$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json) Hash identifier: DLST4HF5G6uo4EPLLTkl6lryQf4bNpSUGsNmHE3aUgY= Subject key identifier: 12:57:F0:00:9D:B8:EF:CC:75:57:02:F3:72:B8:CD:E4:43:1C:2F:90 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 01A0CFDB3F1E21F9F66442C0693549382630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft Manifest number: 1AC1 Signing time: Wed 23 Sep 2026 20:00:47 +0000 Manifest this update: Wed 23 Sep 2026 20:00:47 +0000 Manifest next update: Thu 24 Sep 2026 20:00:47 +0000 Files and hashes: 1: 0h-gynlt37_ccfmJ3_-3V9IsODo.roa (hash: lhk56T89fsYDt9b3bZzoR43znTFjvZYbijTV/1C9Si0=) 2: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=) 3: DNixYNCfOx-3pVzNrpIjVDu3-bM.roa (hash: 8RDkaqODnshrgOrJsbzCFmxnXNivbhGSmZclcOklkTM=) 4: DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa (hash: uYInFYzDeRAdWcAcrc9tbS0qrMrDwJVw7F9l4//iM4o=) 5: ETkKagkgQjnGBNgqOyAmTkHn0P4.roa (hash: 6KoIwag+dQ/SFaGrb0LDubj89Z8MHJmf6ejIXexoZAM=) 6: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=) 7: GgJTJx_b5aOrjfbC7HKHi62LrcY.roa (hash: PnUpyulLa8GGkQy4mSxl7aVOPLy8nEhjtw1K51C+1bI=) 8: Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa (hash: TU3oVPvyWOIEJstN9ZVVdTsiXgUUc4Vlg6zQUCF02SE=) 9: LBUexS1wq8AOyPYNOmyKpXx9zNs.roa (hash: nF2TOFtPqERUujfrIj1cE2WTysCpGfddroPkP+wf4gg=) 10: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=) 11: Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa (hash: v3/IENdSa8OyjnUENK4zTVbFIGnNSEC4jJo2ZT+P0fw=) 12: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=) 13: Xwtva-5JS24pgtPa6RiyB6jgWs8.roa (hash: 4crKYMPlObMDOjEeTCvMoGko6l7Xz46lTNJ2hPww31s=) 14: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=) 15: dYKy0V0V-kDfDOZR4gtFzNeiaww.roa (hash: ECNi8rSbsFUBmyj3614uPGhFINVbMd3PxyWgQRCiork=) 16: gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa (hash: e17L5xzP7AyerioqF9cvfemAnnXUxd+u4XnsDKjQioc=) 17: kb6gSfM5mGHVL2sldaFxnmKjhg0.roa (hash: M9+8l6+F24TF6oMlUeKq+hsgUYqqlaAwBaPlCZF5HRE=) 18: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: rpjaawJJlMe9/W8kRiUrVbCe4d/MwTZiH03S9bMcI+s=) 19: nwblp8j45JxKR4DziERGe--4qw4.roa (hash: KXUbXAoyGwmjgDKgVdVwzHhR+nJna06EKg7sAYzyOmE=) 20: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=) 21: tO4CEoSB6kxpv7bhTHEnpWackIc.roa (hash: FEK2OPgPfqRTSL5u/YZmiQXmpGK2M6+AWhKFOM6G6As=) 22: x2QeoV9YjEnvngKa8MC3rROtI0s.roa (hash: TLUO3bCDce91dJPd3p+jeNSpDA+KWUjSTGFeGUMfFFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:db:3f:1e:21:f9:f6:64:42:c0:69:35:49:38:26:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Sep 23 20:00:47 2026 GMT Not After : Sep 24 20:00:47 2026 GMT Subject: CN=1257f0009db8efcc755702f372b8cde4431c2f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:bf:0e:c8:04:16:9e:d6:dc:b5:ba:fc:68: 4d:19:a6:97:5e:62:b6:65:5a:13:85:49:a4:29:b9: 89:03:05:8f:7a:41:53:20:2d:d5:0f:d7:c8:ff:06: 3b:c6:7e:e0:8a:72:34:4d:95:74:08:1a:dc:80:f9: 7d:90:f3:a4:e9:3f:3b:40:13:1b:2b:53:43:c2:3b: 66:9a:a1:98:4b:e4:99:dd:5c:33:ed:ea:40:5d:d4: 13:d5:56:55:59:81:ba:19:a4:21:00:c1:7e:32:1a: 13:89:85:33:7c:aa:56:7d:d8:61:6e:ff:6f:f8:a4: 42:5c:83:5e:50:c0:16:aa:20:3d:61:0e:d9:df:7c: 3a:ea:91:8e:df:2e:27:8c:7b:0e:eb:65:5d:dc:6d: 7e:bd:93:61:a4:75:fa:fd:b8:c3:79:29:1f:33:ff: e6:21:4f:c7:0e:1b:c0:d1:d3:c8:3a:56:9e:5d:53: f7:1f:25:41:7e:91:6f:d4:c5:d4:7f:a4:b6:f4:fb: 9b:ec:9f:51:bc:e7:e7:90:a5:43:ff:93:15:ec:d7: 48:b4:c2:2b:f8:61:ea:99:87:94:1c:69:fe:4d:93: ba:6e:5d:53:ae:47:4c:36:41:74:ae:1e:40:f3:80: 3c:c2:ed:bd:19:88:81:c2:d1:d7:ff:92:f4:6c:aa: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:F0:00:9D:B8:EF:CC:75:57:02:F3:72:B8:CD:E4:43:1C:2F:90 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c7:63:80:f9:50:52:cb:c6:cf:3d:15:82:65:13:e0:2a:a1: 85:a2:c6:b6:da:4c:3e:57:af:14:ab:db:55:0b:fa:80:7b:71: 3e:48:e1:ec:6e:f2:e6:25:94:9b:1c:9e:62:76:ca:47:ad:0d: 6e:ca:b2:17:74:41:b4:68:d1:25:09:30:6f:80:cd:02:76:ba: 5d:bd:40:e8:a0:e2:35:96:dd:2b:af:07:29:f7:ae:f3:fb:b4: b8:9a:54:0e:f3:ab:f5:60:65:78:f6:e5:75:ef:ee:db:91:86: 17:b7:d1:80:ba:8f:57:0f:63:f1:3b:07:49:23:3d:39:e3:c1: ad:b5:5c:d9:c2:4d:e3:7f:99:b6:07:e2:19:c5:60:9c:71:26: 84:6d:f3:d5:b8:98:cb:37:b7:b4:3b:9d:c7:08:90:63:c6:1a: 7b:58:22:95:58:f9:54:78:88:36:d8:32:4d:4d:52:00:9a:bd: 48:12:cc:29:5d:4f:fc:7d:07:60:40:d1:70:53:8f:ac:43:e2: 3d:96:45:a8:43:14:cd:c2:b1:ad:17:a5:1e:a7:56:35:92:91: 88:6b:63:b3:5e:39:ab:6f:95:4f:98:bf:cf:d9:01:86:65:a5: 61:ba:c6:ac:51:6d:5a:9a:cb:31:db:21:5b:1c:ed:c7:93:d6: 61:4b:92:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP2z8eIfn2ZELAaTVJOCYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwOTIzMjAwMDQ3WhcNMjYwOTI0MjAwMDQ3WjAzMTEwLwYDVQQD EygxMjU3ZjAwMDlkYjhlZmNjNzU1NzAyZjM3MmI4Y2RlNDQzMWMyZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqK/DsgEFp7W3LW6/GhNGaaXXmK2 ZVoThUmkKbmJAwWPekFTIC3VD9fI/wY7xn7ginI0TZV0CBrcgPl9kPOk6T87QBMb K1NDwjtmmqGYS+SZ3Vwz7epAXdQT1VZVWYG6GaQhAMF+MhoTiYUzfKpWfdhhbv9v +KRCXINeUMAWqiA9YQ7Z33w66pGO3y4njHsO62Vd3G1+vZNhpHX6/bjDeSkfM//m IU/HDhvA0dPIOlaeXVP3HyVBfpFv1MXUf6S29Pub7J9RvOfnkKVD/5MV7NdItMIr +GHqmYeUHGn+TZO6bl1TrkdMNkF0rh5A84A8wu29GYiBwtHX/5L0bKrxMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJX8ACduO/MdVcC83K4zeRDHC+QMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsdjgPlQ UsvGzz0VgmUT4CqhhaLGttpMPlevFKvbVQv6gHtxPkjh7G7y5iWUmxyeYnbKR60N bsqyF3RBtGjRJQkwb4DNAna6Xb1A6KDiNZbdK68HKfeu8/u0uJpUDvOr9WBlePbl de/u25GGF7fRgLqPVw9j8TsHSSM9OePBrbVc2cJN43+ZtgfiGcVgnHEmhG3z1biY yze3tDudxwiQY8Yae1gilVj5VHiINtgyTU1SAJq9SBLMKV1P/H0HYEDRcFOPrEPi PZZFqEMUzcKxrRelHqdWNZKRiGtjs145q2+VT5i/z9kBhmWlYbrGrFFtWprLMdsh Wxztx5PWYUuSnQ== -----END CERTIFICATE-----Generated at Wed Sep 23 21:59:01 2026 by rpki-client