$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: j0MTs976+GsV6fFUKeKCZnhvUAgIRHnDLrjK6ajlCk8= Subject key identifier: 8F:F9:E2:46:82:68:DE:38:9C:3C:34:19:DD:7E:05:17:01:34:1B:FD Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019F82D571DB337536A51809E13DC4F46A6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0ABD Signing time: Tue 21 Jul 2026 04:00:54 +0000 Manifest this update: Tue 21 Jul 2026 04:00:54 +0000 Manifest next update: Wed 22 Jul 2026 04:00:54 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (hash: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: JP2E_UJFi_eEzACBA8u2c0uDfb8.roa (hash: YGH1JcJafoyWgqhD6Mi4OsdAWnJ/Ak1uDrRgAPydk/s=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: Ty5DpdqPOmydyDg_bQAaBkoGLp8.roa (hash: akNfDUTh82avi6l8pVfNZIbM0Tw4axKISXdVg+zVbtA=) 9: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 10: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: zCa3F9X1iuSlbM7H2+udEtbynUftMCouKNXGhhGiy+s=) 12: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (hash: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=) 13: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 14: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:d5:71:db:33:75:36:a5:18:09:e1:3d:c4:f4:6a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jul 21 04:00:54 2026 GMT Not After : Jul 22 04:00:54 2026 GMT Subject: CN=8ff9e2468268de389c3c3419dd7e051701341bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:f7:fe:12:3a:c8:4a:79:6a:61:2b:c3:27: 69:dd:4d:4b:46:3d:ae:1a:76:d3:ca:71:6f:47:60: 65:b2:d3:16:0f:8a:75:c4:c1:5b:1b:6f:56:19:75: d3:e4:8d:01:01:37:95:56:23:bc:c6:91:80:80:38: 10:df:94:b7:d7:03:09:ac:68:04:09:74:cd:b8:81: 67:eb:59:69:b2:19:a7:31:d2:d7:44:ea:05:14:53: 8b:80:17:4d:98:b9:98:d5:8b:29:fc:8b:cd:2d:77: 65:87:15:7f:bf:2f:7c:50:09:b8:b6:f1:8e:f8:85: 91:86:79:a3:6d:34:d7:1c:26:af:a2:6d:73:61:e2: f6:f1:e0:fc:b2:13:74:9a:56:cb:0e:54:7c:13:74: 96:16:54:96:db:d3:22:77:7d:e2:99:69:e1:ff:3b: fb:75:b0:92:28:c7:45:96:73:7c:81:30:9c:0f:5c: 7e:f3:d0:04:33:02:6a:58:d7:2f:99:db:a0:2c:cb: 53:e4:bc:80:e9:79:9a:10:6e:4d:4c:a0:ef:fc:12: 7b:0c:84:b9:f4:f0:5a:a6:96:70:bc:af:f0:76:fa: 1a:45:5a:ce:e4:35:c3:2e:16:f6:f5:0e:a9:27:68: a4:fe:4c:f2:0d:aa:c3:9a:a6:5f:0c:b3:47:26:78: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F9:E2:46:82:68:DE:38:9C:3C:34:19:DD:7E:05:17:01:34:1B:FD X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:58:ac:1e:c9:88:11:24:e8:98:2e:00:61:ed:ca:82:92:4c: 66:7c:18:98:bd:e7:15:8a:75:7a:e8:ae:4e:f2:56:f3:4d:c0: e1:8f:4d:17:98:c9:55:76:4c:93:97:b5:a2:ed:f9:3e:94:95: 9f:28:00:71:50:5d:42:d2:02:2a:1c:75:1e:f4:0a:d4:c0:01: 71:9e:b9:d8:71:1b:25:b5:54:a6:c5:35:e7:b0:55:78:1d:ed: 20:dd:a6:21:cb:fa:90:a5:fe:7c:5f:91:89:50:a1:28:5f:99: 2d:ac:24:a9:aa:ea:e3:a6:57:9e:86:73:b3:5f:bb:9c:41:bc: bb:93:fc:3e:7c:a1:d3:17:d5:2d:7f:fd:d1:80:c8:aa:b7:55: 05:eb:09:46:18:1d:ec:27:20:f4:b2:ca:db:32:82:6c:e0:75: 52:f7:cc:52:3a:4f:9e:0f:e5:09:21:ea:e2:ef:ce:d9:60:c9: eb:ae:a5:d8:73:d2:17:85:bc:94:eb:24:e9:97:56:c3:ec:6d: 8a:b3:7e:31:66:f3:4f:40:57:ba:aa:58:c7:03:a4:1a:93:25: 69:03:01:55:5e:bf:7b:c5:27:be:d1:52:52:6a:c3:6a:e1:bb: 02:2b:82:e9:3d:03:43:30:f2:5d:ef:68:68:15:b8:ff:d8:70: 6d:8e:eb:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+C1XHbM3U2pRgJ4T3E9GpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNzIxMDQwMDU0WhcNMjYwNzIyMDQwMDU0WjAzMTEwLwYDVQQD Eyg4ZmY5ZTI0NjgyNjhkZTM4OWMzYzM0MTlkZDdlMDUxNzAxMzQxYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS73/hI6yEp5amErwydp3U1LRj2u GnbTynFvR2BlstMWD4p1xMFbG29WGXXT5I0BATeVViO8xpGAgDgQ35S31wMJrGgE CXTNuIFn61lpshmnMdLXROoFFFOLgBdNmLmY1Ysp/IvNLXdlhxV/vy98UAm4tvGO +IWRhnmjbTTXHCavom1zYeL28eD8shN0mlbLDlR8E3SWFlSW29Mid33imWnh/zv7 dbCSKMdFlnN8gTCcD1x+89AEMwJqWNcvmdugLMtT5LyA6XmaEG5NTKDv/BJ7DIS5 9PBappZwvK/wdvoaRVrO5DXDLhb29Q6pJ2ik/kzyDarDmqZfDLNHJngDTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/54kaCaN44nDw0Gd1+BRcBNBv9MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVisHsmI ESTomC4AYe3KgpJMZnwYmL3nFYp1euiuTvJW803A4Y9NF5jJVXZMk5e1ou35PpSV nygAcVBdQtICKhx1HvQK1MABcZ652HEbJbVUpsU157BVeB3tIN2mIcv6kKX+fF+R iVChKF+ZLawkqarq46ZXnoZzs1+7nEG8u5P8Pnyh0xfVLX/90YDIqrdVBesJRhgd 7Ccg9LLK2zKCbOB1UvfMUjpPng/lCSHq4u/O2WDJ666l2HPSF4W8lOsk6ZdWw+xt irN+MWbzT0BXuqpYxwOkGpMlaQMBVV6/e8UnvtFSUmrDauG7AiuC6T0DQzDyXe9o aBW4/9hwbY7r0Q== -----END CERTIFICATE-----Generated at Tue Jul 21 09:08:58 2026 by rpki-client