73:f2:20:5b:ea:ce:80:db:
ad:e7:b4:cf:da:4f:3d:3d:d2:42:5a:4f:93:53:95:
b4:03:eb:2a:9b:d5:d1:2f:a3:61:11:4a:14:2e:a8:
05:26:89:39:c7:cf:20:b0:1e:f7:c3:ff:6e:82:14:
9b:d6:c6:1b:41:26:af:49:c9:81:3e:0d:8a:a6:2d:
e6:35:84:7b:9c:20:35:6d:ce:85:5a:35:e4:69:f4:
16:95:32:81:17:3b:71:6c:7a:f8:27:f5:02:a1:fb:
84:71:08:b4:db:a7:f7:76:8f:d8:fe:e2:bb:19:26:
73:61:18:ed:94:77:7d:bc:ce:c7:11:08:d4:70:0d:
15:f0:2b:63:ae:df:4c:af:9e:9a:07:b5:d0:11:da:
e3:38:4e:21:66:86:3f:0b:6c:91:54:ac:c8:80:9d:
22:e3:8e:33:20:a7:e8:0f:70:5c:3e:c6:31:55:48:
4b:fc:dc:31:5b:c2:7a:fe:62:cd:c0:ac:9d:31:84:
eb:83:91:56:23:cb:e9:06:db:ca:11:14:3b:c8:ac:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:70:DE:83:A7:A1:52:85:12:60:B9:62:DD:DD:D7:2B:CF:01:BC
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a2:78:3b:1c:c7:0f:c5:16:ae:fe:89:aa:11:bd:1d:3c:ae:
98:d1:9b:70:5c:4c:d5:03:1f:7c:91:3a:8c:a1:fe:3e:a4:39:
f0:1e:2d:8d:81:7b:b1:d3:c9:e1:0c:8d:cc:01:a4:de:05:1d:
0a:f3:0f:10:44:87:a9:84:a9:a9:88:22:c6:ce:2f:7c:fc:23:
46:6e:fd:f2:6a:f6:a3:5a:1a:ed:60:9c:3c:df:b2:d2:89:c1:
31:40:d1:80:da:80:ee:fe:fa:63:47:98:7e:b4:de:03:68:3a:
bf:00:c9:a2:36:d6:09:33:94:2d:af:29:6b:5b:b4:59:af:08:
fd:6d:2b:a7:74:42:81:d0:73:1d:bf:03:86:5e:be:65:b3:99:
27:02:ec:e6:27:47:70:64:e5:03:a9:0b:e4:b5:a4:ab:8e:c5:
39:e2:58:f1:92:a0:d1:03:58:ad:14:ff:86:1d:09:26:1f:df:
61:de:e2:91:11:78:23:55:83:c9:12:7c:97:f1:3d:0b:06:ed:
2e:04:f4:f2:f4:77:de:e2:92:87:5b:30:8c:c9:d3:a6:9b:3d:
ae:4f:96:79:bd:f3:69:e5:93:bc:7e:e0:4b:e9:d0:a0:cf:93:
fe:18:ce:1c:8d:36:aa:82:12:ba:b2:af:36:68:16:ad:be:3e:
fb:7e:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:51:39 2026 by rpki-client