
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier: Es/tIxJySjy8fI6UPW/u2z+x5T2zUVthtgysBarqg8Q=
Subject key identifier: 49:FD:31:F0:DA:89:D7:E8:BB:25:BF:5C:89:64:BA:35:36:6B:F3:FE
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019D9DE3A7A80685882CEE976B2396D11D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number: 18F8
Signing time: Sat 18 Apr 2026 00:00:35 +0000
Manifest this update: Sat 18 Apr 2026 00:00:35 +0000
Manifest next update: Sun 19 Apr 2026 00:00:35 +0000
Files and hashes: 1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: rGbVgBfeKpHWVquf5zv/BpS74pPl3VcojWZUJZ4/N9E=)
16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:a7:a8:06:85:88:2c:ee:97:6b:23:96:d1:1d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Apr 18 00:00:35 2026 GMT
Not After : Apr 19 00:00:35 2026 GMT
Subject: CN=49fd31f0da89d7e8bb25bf5c8964ba35366bf3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:2f:b6:8f:d8:49:25:18:d4:12:4f:fc:af:
12:72:e4:3e:1c:f4:09:0a:a5:b3:ac:97:15:9e:f1:
e5:f3:14:eb:2f:ef:cf:da:1e:9f:37:a6:73:00:50:
2a:96:14:e4:66:5f:7a:47:ab:6d:a4:88:32:f2:25:
70:3b:b2:5e:1b:2a:0e:3c:90:04:1b:ef:e9:44:19:
53:98:61:53:b6:a1:1e:64:86:a0:88:7f:10:89:ab:
42:bb:af:7b:c4:af:ff:78:69:16:71:2b:c7:35:68:
43:b1:4d:69:82:c9:c2:54:59:ba:a1:e6:94:7e:e3:
19:3c:b3:90:dc:01:b1:73:91:7c:8d:86:98:5c:74:
ea:6e:7c:e2:a9:20:e2:18:cc:76:42:39:00:41:4c:
1c:df:3c:14:6c:ec:de:43:c9:2a:db:d2:50:3a:0f:
93:c3:2c:ae:03:46:b1:37:84:68:9b:8c:30:44:96:
91:8b:83:03:1f:a8:e8:cb:e9:29:6c:35:d9:7f:cf:
db:96:d4:3a:aa:b9:fc:b3:88:05:43:1e:66:45:3b:
fd:f3:87:2e:10:7c:f0:be:59:d7:b6:37:28:a0:73:
0d:3c:2b:aa:ae:95:79:bc:1d:03:e5:d9:95:bb:b8:
ac:fc:fa:53:d4:db:77:6e:8a:5a:52:12:9a:0e:c2:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:31:F0:DA:89:D7:E8:BB:25:BF:5C:89:64:BA:35:36:6B:F3:FE
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:53:9c:5f:6f:07:44:db:74:56:c8:51:55:8f:22:85:0d:6a:
e3:bd:11:a2:f0:15:b5:1b:4d:b7:3a:73:29:48:23:9b:65:79:
64:bb:7a:d1:e7:e0:8e:3f:d4:68:1f:15:63:d9:25:65:33:c2:
9a:d7:9a:10:38:16:41:46:b7:c1:8d:ba:f3:67:ff:0c:63:1b:
e7:1a:af:08:d6:28:72:05:bf:75:61:21:53:6f:a5:49:17:31:
6c:df:c2:5e:12:af:d7:39:17:e4:53:75:ae:1d:62:81:c5:f1:
9c:a6:da:5f:f2:14:bb:b3:88:b0:46:e7:cc:b5:87:5c:3b:e8:
7e:45:6b:cc:5e:9c:bc:0f:e9:07:cc:a8:ec:89:66:94:92:cb:
ac:13:15:42:04:35:51:b9:f1:7e:08:ab:96:91:c0:11:34:28:
90:a8:9f:89:c5:04:41:b8:05:22:48:3a:d5:e6:bd:bb:c5:f3:
37:05:aa:fb:a7:41:1b:2e:97:dd:5f:45:80:73:ab:b7:17:bb:
4e:02:4a:a8:be:72:f6:01:f5:a2:ad:4c:3c:1d:ec:ea:7e:b7:
4e:49:26:60:dd:df:cb:8e:33:0c:fc:b5:80:26:3d:ad:fa:2b:
9b:49:fb:bb:06:db:42:f1:8f:4e:85:83:71:fb:bd:24:6e:d9:
f7:8b:6b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2d46eoBoWILO6XayOW0R2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwNDE4MDAwMDM1WhcNMjYwNDE5MDAwMDM1WjAzMTEwLwYDVQQD
Eyg0OWZkMzFmMGRhODlkN2U4YmIyNWJmNWM4OTY0YmEzNTM2NmJmM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Evto/YSSUY1BJP/K8ScuQ+HPQJ
CqWzrJcVnvHl8xTrL+/P2h6fN6ZzAFAqlhTkZl96R6ttpIgy8iVwO7JeGyoOPJAE
G+/pRBlTmGFTtqEeZIagiH8QiatCu697xK//eGkWcSvHNWhDsU1pgsnCVFm6oeaU
fuMZPLOQ3AGxc5F8jYaYXHTqbnziqSDiGMx2QjkAQUwc3zwUbOzeQ8kq29JQOg+T
wyyuA0axN4Rom4wwRJaRi4MDH6joy+kpbDXZf8/bltQ6qrn8s4gFQx5mRTv984cu
EHzwvlnXtjcooHMNPCuqrpV5vB0D5dmVu7is/PpT1Nt3bopaUhKaDsKoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn9MfDaidfouyW/XIlkujU2a/P+MB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVOcX28H
RNt0VshRVY8ihQ1q470RovAVtRtNtzpzKUgjm2V5ZLt60efgjj/UaB8VY9klZTPC
mteaEDgWQUa3wY2682f/DGMb5xqvCNYocgW/dWEhU2+lSRcxbN/CXhKv1zkX5FN1
rh1igcXxnKbaX/IUu7OIsEbnzLWHXDvofkVrzF6cvA/pB8yo7IlmlJLLrBMVQgQ1
UbnxfgirlpHAETQokKificUEQbgFIkg61ea9u8XzNwWq+6dBGy6X3V9FgHOrtxe7
TgJKqL5y9gH1oq1MPB3s6n63TkkmYN3fy44zDPy1gCY9rform0n7uwbbQvGPToWD
cfu9JG7Z94trwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:19 2026 by rpki-client