$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: v9bnz4rHFAdMzZkg8xt37Z2sOYgAXcTrWdMUV/l6v3A= Subject key identifier: D3:BE:D7:4F:66:4E:39:FB:1A:B2:76:64:52:1C:56:D9:AD:7C:61:A7 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019E30E0F515A880A7BC0E421D1B8E05B522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 112B Signing time: Sat 16 May 2026 13:01:49 +0000 Manifest this update: Sat 16 May 2026 13:01:49 +0000 Manifest next update: Sun 17 May 2026 13:01:49 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: 4VUMB4eNqxCh6QAJlqfFP96FBzM.roa (hash: jItvJxY9TNKdGDTOhv6bg4Ex137MBeodiD35XiWfcq8=) 3: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=) 4: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: PwphPcVmq4BkdQD3HENyoMg71vhtUwjkwN8abrjbGqY=) 5: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 6: ehxVaEtRSgmtXWibehJFSg2UxQg.roa (hash: t9f5OTDkYl9rwnvOFT12TZ8YPdY0wwMwMgp6Xvr9xCo=) 7: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (hash: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA=) 8: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 9: uqa1tyxWj6cFaANZUIcESG1vArI.roa (hash: vTGoqUA5XDYJlnJpWHgE1fB7R+WNNBHqxw/ULLm7ImA=) 10: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 12:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:30:e0:f5:15:a8:80:a7:bc:0e:42:1d:1b:8e:05:b5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: May 16 13:01:49 2026 GMT Not After : May 17 13:01:49 2026 GMT Subject: CN=d3bed74f664e39fb1ab27664521c56d9ad7c61a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:28:26:52:35:72:87:0e:e5:e7:37:7e:f6: d5:9c:e6:ad:15:82:f5:54:09:f9:5a:95:0f:50:44: f2:7b:54:12:97:a9:97:9e:38:0a:8a:78:a1:95:79: d6:b6:69:d7:09:21:b7:82:67:2e:93:e2:ce:11:8f: 06:c3:d2:ba:d9:87:77:1a:32:d1:5d:54:55:89:90: 46:24:1f:c5:2c:b9:0b:47:54:3c:e4:e3:98:0d:f7: d8:d7:98:74:1d:0f:21:85:7d:20:09:c8:23:81:cf: 63:6e:6c:fc:b1:38:04:de:f6:20:e9:f5:63:fe:c2: fb:3b:d0:67:e7:18:26:9d:46:d1:3c:4a:2a:c6:dd: 83:b1:30:24:8d:30:42:75:25:7b:4b:a0:6e:c1:69: f3:89:51:8f:9e:fa:1c:9f:e5:00:66:c3:0a:7d:85: 60:fe:3d:de:ee:82:92:a2:f4:09:9f:c5:22:57:54: ce:07:27:40:90:d8:2a:a7:46:78:ad:d8:4c:16:77: cc:88:5c:51:2e:e7:6e:4b:72:f5:f7:85:e4:a7:9e: c5:ce:5d:7a:42:0d:da:02:73:ba:c0:fe:41:4f:d0: c3:74:e5:66:66:f1:b0:6d:b5:c9:a6:0c:07:37:62: b4:8e:9b:2f:a9:e1:d3:f9:eb:45:50:7f:57:3a:63: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BE:D7:4F:66:4E:39:FB:1A:B2:76:64:52:1C:56:D9:AD:7C:61:A7 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e1:63:ca:0c:f3:b1:e6:be:73:d3:f8:ff:49:2d:0b:a2:44: 99:d5:00:02:2a:60:68:b8:84:70:3d:c0:92:2d:bf:a4:4f:6b: e8:8b:7e:dc:ae:74:8f:4c:f3:d4:25:d3:bf:f6:3b:8c:db:3f: 1c:ee:6e:94:e8:f3:99:7e:f5:6e:56:3e:50:e1:d5:29:4b:ab: 07:74:f1:52:c5:68:05:dd:11:b7:38:2e:df:ca:eb:85:75:56: 08:7f:87:a2:ac:97:85:95:40:7d:83:06:d6:bf:52:ea:4f:9f: 63:a2:67:b1:d2:2c:bb:b5:ec:29:a8:96:ec:2c:98:a1:9e:a0: 32:08:cc:99:0a:13:a4:fd:e5:65:e8:e7:0d:8f:bf:32:69:d3: 2b:2b:6a:87:ed:ff:61:36:2e:90:28:f0:47:d0:79:6c:e8:86: c8:9b:88:0c:6f:98:3d:6a:b8:49:39:65:72:1f:f6:44:dc:1b: ae:88:1d:92:78:b0:93:57:1e:26:76:86:ab:b4:42:e9:d1:21: 13:0a:a7:13:05:93:19:96:56:1a:a0:69:52:f4:97:94:a6:aa: f3:27:5e:82:f1:84:d6:0f:df:89:14:6d:d1:b9:d6:c1:3b:8d: 81:c8:d5:ff:56:94:73:8d:77:77:fd:88:23:f8:a0:fe:08:30: ba:20:7f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4w4PUVqICnvA5CHRuOBbUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwNTE2MTMwMTQ5WhcNMjYwNTE3MTMwMTQ5WjAzMTEwLwYDVQQD EyhkM2JlZDc0ZjY2NGUzOWZiMWFiMjc2NjQ1MjFjNTZkOWFkN2M2MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYMoJlI1cocO5ec3fvbVnOatFYL1 VAn5WpUPUETye1QSl6mXnjgKinihlXnWtmnXCSG3gmcuk+LOEY8Gw9K62Yd3GjLR XVRViZBGJB/FLLkLR1Q85OOYDffY15h0HQ8hhX0gCcgjgc9jbmz8sTgE3vYg6fVj /sL7O9Bn5xgmnUbRPEoqxt2DsTAkjTBCdSV7S6BuwWnziVGPnvocn+UAZsMKfYVg /j3e7oKSovQJn8UiV1TOBydAkNgqp0Z4rdhMFnfMiFxRLuduS3L194Xkp57Fzl16 Qg3aAnO6wP5BT9DDdOVmZvGwbbXJpgwHN2K0jpsvqeHT+etFUH9XOmOXHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO+109mTjn7GrJ2ZFIcVtmtfGGnMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuFjygzz sea+c9P4/0ktC6JEmdUAAipgaLiEcD3Aki2/pE9r6It+3K50j0zz1CXTv/Y7jNs/ HO5ulOjzmX71blY+UOHVKUurB3TxUsVoBd0Rtzgu38rrhXVWCH+HoqyXhZVAfYMG 1r9S6k+fY6JnsdIsu7XsKaiW7CyYoZ6gMgjMmQoTpP3lZejnDY+/MmnTKytqh+3/ YTYukCjwR9B5bOiGyJuIDG+YPWq4STllch/2RNwbrogdkniwk1ceJnaGq7RC6dEh EwqnEwWTGZZWGqBpUvSXlKaq8ydegvGE1g/fiRRt0bnWwTuNgcjV/1aUc413d/2I I/ig/ggwuiB/Cw== -----END CERTIFICATE-----Generated at Sat May 16 20:21:17 2026 by rpki-client