$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: +Ion3bxNvT9fW4QWHk+1YzXPUh2wHJUk6Bsky7LwSqo= Subject key identifier: 85:01:B5:8F:25:C1:26:4A:DD:2B:5B:44:E2:08:C3:D6:40:E0:B9:CE Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01A158F01FFB909A33F0B0A95348C02C05C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0BBE Signing time: Tue 20 Oct 2026 10:51:34 +0000 Manifest this update: Tue 20 Oct 2026 10:51:34 +0000 Manifest next update: Wed 21 Oct 2026 10:51:34 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (hash: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 6: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 7: S49hhmy4bOwqac16yOch8OZII60.roa (hash: Ip97DJR3nHAcsv9fMWbRUjBAkqDWdFOwd8aUSJDdJzM=) 8: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 9: Ww6I0-bFMkAzL3dUq8GFJz1Z4Xw.roa (hash: 7LXBch1nig/wJh6q/kWtYhq7i9O1hCn1Qc6Ofmdk2UQ=) 10: Wyp_MsVtZn1vn2s87cwTC1gTPeQ.roa (hash: fm9/sWs7sBuK3LkkTdcyfLr1zzRdcZPNRiKF4q6aA50=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: buRF6TbmF7NOvdtKnXAnImIdXgcM4NQ/8t5VurDBomM=) 12: oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa (hash: CYKz7T4s6quVEcy44p9N3rA7vn+Am2lY+a9Hz6zcmtg=) 13: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (hash: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=) 14: s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa (hash: PX3/dss6fVnR1sM4prrLM9KGqiRqjaUHFQOQkts9Vkk=) 15: uKCl0G6iXVlVe0afCzE82-C_3qI.roa (hash: RH3/03F7bmaXEqOent1C4xFrAuH6sCV3VBoe7T66+HA=) 16: vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa (hash: lyyTQyUvfpVllBb+2yRmdAtUMHJ2bYtVjYxUF7Z8MNU=) 17: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 18: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 10:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:58:f0:1f:fb:90:9a:33:f0:b0:a9:53:48:c0:2c:05:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Oct 20 10:51:34 2026 GMT Not After : Oct 21 10:51:34 2026 GMT Subject: CN=8501b58f25c1264add2b5b44e208c3d640e0b9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:92:20:ec:83:1c:7b:2c:fd:76:d6:0d:f3: 49:19:99:06:c7:4a:91:48:39:42:f8:ac:2b:20:48: 6e:d9:26:bf:83:e2:42:37:38:44:5f:20:f8:86:71: 48:b4:a6:0b:c3:68:b3:aa:7b:06:5e:cf:76:7b:5d: 59:a1:20:95:ea:05:27:92:d8:9b:ec:8e:63:8b:2d: b1:c1:fc:f3:81:d0:8b:3b:4c:eb:d9:e8:d8:b0:98: 83:15:5f:2d:45:7f:40:3b:19:ec:78:6e:c2:a5:a2: 3c:ef:eb:e5:46:9c:41:58:95:9e:86:dd:58:39:02: 83:a9:f8:e8:d2:e0:30:f2:a9:4c:d9:30:59:31:0e: f6:3a:cd:32:38:c0:89:05:f8:25:30:8d:4f:3a:42: 88:d2:8d:bf:d7:3c:49:bd:d6:4a:e2:3b:3d:fe:9a: 07:d8:04:17:a0:5a:9d:a3:6a:32:b9:78:65:62:86: 25:78:7c:e0:73:61:6d:75:62:d5:f0:16:24:69:de: 48:75:4a:9c:93:78:3d:fe:3f:a4:23:f0:21:cf:ed: a4:db:84:c8:7e:33:81:23:e8:81:77:0f:f9:af:37: 8e:65:d1:ee:2d:b8:77:70:a8:30:c2:81:8f:b9:44: 60:93:43:37:81:73:80:36:04:cb:e5:fb:2e:9b:ee: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:B5:8F:25:C1:26:4A:DD:2B:5B:44:E2:08:C3:D6:40:E0:B9:CE X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9e:8c:47:82:a6:f5:d5:10:71:f0:fe:5c:a6:84:ad:66:1b: f5:c7:4a:58:73:67:4b:93:d3:fa:e9:db:d9:f3:01:e9:68:1b: cb:56:b1:d8:00:fb:07:34:ff:4d:66:53:b8:82:5d:5c:9c:4e: 9b:8f:40:6b:03:9b:99:d1:45:03:cf:43:bb:14:ef:b3:f2:51: 8e:be:27:c6:52:4b:84:b6:a6:89:48:f4:b0:d2:70:b3:de:2e: d8:54:60:cf:98:83:b5:3c:6b:3c:f6:77:4b:78:0e:ac:3a:ac: 94:e9:7e:b5:58:d9:43:d1:ed:ee:aa:d6:2b:3e:4f:7f:c5:7f: 5e:2a:3a:9f:01:51:cc:20:9b:57:75:c9:77:3a:aa:b2:c2:de: 61:a6:52:70:96:54:c4:59:7b:5d:3e:40:7c:72:cf:0b:92:f4: cf:dd:fe:f5:00:d4:2f:dc:5b:94:9a:11:ca:6b:ea:8d:70:f1: b4:46:6f:ca:5d:0a:fa:10:dd:60:96:71:43:5d:d0:4a:9b:ea: 24:43:e3:e3:6d:92:d7:79:2a:d3:fc:3a:a7:ac:b2:d4:47:cb: 49:35:47:23:c8:f6:b8:24:8e:43:f4:5b:b8:ba:4a:dc:16:12: 27:4f:d4:a9:bb:f1:b1:9a:77:04:b2:2d:cf:f8:79:87:32:22: 27:b9:4e:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFY8B/7kJoz8LCpU0jALAXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYxMDIwMTA1MTM0WhcNMjYxMDIxMTA1MTM0WjAzMTEwLwYDVQQD Eyg4NTAxYjU4ZjI1YzEyNjRhZGQyYjViNDRlMjA4YzNkNjQwZTBiOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbqSIOyDHHss/XbWDfNJGZkGx0qR SDlC+KwrIEhu2Sa/g+JCNzhEXyD4hnFItKYLw2izqnsGXs92e11ZoSCV6gUnktib 7I5jiy2xwfzzgdCLO0zr2ejYsJiDFV8tRX9AOxnseG7CpaI87+vlRpxBWJWeht1Y OQKDqfjo0uAw8qlM2TBZMQ72Os0yOMCJBfglMI1POkKI0o2/1zxJvdZK4js9/poH 2AQXoFqdo2oyuXhlYoYleHzgc2FtdWLV8BYkad5IdUqck3g9/j+kI/Ahz+2k24TI fjOBI+iBdw/5rzeOZdHuLbh3cKgwwoGPuURgk0M3gXOANgTL5fsum+6WVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUBtY8lwSZK3StbROIIw9ZA4LnOMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ6MR4Km 9dUQcfD+XKaErWYb9cdKWHNnS5PT+unb2fMB6Wgby1ax2AD7BzT/TWZTuIJdXJxO m49AawObmdFFA89DuxTvs/JRjr4nxlJLhLamiUj0sNJws94u2FRgz5iDtTxrPPZ3 S3gOrDqslOl+tVjZQ9Ht7qrWKz5Pf8V/Xio6nwFRzCCbV3XJdzqqssLeYaZScJZU xFl7XT5AfHLPC5L0z93+9QDUL9xblJoRymvqjXDxtEZvyl0K+hDdYJZxQ13QSpvq JEPj422S13kq0/w6p6yy1EfLSTVHI8j2uCSOQ/RbuLpK3BYSJ0/UqbvxsZp3BLIt z/h5hzIiJ7lOvw== -----END CERTIFICATE-----Generated at Tue Oct 20 20:45:41 2026 by rpki-client