$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: 50X9jqV78BR66UqU3p4wD9IOulp3vtPp9Qz8jHF+bVQ= Subject key identifier: CA:17:CE:74:81:49:04:8C:23:C2:DB:08:64:F7:8D:3E:9A:D2:B8:83 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019D31198ED7FA65AE60E618BE0C2192A7B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0EF9 Signing time: Fri 27 Mar 2026 21:00:51 +0000 Manifest this update: Fri 27 Mar 2026 21:00:51 +0000 Manifest next update: Sat 28 Mar 2026 21:00:51 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: lF8Oe7kXB+l++nbTwxsJlFXAhK51rQTtz9eQxCcO+WM=) 3: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 4: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 5: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 6: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 7: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 8: dXvzyfOdOJH0q6xYVkjSdHKWSdE.roa (hash: 7SC4vR0R2kuqeE6TaEujJclCq7gK1eHalGhCH7IVpOw=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:19:8e:d7:fa:65:ae:60:e6:18:be:0c:21:92:a7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Mar 27 21:00:51 2026 GMT Not After : Mar 28 21:00:51 2026 GMT Subject: CN=ca17ce748149048c23c2db0864f78d3e9ad2b883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:89:f8:0f:a8:65:2e:8f:1d:ad:25:4e:ae: 22:4f:1b:2a:10:2c:e2:09:1d:54:a1:0e:2b:85:06: bf:78:42:bd:79:e4:28:84:89:d9:4c:ae:60:3e:5a: 01:be:18:26:bf:3a:e8:52:b6:1e:47:3f:e7:55:9a: 38:e8:8c:dc:04:69:cc:32:bb:b9:cd:ba:f3:2b:2c: b7:f1:6d:55:a0:bf:c4:dd:57:e3:c2:bd:4d:bc:41: 62:67:f0:b8:ab:3e:bd:af:f3:8e:08:b5:6d:06:78: d9:a9:41:65:b9:3d:b1:c7:c6:59:e2:7b:86:be:35: bf:1e:43:93:fd:14:15:56:c5:75:05:3a:9f:84:2d: b0:1e:02:44:a4:56:46:75:4d:96:11:c8:21:c2:95: b0:8e:49:f8:0e:02:3c:f6:0f:74:e8:ff:b2:d4:48: 2b:62:e2:20:3f:9b:4b:24:a8:38:8e:b5:75:a7:33: 36:0d:b7:8b:04:04:ba:6d:93:31:49:04:ac:7d:e3: 15:50:b3:04:07:bf:c9:5f:d1:00:1e:72:cf:72:e8: 6f:e2:d4:68:b8:dd:e2:4c:85:9b:2c:68:6e:35:ff: aa:2a:1c:c6:72:67:d1:e5:80:d5:96:ab:9a:6f:96: dd:86:da:f9:6d:10:d6:c6:82:00:a7:48:57:6e:73: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:17:CE:74:81:49:04:8C:23:C2:DB:08:64:F7:8D:3E:9A:D2:B8:83 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:29:77:ce:1b:fa:de:72:4f:d0:7a:35:63:93:09:fe:e4:f7: eb:7b:f1:7a:5e:a8:d0:42:1e:a8:3e:47:a5:d2:fc:94:13:26: 08:df:10:de:c2:fe:5b:61:3b:d8:60:4f:79:d3:c3:b2:f4:44: 58:2f:ad:ec:12:9b:77:b1:75:19:12:2a:cd:98:eb:c5:36:bd: e7:36:8b:cf:8b:62:b5:35:18:98:d7:57:d4:b2:1e:dc:4a:67: 17:2a:9e:34:e4:d4:e7:4b:ee:6b:00:4b:8c:50:3e:8b:ec:1e: ac:93:c5:99:2b:04:1e:e0:52:cc:ca:c3:db:7e:6b:9c:bd:5d: 30:03:a5:fa:b1:ae:c4:d9:14:bd:15:da:d9:82:91:ee:55:4e: dc:22:bf:6d:f7:8d:4f:7a:13:c3:4c:c0:11:d6:c5:d8:a8:72: 49:7f:97:7e:f6:76:d4:67:71:0d:36:49:92:d2:87:b5:4f:9d: a8:a2:46:b0:07:70:33:50:ef:a7:d6:28:1f:0d:f6:9d:ef:43: 43:1d:b9:c0:e1:2e:94:b2:c1:23:8c:32:ca:8d:3d:0e:e7:12: be:cb:2c:73:d0:2e:2c:e0:75:76:fe:40:54:62:1e:b3:41:73: 32:fd:17:af:34:46:c8:1f:6e:43:3e:83:8f:14:c2:6e:28:d9: 82:57:51:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0xGY7X+mWuYOYYvgwhkqe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMzI3MjEwMDUxWhcNMjYwMzI4MjEwMDUxWjAzMTEwLwYDVQQD EyhjYTE3Y2U3NDgxNDkwNDhjMjNjMmRiMDg2NGY3OGQzZTlhZDJiODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGCJ+A+oZS6PHa0lTq4iTxsqECzi CR1UoQ4rhQa/eEK9eeQohInZTK5gPloBvhgmvzroUrYeRz/nVZo46IzcBGnMMru5 zbrzKyy38W1VoL/E3Vfjwr1NvEFiZ/C4qz69r/OOCLVtBnjZqUFluT2xx8ZZ4nuG vjW/HkOT/RQVVsV1BTqfhC2wHgJEpFZGdU2WEcghwpWwjkn4DgI89g906P+y1Egr YuIgP5tLJKg4jrV1pzM2DbeLBAS6bZMxSQSsfeMVULMEB7/JX9EAHnLPcuhv4tRo uN3iTIWbLGhuNf+qKhzGcmfR5YDVlquab5bdhtr5bRDWxoIAp0hXbnOceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoXznSBSQSMI8LbCGT3jT6a0riDMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXil3zhv6 3nJP0Ho1Y5MJ/uT363vxel6o0EIeqD5HpdL8lBMmCN8Q3sL+W2E72GBPedPDsvRE WC+t7BKbd7F1GRIqzZjrxTa95zaLz4titTUYmNdX1LIe3EpnFyqeNOTU50vuawBL jFA+i+werJPFmSsEHuBSzMrD235rnL1dMAOl+rGuxNkUvRXa2YKR7lVO3CK/bfeN T3oTw0zAEdbF2KhySX+XfvZ21GdxDTZJktKHtU+dqKJGsAdwM1Dvp9YoHw32ne9D Qx25wOEulLLBI4wyyo09DucSvsssc9AuLOB1dv5AVGIes0FzMv0XrzRGyB9uQz6D jxTCbijZgldRbA== -----END CERTIFICATE-----Generated at Sat Mar 28 04:09:59 2026 by rpki-client