
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier: 8O/0x+My+ea/8n6BYjowy3mn9Gr2LN94Vgh47tk64bo=
Subject key identifier: DB:C2:45:2A:08:1F:9F:CF:D7:4A:7F:71:12:5B:0A:00:22:9A:89:04
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019EC17FF045DF11EDC92E9D8D3D6302F118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number: 198F
Signing time: Sat 13 Jun 2026 15:00:47 +0000
Manifest this update: Sat 13 Jun 2026 15:00:47 +0000
Manifest next update: Sun 14 Jun 2026 15:00:47 +0000
Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: FTCbfkOX3wf6/HRT3z9DWHqfb8DzhQYOdi7DXTzUiSc=)
16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:f0:45:df:11:ed:c9:2e:9d:8d:3d:63:02:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jun 13 15:00:47 2026 GMT
Not After : Jun 14 15:00:47 2026 GMT
Subject: CN=dbc2452a081f9fcfd74a7f71125b0a00229a8904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:48:69:75:63:71:f9:f3:dd:3b:08:20:55:
ba:2d:b1:a8:e0:5b:c1:c1:7e:55:8c:98:92:6f:c3:
dd:83:79:0f:1d:42:73:29:f4:45:54:64:39:b1:44:
52:98:41:49:82:c4:ee:41:75:e7:a6:03:c5:62:2c:
e0:96:50:50:cc:cc:c5:8f:7d:6f:10:79:31:1f:60:
0a:78:9e:42:66:14:2d:7c:1d:b9:1a:eb:f1:0a:97:
d5:f1:2c:25:2e:6d:ab:58:5d:d4:0e:00:26:87:cb:
f8:ea:12:fd:4d:08:bf:da:bd:a7:83:89:34:31:ea:
5e:43:5b:c5:8b:c7:03:23:98:6f:7c:b0:ff:57:78:
f8:37:f4:d5:90:3c:95:a7:a9:b7:fb:30:ee:8c:aa:
6b:8b:64:e0:92:5a:65:a9:76:f8:f0:cd:2f:1b:1a:
2f:0a:57:2a:3a:3e:e0:b3:53:74:22:42:73:96:32:
fb:68:1d:7d:dc:85:b1:0a:4e:d4:fd:ba:2c:c2:fa:
0d:09:b1:30:2f:fb:ee:b7:db:71:71:ac:a5:a9:66:
ea:88:15:f4:b1:1e:e3:6e:98:6f:12:c9:7e:04:8b:
40:1d:31:9c:d9:8b:5b:cb:5e:24:80:3c:02:59:f7:
e5:f1:83:c4:4f:7e:71:ea:a4:db:4a:fa:69:56:e6:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:45:2A:08:1F:9F:CF:D7:4A:7F:71:12:5B:0A:00:22:9A:89:04
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3a:e0:6c:aa:1b:e0:87:6c:3c:fe:6f:f0:34:86:d3:a4:9e:
15:8b:18:cb:2a:9b:48:16:6b:93:ef:24:e2:65:44:3c:18:a5:
8b:31:b9:15:c7:da:25:ef:82:5d:ca:22:c0:bc:67:f1:a0:35:
29:b9:99:dc:bf:cd:9d:c3:3c:21:a3:44:9e:8c:8d:1f:d8:85:
38:53:b8:11:d8:49:ed:7c:82:6e:6c:02:ce:59:ae:c3:26:a2:
cb:46:e3:ef:e8:42:26:34:2e:f1:92:ec:69:f3:30:d1:fb:40:
1b:a8:a2:eb:77:f8:a7:97:23:4f:f8:54:a9:b5:22:37:bf:16:
01:a0:12:af:53:1f:4a:cf:a8:ec:cb:33:f9:9e:c5:de:70:1b:
8c:a7:42:e6:f9:39:af:63:9c:54:d9:2d:5a:42:6c:5f:65:1e:
8a:60:48:3b:53:c4:29:b7:6f:46:2c:35:98:03:74:e9:8e:4c:
9e:90:8f:ef:a5:8b:6c:b4:73:38:7b:3e:21:28:0b:fd:90:d4:
40:fc:55:76:e3:7c:70:a9:1f:09:c7:ad:03:e7:55:33:85:d7:
b3:13:4f:5b:e0:f3:f2:c8:e6:51:f5:c8:dc:ec:b1:f8:20:c9:
f6:26:c1:a8:9f:91:84:de:44:ba:b3:06:76:56:02:92:be:00:
93:20:30:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:22 2026 by rpki-client