$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json) Hash identifier: 44CQbIfD0RK8vRRrug/A5ne4U6Hw9oE9p/K1XnPIfdI= Subject key identifier: 82:DE:83:48:A6:43:14:AC:F9:71:AD:2F:14:27:10:DC:D9:46:46:69 Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480 Certificate serial: 01A0BEB08447DB5A74455C65476F2511F53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft Manifest number: DC Signing time: Sun 20 Sep 2026 12:00:34 +0000 Manifest this update: Sun 20 Sep 2026 12:00:34 +0000 Manifest next update: Mon 21 Sep 2026 12:00:34 +0000 Files and hashes: 1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=) 2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=) 3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=) 4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=) 5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=) 6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=) 7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=) 8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=) 9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=) 10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=) 11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=) 12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=) 13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=) 14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=) 15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=) 16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: s0AGMeIJalijXaBpVPXCWMjqXqacjYd3rS+ko11RvpY=) 17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=) 18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=) 19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=) 20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=) 21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=) 22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=) 23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b0:84:47:db:5a:74:45:5c:65:47:6f:25:11:f5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480 Validity Not Before: Sep 20 12:00:34 2026 GMT Not After : Sep 21 12:00:34 2026 GMT Subject: CN=82de8348a64314acf971ad2f142710dcd9464669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:5b:d4:a2:20:ef:0b:32:f3:24:a2:80:e2: 45:3e:0e:a8:33:96:77:05:83:f0:2c:25:a6:2f:76: 2e:55:7b:0e:f1:55:fe:d0:6c:fd:7e:11:8c:2e:d5: 45:d6:9e:e6:86:cf:63:59:92:07:46:da:87:e6:6b: 19:59:fa:ad:8f:ec:1b:cd:58:5b:f4:65:e9:a0:7b: 99:97:7b:74:ec:27:47:15:36:fa:0e:ad:f8:96:6d: ec:43:3a:0a:8d:c3:38:4a:03:c0:79:e9:84:85:4d: d9:22:aa:40:7a:42:3d:55:a9:3e:0a:f7:b3:e9:c9: 48:cb:20:5f:0e:51:be:65:7c:61:0b:5f:ed:b4:bf: 7b:3d:a7:56:28:a3:9a:bf:c5:12:2b:f4:02:2b:f7: f0:27:1a:9b:26:30:0b:e9:e0:d2:0a:d0:a5:17:88: 81:b6:28:5f:70:7e:e9:ef:ae:87:26:5f:50:10:59: 26:12:6f:fc:17:84:2b:89:14:30:28:03:a6:29:57: 9a:6b:8b:e5:69:d1:d0:40:91:ea:0e:8b:d1:4a:7d: b2:0c:c4:a6:58:6b:2c:9f:14:d5:ca:ff:c0:e7:dd: 4b:db:0c:bf:ed:a5:01:b6:ed:7d:36:b5:77:e3:9e: 96:2a:56:70:75:95:5b:42:db:25:e4:ac:c8:dc:ed: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DE:83:48:A6:43:14:AC:F9:71:AD:2F:14:27:10:DC:D9:46:46:69 X509v3 Authority Key Identifier: keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:60:07:88:8f:97:7b:aa:12:2f:f1:e7:74:71:4a:ec:da:4c: fa:9a:4e:48:8b:3f:d3:ce:36:fd:77:57:df:4e:ff:a3:f5:70: 9d:41:b5:90:42:d3:e3:a3:b7:4a:60:16:9e:a6:84:f5:7e:d9: f9:c2:ce:7b:35:54:3e:28:06:f6:05:fc:cf:18:d2:93:44:60: 5d:6a:f5:a3:40:3d:0e:db:ca:a7:3a:36:a5:6e:18:13:8d:6f: 75:d3:27:a9:ff:b4:a2:6c:a9:6f:0f:48:71:89:81:53:60:26: c5:94:7f:6d:a4:66:9c:e8:c4:c9:27:b4:c3:af:15:cb:ee:bf: 61:e6:69:e8:e5:c5:b6:64:cd:f3:91:7c:37:7d:dd:a5:a2:78: 30:e4:4a:cf:ce:3d:61:1c:ae:d9:5a:2d:11:c2:37:21:a6:3b: ac:ba:10:82:b6:38:8e:a7:bc:c3:af:c5:ae:8b:09:ca:cc:90: 71:35:66:8b:61:91:12:ef:03:cd:87:53:92:81:63:e3:a1:a3: d2:fb:e6:b5:ee:58:da:e9:ff:58:34:90:4e:71:c0:a1:e9:62: 56:3a:c4:d9:eb:ca:9d:15:f5:33:a3:df:0c:09:82:8d:69:a7: 3e:a1:bf:60:f0:c0:15:0d:7f:17:d0:51:e5:d0:4b:8c:27:bf: ae:be:80:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sIRH21p0RVxlR28lEfU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0 MTc0ODAwHhcNMjYwOTIwMTIwMDM0WhcNMjYwOTIxMTIwMDM0WjAzMTEwLwYDVQQD Eyg4MmRlODM0OGE2NDMxNGFjZjk3MWFkMmYxNDI3MTBkY2Q5NDY0NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIJb1KIg7wsy8ySigOJFPg6oM5Z3 BYPwLCWmL3YuVXsO8VX+0Gz9fhGMLtVF1p7mhs9jWZIHRtqH5msZWfqtj+wbzVhb 9GXpoHuZl3t07CdHFTb6Dq34lm3sQzoKjcM4SgPAeemEhU3ZIqpAekI9Vak+Cvez 6clIyyBfDlG+ZXxhC1/ttL97PadWKKOav8USK/QCK/fwJxqbJjAL6eDSCtClF4iB tihfcH7p766HJl9QEFkmEm/8F4QriRQwKAOmKVeaa4vladHQQJHqDovRSn2yDMSm WGssnxTVyv/A591L2wy/7aUBtu19NrV3456WKlZwdZVbQtsl5KzI3O1QfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILeg0imQxSs+XGtLxQnENzZRkZpMB8GA1UdIwQY MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2AHiI+X e6oSL/HndHFK7NpM+ppOSIs/0842/XdX307/o/VwnUG1kELT46O3SmAWnqaE9X7Z +cLOezVUPigG9gX8zxjSk0RgXWr1o0A9DtvKpzo2pW4YE41vddMnqf+0omypbw9I cYmBU2AmxZR/baRmnOjEySe0w68Vy+6/YeZp6OXFtmTN85F8N33dpaJ4MORKz849 YRyu2VotEcI3IaY7rLoQgrY4jqe8w6/FrosJysyQcTVmi2GREu8DzYdTkoFj46Gj 0vvmte5Y2un/WDSQTnHAoeliVjrE2evKnRX1M6PfDAmCjWmnPqG/YPDAFQ1/F9BR 5dBLjCe/rr6AgQ== -----END CERTIFICATE-----Generated at Sun Sep 20 14:54:57 2026 by rpki-client