
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier: OTZRaZ4Tei9djOl8wCWXps3J5EvsLwT0HgLgrTIbDGU=
Subject key identifier: 07:77:78:A7:17:2A:3D:FF:41:1D:A2:EC:56:62:E9:BC:70:20:F5:F1
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A1DA9388EAFC2390762A574982ECE960EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number: 1B51
Signing time: Sat 14 Nov 2026 15:01:04 +0000
Manifest this update: Sat 14 Nov 2026 15:01:04 +0000
Manifest next update: Sun 15 Nov 2026 15:01:04 +0000
Files and hashes: 1: 0h-gynlt37_ccfmJ3_-3V9IsODo.roa (hash: lhk56T89fsYDt9b3bZzoR43znTFjvZYbijTV/1C9Si0=)
2: 2CWCfCy9K4Vi9k3gQcjDl2NrNEM.roa (hash: 9rqgytTtMM+w+XpSLnW26DVZMUTWIVNTb8QB8FjrNS4=)
3: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
4: DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa (hash: uYInFYzDeRAdWcAcrc9tbS0qrMrDwJVw7F9l4//iM4o=)
5: ETkKagkgQjnGBNgqOyAmTkHn0P4.roa (hash: 6KoIwag+dQ/SFaGrb0LDubj89Z8MHJmf6ejIXexoZAM=)
6: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
7: GgJTJx_b5aOrjfbC7HKHi62LrcY.roa (hash: PnUpyulLa8GGkQy4mSxl7aVOPLy8nEhjtw1K51C+1bI=)
8: Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa (hash: TU3oVPvyWOIEJstN9ZVVdTsiXgUUc4Vlg6zQUCF02SE=)
9: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
10: Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa (hash: v3/IENdSa8OyjnUENK4zTVbFIGnNSEC4jJo2ZT+P0fw=)
11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
12: Xwtva-5JS24pgtPa6RiyB6jgWs8.roa (hash: 4crKYMPlObMDOjEeTCvMoGko6l7Xz46lTNJ2hPww31s=)
13: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
14: dYKy0V0V-kDfDOZR4gtFzNeiaww.roa (hash: ECNi8rSbsFUBmyj3614uPGhFINVbMd3PxyWgQRCiork=)
15: gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa (hash: e17L5xzP7AyerioqF9cvfemAnnXUxd+u4XnsDKjQioc=)
16: j_5CDSXMOqrHPG6FDCM7g-ZB6QU.roa (hash: ZMHtO8ciFMPwXHC89RNtj8BL+Af+U+EUztECColxrQQ=)
17: kb6gSfM5mGHVL2sldaFxnmKjhg0.roa (hash: M9+8l6+F24TF6oMlUeKq+hsgUYqqlaAwBaPlCZF5HRE=)
18: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: 7e865OD5W0rb+ogYFHl1QMYSjrw4V/g9rZPUwX/o5mk=)
19: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
20: ssnuhARu1fuiNnb4_oZWRvDSFXY.roa (hash: zL1smxJXroypMyfkPMa22a+jWX5wbouMpSy2PWfX5No=)
21: tO4CEoSB6kxpv7bhTHEnpWackIc.roa (hash: FEK2OPgPfqRTSL5u/YZmiQXmpGK2M6+AWhKFOM6G6As=)
22: x2QeoV9YjEnvngKa8MC3rROtI0s.roa (hash: TLUO3bCDce91dJPd3p+jeNSpDA+KWUjSTGFeGUMfFFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:88:ea:fc:23:90:76:2a:57:49:82:ec:e9:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Nov 14 15:01:04 2026 GMT
Not After : Nov 15 15:01:04 2026 GMT
Subject: CN=077778a7172a3dff411da2ec5662e9bc7020f5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:50:6b:af:f7:0a:b0:a3:b3:91:18:3d:d8:
49:54:64:f9:e9:f2:82:66:ef:80:43:c0:f1:bd:ca:
f3:e9:c9:6e:20:9e:27:ab:4d:24:86:da:a8:6d:c4:
18:ac:fe:92:6f:0e:3c:73:7e:e9:8c:12:4f:04:e0:
ad:0e:2e:a7:6b:8a:66:93:6c:e7:07:6f:4b:fd:5d:
ad:f6:1e:fd:2b:fc:68:17:4c:f0:83:a0:3a:92:ae:
02:03:de:71:2e:b1:74:3c:20:29:92:ad:0e:be:42:
e9:bf:80:cf:7e:0f:09:80:6a:9e:07:5a:1c:99:84:
ae:e3:7b:6a:e1:62:1a:4d:dd:28:98:15:ff:6f:d3:
26:d0:f8:b3:9c:44:32:60:54:d9:71:1a:c1:28:b2:
b1:94:45:84:cc:39:12:27:c8:a6:99:31:c8:81:11:
9c:e8:5f:a5:b5:62:2a:fe:db:3f:9f:db:07:2f:5a:
04:fe:9b:62:b9:92:d2:6b:4c:49:40:54:ed:5a:dd:
6e:1e:6b:40:c9:46:f1:d4:00:d7:34:76:6c:d5:fa:
fe:49:68:64:28:0e:41:da:5f:2e:19:e1:2a:fb:d5:
b2:d9:ae:29:49:95:f2:ad:34:70:2e:28:68:c9:0d:
41:67:8a:fc:4b:8e:ad:7b:b1:a0:74:9d:2e:7a:70:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:77:78:A7:17:2A:3D:FF:41:1D:A2:EC:56:62:E9:BC:70:20:F5:F1
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:77:f8:b7:72:c8:71:b3:15:0f:f2:76:04:37:48:89:57:90:
ad:c0:ba:1a:d7:aa:ca:aa:08:ad:6f:45:5e:43:75:32:c9:38:
f3:aa:24:d2:ef:88:8c:82:78:8a:ae:29:c0:2e:6b:a5:91:e8:
1b:68:7c:d5:77:1b:2d:db:05:8d:e9:82:f9:c8:78:04:49:19:
4d:f0:fa:4f:14:3e:b9:00:42:e8:0e:e7:2d:02:e3:69:2b:9a:
3b:3a:aa:c8:ba:14:f3:6e:36:9c:72:87:ae:5d:c3:90:06:41:
70:e8:9b:91:c2:1d:ac:23:86:5a:fa:36:aa:d9:51:61:13:68:
6d:4b:7a:23:83:4b:2a:d1:a7:45:81:33:77:fc:e6:78:80:dd:
40:2a:19:97:b1:3f:60:14:42:e2:b9:d5:19:ad:43:7c:b4:6f:
e1:77:51:fc:ca:7b:1e:9c:44:6e:2a:30:85:03:7f:09:8a:0d:
59:f6:09:b2:e8:66:4d:3b:79:23:f7:85:92:2c:84:8c:cb:dc:
46:0a:66:ee:91:10:6d:d1:9a:d8:39:6a:2b:38:17:8b:d2:92:
7d:3f:95:06:ea:92:ad:31:77:3f:28:33:4d:e8:d2:a6:9f:37:
fe:8e:e8:54:88:75:2d:6a:62:c5:a8:dd:74:be:a8:25:f4:81:
9c:76:0b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHak4jq/COQdipXSYLs6WDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYxMTE0MTUwMTA0WhcNMjYxMTE1MTUwMTA0WjAzMTEwLwYDVQQD
EygwNzc3NzhhNzE3MmEzZGZmNDExZGEyZWM1NjYyZTliYzcwMjBmNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmutQa6/3CrCjs5EYPdhJVGT56fKC
Zu+AQ8Dxvcrz6cluIJ4nq00khtqobcQYrP6Sbw48c37pjBJPBOCtDi6na4pmk2zn
B29L/V2t9h79K/xoF0zwg6A6kq4CA95xLrF0PCApkq0OvkLpv4DPfg8JgGqeB1oc
mYSu43tq4WIaTd0omBX/b9Mm0PiznEQyYFTZcRrBKLKxlEWEzDkSJ8immTHIgRGc
6F+ltWIq/ts/n9sHL1oE/ptiuZLSa0xJQFTtWt1uHmtAyUbx1ADXNHZs1fr+SWhk
KA5B2l8uGeEq+9Wy2a4pSZXyrTRwLihoyQ1BZ4r8S46te7GgdJ0uenAg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAd3eKcXKj3/QR2i7FZi6bxwIPXxMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3f4t3LI
cbMVD/J2BDdIiVeQrcC6GteqyqoIrW9FXkN1Msk486ok0u+IjIJ4iq4pwC5rpZHo
G2h81XcbLdsFjemC+ch4BEkZTfD6TxQ+uQBC6A7nLQLjaSuaOzqqyLoU8242nHKH
rl3DkAZBcOibkcIdrCOGWvo2qtlRYRNobUt6I4NLKtGnRYEzd/zmeIDdQCoZl7E/
YBRC4rnVGa1DfLRv4XdR/Mp7HpxEbiowhQN/CYoNWfYJsuhmTTt5I/eFkiyEjMvc
Rgpm7pEQbdGa2DlqKzgXi9KSfT+VBuqSrTF3PygzTejSpp83/o7oVIh1LWpixajd
dL6oJfSBnHYL2A==
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:22:20 2026 by rpki-client