$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: 3EMDPu21YhycotOYvL0StmZGaXvS35mlUpIYR6UPfbM= Subject key identifier: 85:5C:64:80:78:EC:E4:1B:A3:A2:FB:35:8F:68:B5:05:5C:9B:44:67 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019D397827D3BE695CCDCB55516302045D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 18C4 Signing time: Sun 29 Mar 2026 12:01:08 +0000 Manifest this update: Sun 29 Mar 2026 12:01:08 +0000 Manifest next update: Mon 30 Mar 2026 12:01:08 +0000 Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=) 2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=) 3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=) 4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=) 5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=) 6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=) 7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=) 8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=) 9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=) 10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=) 11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=) 12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=) 13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=) 14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: pbjIIwq16kbjrD4g0ERP2KIPSaeFbMqs1r1d3xdzS1Q=) 16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=) 17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=) 18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=) 19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=) 20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:78:27:d3:be:69:5c:cd:cb:55:51:63:02:04:5d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Mar 29 12:01:08 2026 GMT Not After : Mar 30 12:01:08 2026 GMT Subject: CN=855c648078ece41ba3a2fb358f68b5055c9b4467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:21:2a:6a:8b:9c:1d:f8:61:b1:bd:5f:a3: 27:64:87:42:f2:04:32:67:3d:d7:d3:f6:55:ab:89: 3b:98:25:08:3c:41:61:7d:0c:8d:6b:6d:43:c6:dc: 77:e2:a9:bf:a9:34:55:1d:64:37:fa:80:04:e3:3c: be:9c:a9:ea:57:cb:06:93:80:d5:d3:0b:b5:46:64: 0e:35:86:7f:4e:f0:a8:b9:64:1d:42:7b:64:3f:d5: 20:b3:34:5a:43:e4:ae:fc:7d:76:f2:d5:d8:6b:d7: 6a:3d:0d:8d:b9:fe:53:08:9f:1c:20:b8:08:b0:3a: 0d:68:eb:7f:80:11:3c:a4:8b:46:8d:f2:9d:e1:7c: 6a:7d:9d:88:98:f6:17:72:07:56:a5:2e:49:da:9e: 85:5b:39:7b:d4:3c:a2:b9:48:5b:c0:fb:90:ef:ae: 66:e5:44:17:44:52:28:e3:8c:3e:22:45:80:0a:c2: 58:21:31:1b:99:46:38:56:b0:69:06:52:09:26:95: 25:bf:51:e9:7d:1a:85:b2:0c:f1:0a:a0:e4:f0:51: ae:16:a2:7a:6b:cb:ef:47:c7:ce:d4:52:e0:9c:6d: 02:18:df:3b:99:8e:fe:ce:65:73:95:2d:4a:c6:d8: c5:2e:33:d5:55:c9:23:4a:b6:24:cb:a6:56:ab:71: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5C:64:80:78:EC:E4:1B:A3:A2:FB:35:8F:68:B5:05:5C:9B:44:67 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:33:45:dd:69:e1:ec:dc:5e:30:d8:99:62:50:33:0d:ad:59: 81:71:e1:ec:57:76:86:52:a4:bd:18:c6:fe:5d:4c:3c:ef:b1: fa:37:a5:da:7a:b9:c9:3a:13:df:36:9a:f1:d8:65:da:d3:54: 88:f8:59:e1:6d:41:a0:04:c6:70:38:19:57:d9:ff:6e:07:a7: 07:cd:57:5f:ed:7f:68:b9:2c:ec:5f:ae:ac:4a:69:12:6b:9e: 28:82:21:62:6d:74:fd:8b:ce:f1:81:ef:02:ed:15:6d:13:57: 1b:bc:8b:8f:b8:15:a2:39:cc:47:49:03:ca:28:4c:92:a1:1e: 16:ff:f8:6f:12:fe:bc:fa:39:e6:29:d5:65:18:79:0f:37:7f: 55:4c:7e:63:80:c0:d8:c5:25:bd:d8:76:70:f0:f8:42:78:0b: 96:17:97:c4:be:a0:5b:cb:19:bc:1b:12:a1:ea:06:f8:a9:d2: ad:5c:bb:e9:3f:7a:24:95:a5:9c:e3:b1:a3:e6:f3:5e:6d:1e: ed:ae:c9:65:e3:f3:f9:65:22:55:f4:cd:7c:83:d4:2f:90:fc: 1b:e9:1d:77:7f:c4:3b:d3:2d:9e:80:35:90:96:a1:8c:85:ed: ef:b9:37:f5:76:5e:47:7e:77:ae:d7:ab:72:4e:b9:bb:ed:99: 8e:04:09:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05eCfTvmlczctVUWMCBF1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMzI5MTIwMTA4WhcNMjYwMzMwMTIwMTA4WjAzMTEwLwYDVQQD Eyg4NTVjNjQ4MDc4ZWNlNDFiYTNhMmZiMzU4ZjY4YjUwNTVjOWI0NDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/UhKmqLnB34YbG9X6MnZIdC8gQy Zz3X0/ZVq4k7mCUIPEFhfQyNa21Dxtx34qm/qTRVHWQ3+oAE4zy+nKnqV8sGk4DV 0wu1RmQONYZ/TvCouWQdQntkP9UgszRaQ+Su/H128tXYa9dqPQ2Nuf5TCJ8cILgI sDoNaOt/gBE8pItGjfKd4XxqfZ2ImPYXcgdWpS5J2p6FWzl71DyiuUhbwPuQ765m 5UQXRFIo44w+IkWACsJYITEbmUY4VrBpBlIJJpUlv1HpfRqFsgzxCqDk8FGuFqJ6 a8vvR8fO1FLgnG0CGN87mY7+zmVzlS1KxtjFLjPVVckjSrYky6ZWq3G/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVcZIB47OQbo6L7NY9otQVcm0RnMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDNF3Wnh 7NxeMNiZYlAzDa1ZgXHh7Fd2hlKkvRjG/l1MPO+x+jel2nq5yToT3zaa8dhl2tNU iPhZ4W1BoATGcDgZV9n/bgenB81XX+1/aLks7F+urEppEmueKIIhYm10/YvO8YHv Au0VbRNXG7yLj7gVojnMR0kDyihMkqEeFv/4bxL+vPo55inVZRh5Dzd/VUx+Y4DA 2MUlvdh2cPD4QngLlheXxL6gW8sZvBsSoeoG+KnSrVy76T96JJWlnOOxo+bzXm0e 7a7JZePz+WUiVfTNfIPUL5D8G+kdd3/EO9MtnoA1kJahjIXt77k39XZeR353rter ck65u+2ZjgQJ0w== -----END CERTIFICATE-----Generated at Sun Mar 29 20:04:37 2026 by rpki-client