
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier: mf2YyPnFgcSl4ZfyWuaISId4GZuCVzSDkeucA1nlJbs=
Subject key identifier: FF:A4:50:FF:2F:CB:08:B9:D5:BF:7C:93:40:8A:3D:23:6F:55:63:C3
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019F92117D023D4B9684254C5DFD572F7981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number: 19FB
Signing time: Fri 24 Jul 2026 03:00:47 +0000
Manifest this update: Fri 24 Jul 2026 03:00:47 +0000
Manifest next update: Sat 25 Jul 2026 03:00:47 +0000
Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: zhMQLYWP4kbD7PSH9xJwAQOjFbHb8v7xQaXg0sjSLT8=)
16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:7d:02:3d:4b:96:84:25:4c:5d:fd:57:2f:79:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jul 24 03:00:47 2026 GMT
Not After : Jul 25 03:00:47 2026 GMT
Subject: CN=ffa450ff2fcb08b9d5bf7c93408a3d236f5563c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:dd:f6:e4:ac:07:c8:09:42:01:5c:df:46:
28:c0:de:ed:92:41:c0:4e:a1:ff:e4:37:f5:28:07:
43:bd:41:ff:ca:29:c9:78:c2:49:4c:f3:f9:4b:75:
61:ea:48:c7:96:be:12:e1:16:53:fc:54:3c:8c:29:
e5:17:d9:26:be:c4:54:f4:26:a2:83:65:46:77:d2:
eb:6a:d2:44:9d:1a:44:82:66:ce:c5:0f:a8:b7:22:
bb:0b:e4:51:ee:b3:1f:91:3a:50:da:bf:c6:14:a6:
a3:7f:49:84:46:67:24:8a:44:31:4a:80:75:7f:99:
e3:23:a0:ac:3c:0d:46:b6:f7:9c:16:33:f2:89:83:
fc:d7:2a:4d:10:ea:00:c2:df:44:aa:d1:48:d9:1d:
94:5a:65:52:7d:f1:96:4c:25:cb:fd:77:94:51:65:
92:79:e1:a2:8e:1f:1d:bf:1e:2b:63:4d:e0:0e:2c:
b0:bf:88:ae:e5:88:5c:3b:9a:da:ba:10:05:ac:ef:
42:d0:5a:66:65:76:65:d1:e5:f1:ae:ee:5a:e0:1f:
ae:a0:ad:83:60:3b:29:0f:de:60:22:a4:5c:89:0f:
7e:0d:fe:b0:1a:aa:45:1b:53:4b:f0:78:0d:d8:dd:
d1:02:8d:da:35:66:18:40:b2:ad:fb:b3:1d:89:ad:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:50:FF:2F:CB:08:B9:D5:BF:7C:93:40:8A:3D:23:6F:55:63:C3
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0c:2e:ee:0e:c6:79:99:ef:a8:22:7e:c4:a6:53:87:f8:22:
5e:b4:42:07:55:8a:e1:25:d0:9b:2b:a6:4e:8e:fc:4f:e7:77:
b8:31:cb:27:5e:11:ac:03:39:40:01:50:2c:69:98:48:23:8a:
b3:30:46:c3:ac:e8:1c:06:ab:cd:35:18:13:bb:59:e3:0b:99:
cc:b9:94:7a:75:7a:fa:4d:cc:4c:02:fc:c2:61:65:2f:d8:6d:
93:fc:25:0f:90:b4:a1:d0:8a:7f:86:b1:ad:02:de:56:3f:1e:
7c:6a:0d:d7:91:d3:c9:db:d5:f7:d8:66:cd:d9:04:18:c4:97:
05:fb:7a:8f:54:a1:c2:92:d1:8a:71:18:fa:a3:ca:73:1f:05:
5b:51:d4:b6:4e:3e:21:fa:83:0b:c5:f9:81:43:29:5d:5d:67:
d1:d3:5f:a6:7b:e6:64:35:d9:e3:18:d4:34:d9:23:97:75:76:
ac:01:f5:e2:66:cc:0b:d7:bc:45:c3:46:ff:fe:07:18:d0:7b:
d4:0e:ac:ae:ca:78:13:87:d7:ba:2c:8b:3c:06:12:9f:b2:d2:
49:5a:78:f4:43:6c:94:8b:72:a4:cd:c9:da:11:f6:6d:c6:52:
33:8d:76:24:a3:d2:22:68:b0:42:d9:9a:ca:88:b7:e6:91:a1:
dc:66:b6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEX0CPUuWhCVMXf1XL3mBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwNzI0MDMwMDQ3WhcNMjYwNzI1MDMwMDQ3WjAzMTEwLwYDVQQD
EyhmZmE0NTBmZjJmY2IwOGI5ZDViZjdjOTM0MDhhM2QyMzZmNTU2M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpfd9uSsB8gJQgFc30YowN7tkkHA
TqH/5Df1KAdDvUH/yinJeMJJTPP5S3Vh6kjHlr4S4RZT/FQ8jCnlF9kmvsRU9Cai
g2VGd9LratJEnRpEgmbOxQ+otyK7C+RR7rMfkTpQ2r/GFKajf0mERmckikQxSoB1
f5njI6CsPA1GtvecFjPyiYP81ypNEOoAwt9EqtFI2R2UWmVSffGWTCXL/XeUUWWS
eeGijh8dvx4rY03gDiywv4iu5YhcO5rauhAFrO9C0FpmZXZl0eXxru5a4B+uoK2D
YDspD95gIqRciQ9+Df6wGqpFG1NL8HgN2N3RAo3aNWYYQLKt+7Mdia0ZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+kUP8vywi51b98k0CKPSNvVWPDMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgwu7g7G
eZnvqCJ+xKZTh/giXrRCB1WK4SXQmyumTo78T+d3uDHLJ14RrAM5QAFQLGmYSCOK
szBGw6zoHAarzTUYE7tZ4wuZzLmUenV6+k3MTAL8wmFlL9htk/wlD5C0odCKf4ax
rQLeVj8efGoN15HTydvV99hmzdkEGMSXBft6j1ShwpLRinEY+qPKcx8FW1HUtk4+
IfqDC8X5gUMpXV1n0dNfpnvmZDXZ4xjUNNkjl3V2rAH14mbMC9e8RcNG//4HGNB7
1A6srsp4E4fXuiyLPAYSn7LSSVp49ENslItypM3J2hH2bcZSM412JKPSImiwQtma
yoi35pGh3Ga2rA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:20 2026 by rpki-client