
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
File: lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json)
Hash identifier: Y08l0xCI44Eabv8IdBYNxJYhaSah7UpY/8M/S21N2qY=
Subject key identifier: 02:7D:96:32:F9:88:F0:E2:1E:10:6A:46:E4:77:58:55:54:E2:C2:74
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 01A0C66AD13CE7FE13EA90E937487109DA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:23 +0000
Manifest this update: Tue 22 Sep 2026 00:01:23 +0000
Manifest next update: Wed 23 Sep 2026 00:01:23 +0000
Files and hashes: 1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=)
2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=)
3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=)
4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=)
5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=)
6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=)
7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=)
8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=)
9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=)
10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=)
11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=)
12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=)
13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=)
14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=)
15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=)
16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: NUxAi6pPjq/WT+DExTag6ylRymEvSwiPkvPL2O+sBkw=)
17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=)
18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=)
19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=)
20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=)
21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=)
22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=)
23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:d1:3c:e7:fe:13:ea:90:e9:37:48:71:09:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Sep 22 00:01:23 2026 GMT
Not After : Sep 23 00:01:23 2026 GMT
Subject: CN=027d9632f988f0e21e106a46e477585554e2c274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:26:a3:39:aa:b7:9e:37:c4:71:22:ec:b0:
e9:44:88:d8:d3:db:80:4d:e2:d4:94:2c:ea:2a:30:
c7:3f:3d:2d:03:35:31:9d:a2:5b:1d:fc:85:98:bc:
74:53:fc:85:a9:06:d5:11:73:dc:57:84:0e:4b:14:
50:5e:b8:89:79:2b:a7:ad:e0:15:0d:aa:a3:be:11:
38:da:39:4c:23:f3:08:7b:9a:ec:0a:96:e2:28:cb:
3e:26:44:90:36:13:d9:9a:d4:1e:88:2f:45:0f:50:
f2:c9:b4:4f:f2:20:c7:c5:c7:16:a2:4f:ab:44:45:
23:7e:31:fc:cc:8a:aa:ab:47:e1:25:a7:92:ed:a4:
e1:25:d5:43:6c:6c:81:f1:76:3b:fd:5e:71:68:08:
2f:37:11:20:c6:d6:fe:23:8b:e7:0e:5e:df:7a:45:
8f:db:b6:9b:77:89:fd:ef:ab:a3:ac:3a:48:9a:fb:
23:8b:bf:11:b1:24:be:f8:7c:44:e0:7b:88:a1:75:
59:0f:41:96:76:20:91:35:78:bc:ff:e5:9f:74:65:
01:43:bc:81:ff:d5:50:c9:ae:b6:4a:72:7d:e5:b9:
d8:26:ab:dd:1e:76:e8:d2:16:a1:4f:32:88:8a:94:
f5:db:01:8f:a5:5e:6e:83:1d:36:59:62:00:7b:3d:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:96:32:F9:88:F0:E2:1E:10:6A:46:E4:77:58:55:54:E2:C2:74
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bb:a6:1d:2f:04:b7:e7:28:0f:7d:a9:a9:e0:0c:c3:83:94:
8c:58:d2:0f:9a:94:9d:a5:94:85:2a:51:0e:46:15:ae:e1:2f:
79:ed:40:35:18:85:38:98:74:b6:a0:62:f0:da:2a:d4:88:3f:
0d:8a:cc:3d:1e:0f:0c:c2:cb:10:15:8b:59:31:5f:04:26:37:
bc:65:e1:43:44:63:11:57:5a:a2:b5:df:da:e0:00:2c:da:40:
5b:ad:bb:ff:bb:0b:47:90:4a:db:34:1b:f9:93:2e:20:21:a0:
5a:5f:4a:cd:bc:22:45:63:7e:a5:92:de:48:43:37:7b:79:0c:
a4:5c:a5:0d:48:5b:3d:f9:ec:f0:e9:e2:af:4e:5e:80:bf:56:
3d:70:36:96:7c:3e:df:f6:a7:33:b9:08:59:de:a4:97:b6:76:
b3:3a:66:ad:b2:a0:2d:af:3a:32:4c:be:e9:e5:99:80:28:46:
5a:aa:91:c9:1b:4c:8b:1a:b9:72:f4:7c:9d:1a:85:9e:a3:0e:
6b:4f:c4:33:81:f4:55:ce:41:f0:4d:47:43:85:e4:4e:bc:45:
b5:3b:dd:61:53:d4:e6:1d:66:24:a1:ea:f0:3c:b4:22:2f:87:
53:8a:a3:ea:83:97:64:35:04:11:bb:29:dd:f1:29:5f:6a:06:
5c:37:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:18:05 2026 by rpki-client