$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: U3yjk6O2z0ALjU+xd4LDgX30cl+jumBeWhwwO0z87iQ= Subject key identifier: 79:CC:0C:79:51:DE:EE:DC:7D:C7:DB:D6:9F:2F:B4:88:05:BA:9C:1B Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019D31BF0B79B29D89A72CFF04D96F8270E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 18C0 Signing time: Sat 28 Mar 2026 00:01:37 +0000 Manifest this update: Sat 28 Mar 2026 00:01:37 +0000 Manifest next update: Sun 29 Mar 2026 00:01:37 +0000 Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=) 2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=) 3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=) 4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=) 5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=) 6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=) 7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=) 8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=) 9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=) 10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=) 11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=) 12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=) 13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=) 14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: V1rxZqVMkljwelTMxQuwOOEKQQen86AZobquBFGKK3U=) 16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=) 17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=) 18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=) 19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=) 20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:bf:0b:79:b2:9d:89:a7:2c:ff:04:d9:6f:82:70:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Mar 28 00:01:37 2026 GMT Not After : Mar 29 00:01:37 2026 GMT Subject: CN=79cc0c7951deeedc7dc7dbd69f2fb48805ba9c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:35:6b:9f:1e:f7:8b:8e:f3:90:0b:e9:5b: 2b:16:6a:7b:53:c5:0b:e0:46:c0:bb:ca:db:e1:90: a8:5e:f8:08:74:6e:75:d5:f5:55:88:24:f6:3d:b1: be:6c:33:89:84:51:ae:32:57:de:f2:78:6a:61:70: 03:af:82:0e:ff:62:17:27:e9:ae:c5:f3:b4:fa:77: ce:8d:ac:62:c2:b1:6a:0a:ed:00:fc:07:f6:ec:e4: ff:d6:27:c2:1f:cb:8e:63:93:83:f6:08:e6:97:f6: 92:a0:e2:ae:f7:45:e7:e0:67:02:58:53:dd:dc:ea: d7:e5:4c:69:24:7b:b1:02:48:14:41:c7:04:0e:53: f3:62:06:b8:db:c9:4c:17:35:05:3a:63:ff:e7:a6: ef:aa:85:e5:48:78:cc:b2:33:00:8f:54:bb:80:a5: 56:64:7e:ed:68:39:3b:de:b7:84:ac:78:41:14:dd: f5:c3:53:74:4b:8c:3b:b7:c4:5b:fa:64:2e:bd:09: 25:5f:7c:b7:c6:67:c1:f1:23:44:15:e4:dd:b6:19: f9:d6:98:12:7e:2d:eb:dd:df:e2:b5:b9:53:80:55: 10:46:62:b9:84:41:48:91:9a:8f:8c:2f:c8:1d:e5: 69:6d:8c:b3:d9:7f:64:d0:a3:01:00:de:88:e0:f5: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CC:0C:79:51:DE:EE:DC:7D:C7:DB:D6:9F:2F:B4:88:05:BA:9C:1B X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a4:b3:b8:54:70:1a:32:e8:28:e5:ef:c0:13:21:b1:9b:79: 82:f3:a4:17:58:7d:27:6d:a6:2a:57:23:cb:d1:14:d3:ef:aa: 28:66:95:d8:49:69:bd:63:46:9d:f2:c3:4e:d0:58:5e:c2:c9: e4:20:a5:84:a6:04:82:27:6c:8f:b9:fb:21:51:75:cd:d6:de: bf:10:11:41:63:10:f3:d2:cf:9e:cc:50:9c:25:d0:c0:8e:49: 75:60:25:e8:4e:3b:79:6e:82:c0:ec:ca:33:ba:d1:85:0e:10: 96:f2:30:b8:5d:ef:db:eb:d8:03:26:6a:fa:ec:99:6e:fb:4e: b8:ee:a9:22:85:8e:ed:b3:ef:47:5c:4c:1f:1f:5b:c3:b9:1d: 8c:1e:e0:f2:16:e6:91:45:55:36:3f:93:5e:91:24:a2:f6:56: 32:01:ff:26:df:90:bd:57:5c:df:e2:0a:05:da:4d:e0:86:c7: 00:a6:ea:bc:e2:29:3f:f2:d7:c7:7c:95:77:ce:e3:0c:fb:97: d4:34:92:72:72:fb:6e:6f:9d:0f:87:4d:e0:dc:7f:2c:90:1c: 93:62:99:72:a0:92:9f:cd:76:01:8c:ed:10:54:29:7f:85:0f: 32:ef:f4:fd:fd:fe:d5:46:4a:6c:dd:29:30:78:9a:9f:8c:16: 94:ec:44:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0xvwt5sp2Jpyz/BNlvgnDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMzI4MDAwMTM3WhcNMjYwMzI5MDAwMTM3WjAzMTEwLwYDVQQD Eyg3OWNjMGM3OTUxZGVlZWRjN2RjN2RiZDY5ZjJmYjQ4ODA1YmE5YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmg1a58e94uO85AL6VsrFmp7U8UL 4EbAu8rb4ZCoXvgIdG511fVViCT2PbG+bDOJhFGuMlfe8nhqYXADr4IO/2IXJ+mu xfO0+nfOjaxiwrFqCu0A/Af27OT/1ifCH8uOY5OD9gjml/aSoOKu90Xn4GcCWFPd 3OrX5UxpJHuxAkgUQccEDlPzYga428lMFzUFOmP/56bvqoXlSHjMsjMAj1S7gKVW ZH7taDk73reErHhBFN31w1N0S4w7t8Rb+mQuvQklX3y3xmfB8SNEFeTdthn51pgS fi3r3d/itblTgFUQRmK5hEFIkZqPjC/IHeVpbYyz2X9k0KMBAN6I4PVQBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnMDHlR3u7cfcfb1p8vtIgFupwbMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaSzuFRw GjLoKOXvwBMhsZt5gvOkF1h9J22mKlcjy9EU0++qKGaV2ElpvWNGnfLDTtBYXsLJ 5CClhKYEgidsj7n7IVF1zdbevxARQWMQ89LPnsxQnCXQwI5JdWAl6E47eW6CwOzK M7rRhQ4QlvIwuF3v2+vYAyZq+uyZbvtOuO6pIoWO7bPvR1xMHx9bw7kdjB7g8hbm kUVVNj+TXpEkovZWMgH/Jt+QvVdc3+IKBdpN4IbHAKbqvOIpP/LXx3yVd87jDPuX 1DSScnL7bm+dD4dN4Nx/LJAck2KZcqCSn812AYztEFQpf4UPMu/0/f3+1UZKbN0p MHian4wWlOxENA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:34 2026 by rpki-client