$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: cxaWniAdYZQkqVFN8sd1jbWwEN5D3cbefd8pvdDPO+E= Subject key identifier: E1:AD:D2:B5:E3:E1:A0:B9:C5:49:F8:0E:A3:35:9B:39:04:D3:94:16 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019D9BF5C5E8E53CEF6BE33C106F9E217188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 18F7 Signing time: Fri 17 Apr 2026 15:01:08 +0000 Manifest this update: Fri 17 Apr 2026 15:01:08 +0000 Manifest next update: Sat 18 Apr 2026 15:01:08 +0000 Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=) 2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=) 3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=) 4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=) 5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=) 6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=) 7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=) 8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=) 9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=) 10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=) 11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=) 12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=) 13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=) 14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=) 15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: Y1aWZxGX8TlAnm4NgbbJ1z7Hhyq4kaaIOr92XPNH2Q0=) 16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=) 17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=) 18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=) 19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=) 20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:f5:c5:e8:e5:3c:ef:6b:e3:3c:10:6f:9e:21:71:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Apr 17 15:01:08 2026 GMT Not After : Apr 18 15:01:08 2026 GMT Subject: CN=e1add2b5e3e1a0b9c549f80ea3359b3904d39416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:ad:27:38:05:93:1f:28:9f:8a:24:1b:1c: 0a:54:44:88:3c:2c:09:d3:0b:78:6f:e2:30:bf:35: e2:ea:9c:a3:0e:ef:58:1c:05:11:65:34:3c:f0:fc: 84:00:45:4c:ee:fd:93:32:0d:63:22:d6:43:1e:66: d3:9b:b7:18:34:3f:e0:24:57:dd:fb:e3:09:33:b3: 4e:d0:79:39:d7:6e:3e:9e:bb:5e:8e:3f:18:63:f5: e4:35:d5:f2:1b:a0:15:cd:8a:80:a9:8f:53:83:9d: 88:e8:32:d1:60:b1:bd:ff:5e:4b:8b:68:b1:ba:b5: 41:ca:f6:35:a0:61:46:3c:da:78:ae:95:e4:6c:cf: af:00:a0:0e:a3:17:13:96:29:82:cc:ca:5c:44:60: e7:8c:70:7c:17:3b:62:d5:dc:4a:b3:3e:05:c7:84: 37:3f:f5:10:bd:fd:4a:8e:01:3e:32:4e:dc:24:4d: c2:e4:a7:b0:c3:8d:04:61:b3:28:f2:0f:f1:61:2c: a8:b5:5e:69:a1:e6:13:26:a3:e0:26:08:89:cf:0d: f5:bd:2f:29:3a:29:ed:77:7b:ef:6a:65:7a:a8:6d: e4:65:ae:9e:66:98:36:13:e7:cf:3e:92:8f:51:ca: 2c:5f:c0:b2:ff:04:39:82:2f:77:05:43:17:c8:df: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AD:D2:B5:E3:E1:A0:B9:C5:49:F8:0E:A3:35:9B:39:04:D3:94:16 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:60:58:9b:46:47:b0:a5:49:db:bd:b7:56:12:36:2e:6e:2f: 6c:de:53:83:e5:39:c1:59:e1:32:bf:fa:c4:bd:0c:aa:ab:2a: 2a:5a:ce:3b:9b:ac:d1:75:42:2b:ac:7c:3b:76:5d:89:f5:89: 3e:c0:88:2e:13:4a:c5:9c:fa:37:0f:7c:74:cc:c3:a1:78:3e: f0:02:ac:a1:e2:f4:56:98:52:05:09:9f:d5:e3:f2:a8:a3:38: 38:0d:24:47:e9:0c:db:90:7c:ed:b9:be:ac:94:a1:6c:1f:b2: 14:96:1d:96:77:f6:cd:20:c6:3d:a8:2d:72:b4:05:ae:de:d6: 7e:17:7d:ea:58:46:b9:f7:27:9a:df:ef:bf:a4:ae:6a:82:a9: cf:42:42:82:da:4b:af:95:6f:e7:e4:f5:4f:cc:75:7a:f8:2c: d3:dd:61:90:fe:85:36:13:1d:fe:6b:d2:7a:c9:ef:33:f2:15: 1a:9e:97:76:1c:98:dc:9d:d8:dd:a8:72:e0:b2:46:53:90:63: 24:55:3d:ea:0f:50:6d:aa:d4:92:af:9e:01:89:c0:b1:33:67: 58:28:58:4d:39:9d:bd:c1:65:ca:7e:2c:c5:57:2c:8e:d1:40: 51:45:ed:16:01:b9:c0:aa:7b:17:fe:ed:2f:5b:54:d6:4a:16: 89:99:94:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b9cXo5Tzva+M8EG+eIXGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwNDE3MTUwMTA4WhcNMjYwNDE4MTUwMTA4WjAzMTEwLwYDVQQD EyhlMWFkZDJiNWUzZTFhMGI5YzU0OWY4MGVhMzM1OWIzOTA0ZDM5NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyutJzgFkx8on4okGxwKVESIPCwJ 0wt4b+IwvzXi6pyjDu9YHAURZTQ88PyEAEVM7v2TMg1jItZDHmbTm7cYND/gJFfd ++MJM7NO0Hk5124+nrtejj8YY/XkNdXyG6AVzYqAqY9Tg52I6DLRYLG9/15Li2ix urVByvY1oGFGPNp4rpXkbM+vAKAOoxcTlimCzMpcRGDnjHB8Fzti1dxKsz4Fx4Q3 P/UQvf1KjgE+Mk7cJE3C5Keww40EYbMo8g/xYSyotV5poeYTJqPgJgiJzw31vS8p Ointd3vvamV6qG3kZa6eZpg2E+fPPpKPUcosX8Cy/wQ5gi93BUMXyN8SewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGt0rXj4aC5xUn4DqM1mzkE05QWMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGBYm0ZH sKVJ2723VhI2Lm4vbN5Tg+U5wVnhMr/6xL0MqqsqKlrOO5us0XVCK6x8O3ZdifWJ PsCILhNKxZz6Nw98dMzDoXg+8AKsoeL0VphSBQmf1ePyqKM4OA0kR+kM25B87bm+ rJShbB+yFJYdlnf2zSDGPagtcrQFrt7Wfhd96lhGufcnmt/vv6SuaoKpz0JCgtpL r5Vv5+T1T8x1evgs091hkP6FNhMd/mvSesnvM/IVGp6XdhyY3J3Y3ahy4LJGU5Bj JFU96g9QbarUkq+eAYnAsTNnWChYTTmdvcFlyn4sxVcsjtFAUUXtFgG5wKp7F/7t L1tU1koWiZmUSw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:14:58 2026 by rpki-client