$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: gl2QmA3TTpLrD7MjcX/0qviRSFQWN0TpjL7TzM8Xw0A= Subject key identifier: 3A:49:89:D9:CB:B0:1A:BB:C3:D6:30:3A:13:87:E7:1F:75:8B:00:B8 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019E311741113AD2B25A07DA590C5852DB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 16DD Signing time: Sat 16 May 2026 14:01:07 +0000 Manifest this update: Sat 16 May 2026 14:01:07 +0000 Manifest next update: Sun 17 May 2026 14:01:07 +0000 Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=) 2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=) 3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=) 4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=) 5: KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa (hash: 5MjMmws8ncjSHeVa5J4LmPdEnI2b6Mjqn9vh8n6pFxs=) 6: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: B8m0+fIrn8Yb6y+9p/vopv5Zp88vP8mz3Oig/+04TbI=) 7: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=) 8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=) 9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=) 10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=) 11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:17:41:11:3a:d2:b2:5a:07:da:59:0c:58:52:db:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: May 16 14:01:07 2026 GMT Not After : May 17 14:01:07 2026 GMT Subject: CN=3a4989d9cbb01abbc3d6303a1387e71f758b00b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:99:71:58:79:84:94:f0:ca:ad:a3:b3:e4: 66:2f:a3:91:eb:55:6c:87:81:b9:55:ce:83:69:8e: 5d:83:7b:0c:38:a7:5e:02:a8:8a:2e:58:6f:d4:45: af:90:04:c7:1b:58:b1:01:5c:47:86:2a:03:36:8b: f5:3f:e3:9e:d8:8c:74:e8:2c:37:ba:de:63:42:92: 46:44:7d:fc:8b:28:85:da:eb:b7:61:7e:28:d4:59: 6a:b7:a2:6f:98:ec:e5:8e:38:0a:9a:d8:15:ba:c8: 9e:db:4e:fb:dc:cf:99:08:90:17:bb:47:43:a5:d4: a0:17:83:9c:39:b8:e9:b5:22:b6:5b:25:d6:30:46: 47:a4:0d:cf:95:0d:18:45:b1:d8:2e:50:83:24:c7: db:88:48:f9:fb:54:e6:98:17:c2:40:41:a1:a6:40: 5d:a7:86:50:e5:58:f5:ea:e6:15:23:5f:bf:6a:96: 99:81:b7:56:03:ff:da:1a:7b:a0:fb:e5:6a:60:de: 2b:d0:87:34:45:ee:68:ee:d4:68:39:3f:7a:43:3a: 21:6b:79:03:89:1a:8d:d2:3e:a5:77:be:37:2f:b8: a2:57:2e:f7:f8:05:64:4c:e3:0a:59:4d:b4:0c:62: 83:9b:8a:74:7d:5c:9e:24:00:f1:f2:4e:00:47:1c: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:49:89:D9:CB:B0:1A:BB:C3:D6:30:3A:13:87:E7:1F:75:8B:00:B8 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f9:16:04:ae:f1:75:a6:13:63:d2:c5:2b:6b:9d:14:86:67: 5b:f3:2f:13:5b:2c:ec:e7:c4:f0:09:7a:8a:a8:85:8a:8d:dd: 96:3a:84:e3:9f:0d:03:7c:22:7e:08:c2:bb:cd:09:be:80:5f: dd:b8:bd:f1:ad:78:70:56:22:35:65:b5:8e:4f:d6:e8:3b:ca: 35:ab:65:ae:54:95:8c:ea:9d:4c:2e:18:52:6b:0e:ce:91:77: 42:c7:5f:fe:98:b2:58:6e:1b:1b:6d:c0:42:a2:84:07:a0:d6: 33:67:43:a1:fd:bc:27:56:9f:43:af:67:85:34:2c:d6:58:08: f5:85:92:29:f4:78:c8:59:65:3e:37:a5:9e:ea:13:fa:c5:2b: da:f2:ac:a6:e6:50:fe:92:8a:0e:78:dd:a8:b8:91:01:7c:d4: 6f:c4:1e:54:5e:6f:37:a4:e8:91:7c:f2:9c:19:76:f6:c9:c9: 28:f2:49:fa:fb:4e:b2:b2:87:07:7c:4c:87:d2:0b:29:21:63: b8:72:14:a9:df:0b:d0:d1:48:5b:70:d7:fd:89:2b:95:8b:b9: 3e:3b:46:91:3a:93:70:e6:2a:84:6f:e4:95:66:aa:9a:75:87: bc:09:0d:06:47:3b:9a:a7:76:df:b1:0e:76:b3:8e:39:75:81: 8e:77:5e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4xF0EROtKyWgfaWQxYUtsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwNTE2MTQwMTA3WhcNMjYwNTE3MTQwMTA3WjAzMTEwLwYDVQQD EygzYTQ5ODlkOWNiYjAxYWJiYzNkNjMwM2ExMzg3ZTcxZjc1OGIwMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEiZcVh5hJTwyq2js+RmL6OR61Vs h4G5Vc6DaY5dg3sMOKdeAqiKLlhv1EWvkATHG1ixAVxHhioDNov1P+Oe2Ix06Cw3 ut5jQpJGRH38iyiF2uu3YX4o1Flqt6JvmOzljjgKmtgVusie20773M+ZCJAXu0dD pdSgF4OcObjptSK2WyXWMEZHpA3PlQ0YRbHYLlCDJMfbiEj5+1TmmBfCQEGhpkBd p4ZQ5Vj16uYVI1+/apaZgbdWA//aGnug++VqYN4r0Ic0Re5o7tRoOT96Qzoha3kD iRqN0j6ld743L7iiVy73+AVkTOMKWU20DGKDm4p0fVyeJADx8k4ARxyzyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpJidnLsBq7w9YwOhOH5x91iwC4MB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfkWBK7x daYTY9LFK2udFIZnW/MvE1ss7OfE8Al6iqiFio3dljqE458NA3wifgjCu80JvoBf 3bi98a14cFYiNWW1jk/W6DvKNatlrlSVjOqdTC4YUmsOzpF3Qsdf/piyWG4bG23A QqKEB6DWM2dDof28J1afQ69nhTQs1lgI9YWSKfR4yFllPjelnuoT+sUr2vKspuZQ /pKKDnjdqLiRAXzUb8QeVF5vN6TokXzynBl29snJKPJJ+vtOsrKHB3xMh9ILKSFj uHIUqd8L0NFIW3DX/YkrlYu5PjtGkTqTcOYqhG/klWaqmnWHvAkNBkc7mqd237EO drOOOXWBjnde1w== -----END CERTIFICATE-----Generated at Sun May 17 00:29:43 2026 by rpki-client