$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: PLPb5KkwRSVJJ4IPuTkOvzhZQh5Rj2Ashhyu3rJr2hQ= Subject key identifier: 6F:84:2C:5A:76:4F:70:8B:07:C2:1A:11:9F:E4:84:52:35:D7:BC:FF Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019F0850356C998732A5F2F8E3B703B36CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0FED Signing time: Sat 27 Jun 2026 09:01:41 +0000 Manifest this update: Sat 27 Jun 2026 09:01:41 +0000 Manifest next update: Sun 28 Jun 2026 09:01:41 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: OWbqjnZ6cgvKix4jhkYTxlsZpMPtBfgFb9r/CZsQsmQ=) 3: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 4: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 5: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 6: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 7: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 8: dXvzyfOdOJH0q6xYVkjSdHKWSdE.roa (hash: 7SC4vR0R2kuqeE6TaEujJclCq7gK1eHalGhCH7IVpOw=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 09:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:08:50:35:6c:99:87:32:a5:f2:f8:e3:b7:03:b3:6c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jun 27 09:01:41 2026 GMT Not After : Jun 28 09:01:41 2026 GMT Subject: CN=6f842c5a764f708b07c21a119fe4845235d7bcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:3c:ad:e0:c5:85:0f:37:c2:50:f8:0b:83: 40:4f:27:ca:81:e6:cd:99:f8:9f:94:b3:f0:7e:6c: 71:5f:90:25:06:60:f2:89:a6:bf:5f:07:49:db:be: 31:bb:3d:a4:9f:f1:9a:e3:81:7a:64:a3:ef:06:0f: af:00:7e:61:cc:65:26:bb:2e:7c:f5:47:fd:be:4f: 9a:bb:ef:27:8d:68:dc:00:9b:1f:1f:91:ed:3f:d7: 21:34:2a:77:18:d8:26:ef:18:34:4f:4c:95:b3:4d: da:0c:19:ed:b4:5d:cc:a2:a2:c6:9f:46:13:5e:46: 87:b8:3a:30:79:53:96:f5:bb:f7:6b:21:b2:88:11: 1d:77:1d:79:d5:0d:7a:d9:60:ff:29:62:e2:e5:f1: 0c:a7:8c:c5:01:ef:86:74:fd:32:1b:56:e5:a2:78: 4b:0e:9a:6d:c8:03:34:29:3c:3f:d5:62:4a:23:10: 9f:8a:90:e3:05:02:35:52:8f:e7:7f:dd:cc:06:c7: a0:11:92:ab:ec:9b:73:18:25:0c:e6:f6:50:ed:70: 64:de:de:eb:60:90:cc:59:67:ce:09:0a:b6:9b:2a: b7:e1:c6:8e:b4:96:f6:b8:0e:5e:6b:94:6c:37:d7: 51:48:cb:51:3f:0a:95:78:6d:e8:ed:db:ef:29:6c: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:84:2C:5A:76:4F:70:8B:07:C2:1A:11:9F:E4:84:52:35:D7:BC:FF X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:23:d3:9c:36:6c:5a:10:8d:3e:23:fc:9b:7f:22:0a:6d:eb: 4e:2f:f1:26:ec:dd:e4:83:8d:ce:22:4d:a7:a7:8e:61:0b:35: cc:ec:3b:ad:1f:6d:1a:ff:16:57:a4:ed:7c:1f:f7:35:8f:0b: 89:e1:18:b9:0b:dd:e4:a1:e3:ce:b6:4d:8d:17:d5:24:6b:e1: b0:50:84:1c:ea:1b:1e:dc:6b:44:06:bf:7e:8c:5a:07:4c:a4: 37:bb:0f:2d:3a:ae:01:ab:79:b9:e2:60:c0:4d:d6:9b:4e:d6: 86:d4:88:a8:e0:71:9f:88:27:fe:b6:a5:f3:69:01:1c:1c:71: 94:17:bd:3e:62:da:93:7f:fe:29:2e:bd:f7:d8:27:bb:ea:dd: 35:52:f2:8b:82:7d:5e:e3:db:d7:80:55:55:85:19:db:a9:45: 0e:25:72:4e:4d:ce:64:b7:3b:07:e7:92:cb:6a:e3:c8:a6:6b: e2:73:93:95:2c:76:9d:84:61:e1:2d:4b:89:d6:2d:36:32:78: 0d:8b:6d:6d:ef:a8:7e:01:55:b6:25:8c:be:2a:bb:41:82:cc: 29:c8:85:9b:32:76:de:9e:d6:85:ff:50:93:fe:33:36:f9:06: 5f:70:2c:ae:f9:df:2c:2b:be:8a:83:dd:1b:9c:d0:62:a9:dd: e2:1b:44:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8IUDVsmYcypfL447cDs2y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwNjI3MDkwMTQxWhcNMjYwNjI4MDkwMTQxWjAzMTEwLwYDVQQD Eyg2Zjg0MmM1YTc2NGY3MDhiMDdjMjFhMTE5ZmU0ODQ1MjM1ZDdiY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAs8reDFhQ83wlD4C4NATyfKgebN mfiflLPwfmxxX5AlBmDyiaa/XwdJ274xuz2kn/Ga44F6ZKPvBg+vAH5hzGUmuy58 9Uf9vk+au+8njWjcAJsfH5HtP9chNCp3GNgm7xg0T0yVs03aDBnttF3MoqLGn0YT XkaHuDoweVOW9bv3ayGyiBEddx151Q162WD/KWLi5fEMp4zFAe+GdP0yG1blonhL DpptyAM0KTw/1WJKIxCfipDjBQI1Uo/nf93MBsegEZKr7JtzGCUM5vZQ7XBk3t7r YJDMWWfOCQq2myq34caOtJb2uA5ea5RsN9dRSMtRPwqVeG3o7dvvKWwTywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+ELFp2T3CLB8IaEZ/khFI117z/MB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCPTnDZs WhCNPiP8m38iCm3rTi/xJuzd5IONziJNp6eOYQs1zOw7rR9tGv8WV6TtfB/3NY8L ieEYuQvd5KHjzrZNjRfVJGvhsFCEHOobHtxrRAa/foxaB0ykN7sPLTquAat5ueJg wE3Wm07WhtSIqOBxn4gn/ral82kBHBxxlBe9PmLak3/+KS6999gnu+rdNVLyi4J9 XuPb14BVVYUZ26lFDiVyTk3OZLc7B+eSy2rjyKZr4nOTlSx2nYRh4S1LidYtNjJ4 DYttbe+ofgFVtiWMviq7QYLMKciFmzJ23p7Whf9Qk/4zNvkGX3AsrvnfLCu+ioPd G5zQYqnd4htERA== -----END CERTIFICATE-----Generated at Sat Jun 27 18:47:35 2026 by rpki-client