$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: LjqEtGrvXWIYeKfmU8uegbrSF6Ar8qzJnBmdPeuvd+I= Subject key identifier: 8D:05:DB:61:96:DB:A1:55:6D:05:36:AE:A3:76:A2:DE:A8:99:62:96 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019E90CA9D4BEF119C2E19C0157F0E77D47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0A3F Signing time: Thu 04 Jun 2026 04:00:58 +0000 Manifest this update: Thu 04 Jun 2026 04:00:58 +0000 Manifest next update: Fri 05 Jun 2026 04:00:58 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 46YPaJsxK-Hh8hedE4d_sKJPbo4.roa (hash: Ln4mKYRG2M1uFSlkxDfyNh3L7AXwbRgdpA6kJaEdsKY=) 5: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: Ty5DpdqPOmydyDg_bQAaBkoGLp8.roa (hash: akNfDUTh82avi6l8pVfNZIbM0Tw4axKISXdVg+zVbtA=) 9: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 10: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 11: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: bTyr5gKmiQ+0Ks54hNy6cg0WdUEddkeEYrZNaL7MdM4=) 13: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 14: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:90:ca:9d:4b:ef:11:9c:2e:19:c0:15:7f:0e:77:d4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jun 4 04:00:58 2026 GMT Not After : Jun 5 04:00:58 2026 GMT Subject: CN=8d05db6196dba1556d0536aea376a2dea8996296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:b0:db:ba:92:33:5b:60:fb:e6:4e:3f:bb: 1c:bf:e0:4a:0b:f4:5b:66:4c:32:31:5a:cf:38:ed: e5:b7:77:49:77:38:de:65:fb:db:ad:12:d7:ba:71: 81:e2:8d:ef:8a:6a:c7:d7:27:d9:38:aa:25:44:6d: 68:9d:1e:0c:ef:7a:b6:36:32:da:f5:ac:d0:5e:f7: b3:55:68:33:54:7b:17:7f:a0:b0:c9:33:cc:68:17: 6d:f9:38:a2:9b:c6:ba:af:42:26:a2:1c:92:36:ab: ac:28:cb:08:37:e5:f2:dd:6d:b5:d7:20:2b:6e:48: 46:21:15:23:d8:af:6c:67:ce:00:48:75:24:8c:c3: e1:56:1e:23:a5:7e:7f:b4:ad:5b:06:38:f2:5a:4e: 20:62:ee:e6:4a:24:b7:46:2d:36:11:06:cd:22:c0: f8:4d:55:89:10:24:d1:8e:0c:16:65:37:75:57:49: c7:73:22:23:84:6d:ae:ef:98:d5:5d:e3:e7:cc:73: 43:24:3b:69:13:54:05:91:2e:fc:bc:32:79:b0:03: a1:66:5e:02:b4:f3:f0:b3:b2:80:e4:a3:ce:2b:93: 95:e3:37:e7:6e:f6:ee:c6:d3:08:fe:ca:1f:bf:4c: 96:24:28:b1:93:45:87:51:7a:da:f8:6b:93:3f:d5: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:05:DB:61:96:DB:A1:55:6D:05:36:AE:A3:76:A2:DE:A8:99:62:96 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:97:e1:92:0e:5a:34:20:4d:c2:0e:f2:8b:0d:98:6c:cc:2e: 76:a2:d0:25:64:f9:23:1f:26:64:e7:d6:52:41:90:e3:2d:bd: 93:02:35:d8:81:19:3a:4d:9e:52:02:55:93:3e:35:51:2e:35: 92:53:df:5b:03:62:19:f2:08:ab:ac:53:86:fd:f0:60:db:f2: 92:cd:b7:e2:d0:b8:eb:31:90:21:4f:7f:de:68:5b:c1:d0:5c: ac:87:b9:c6:cc:b2:4a:a8:77:b4:7b:d5:6c:e0:f3:4d:22:e0: 0c:f8:b9:dd:4d:b0:9e:7e:0b:f2:0f:44:02:20:ad:ef:e6:50: c1:b0:3a:68:2a:b4:bd:6b:57:d6:ad:02:29:bc:db:5f:a6:83: bf:b8:ae:7a:34:a4:ae:8f:d3:3d:1e:00:25:80:16:a3:e7:cd: ad:d5:3c:45:29:e9:3e:22:a5:02:57:3f:e7:8b:bd:ce:a1:7b: 9f:33:dc:83:c0:c6:ec:6d:9c:a3:9c:79:a9:20:10:58:96:38: 0b:84:19:64:9a:52:6e:d5:81:0b:21:f6:ba:97:a3:8f:f0:46: c3:54:e9:63:6c:a3:a9:89:2f:99:05:c8:2c:fc:6b:96:cc:46: ee:cc:b6:bd:5b:6c:d9:13:c5:be:6f:6b:bf:93:5b:1f:88:30: 92:b9:8f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6Qyp1L7xGcLhnAFX8Od9R6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNjA0MDQwMDU4WhcNMjYwNjA1MDQwMDU4WjAzMTEwLwYDVQQD Eyg4ZDA1ZGI2MTk2ZGJhMTU1NmQwNTM2YWVhMzc2YTJkZWE4OTk2Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfOw27qSM1tg++ZOP7scv+BKC/Rb ZkwyMVrPOO3lt3dJdzjeZfvbrRLXunGB4o3vimrH1yfZOKolRG1onR4M73q2NjLa 9azQXvezVWgzVHsXf6CwyTPMaBdt+Tiim8a6r0ImohySNqusKMsIN+Xy3W211yAr bkhGIRUj2K9sZ84ASHUkjMPhVh4jpX5/tK1bBjjyWk4gYu7mSiS3Ri02EQbNIsD4 TVWJECTRjgwWZTd1V0nHcyIjhG2u75jVXePnzHNDJDtpE1QFkS78vDJ5sAOhZl4C tPPws7KA5KPOK5OV4zfnbvbuxtMI/sofv0yWJCixk0WHUXra+GuTP9XeKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0F22GW26FVbQU2rqN2ot6omWKWMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJfhkg5a NCBNwg7yiw2YbMwudqLQJWT5Ix8mZOfWUkGQ4y29kwI12IEZOk2eUgJVkz41US41 klPfWwNiGfIIq6xThv3wYNvyks234tC46zGQIU9/3mhbwdBcrIe5xsyySqh3tHvV bODzTSLgDPi53U2wnn4L8g9EAiCt7+ZQwbA6aCq0vWtX1q0CKbzbX6aDv7iuejSk ro/TPR4AJYAWo+fNrdU8RSnpPiKlAlc/54u9zqF7nzPcg8DG7G2co5x5qSAQWJY4 C4QZZJpSbtWBCyH2upejj/BGw1TpY2yjqYkvmQXILPxrlsxG7sy2vVts2RPFvm9r v5NbH4gwkrmPfA== -----END CERTIFICATE-----Generated at Thu Jun 4 07:59:28 2026 by rpki-client