$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: 4oFUHIWywDmN91kJ1Rm1SaQ3Jvq/nGcZw2vadjrF03Y= Subject key identifier: 66:1D:2E:FC:EC:84:57:7D:53:57:B2:69:95:F2:E1:DC:60:36:15:09 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 01A1694753BB082E585C7B0F376238DF4FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 12DE Signing time: Fri 23 Oct 2026 15:00:44 +0000 Manifest this update: Fri 23 Oct 2026 15:00:44 +0000 Manifest next update: Sat 24 Oct 2026 15:00:44 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=) 3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: 2/xqcau+ScZK4vh6GlQcObB7QbHXm/4Kt6ZKWmUQiLI=) 4: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 5: ehxVaEtRSgmtXWibehJFSg2UxQg.roa (hash: t9f5OTDkYl9rwnvOFT12TZ8YPdY0wwMwMgp6Xvr9xCo=) 6: fGPyVoYA7Pc-igsJ8lc6VndKUAI.roa (hash: j4K4to0xa3XNtN0v+W/9xMBmLw/rUsB8qqoxhhwN2Vc=) 7: jMD979_3cOHHNQD7_v5YNZOfnzM.roa (hash: xs9G8MlTBL5Mdp/eDsUtPV46MEU64DiRi1HUSjB7STI=) 8: rI8JWSRZVq0j2LCqcpbojmJ7f80.roa (hash: cERfCgESjvWA5sZDpKF9y4SzFcGtyWbX25sWtXaUQgc=) 9: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 10: v7uNIzxFL7ExToFNBIaww0F5PB8.roa (hash: Dg0Flz2OmF2lqMuFCR5GqvY8tbmnQRwnOND08Misp9Q=) 11: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:69:47:53:bb:08:2e:58:5c:7b:0f:37:62:38:df:4f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Oct 23 15:00:44 2026 GMT Not After : Oct 24 15:00:44 2026 GMT Subject: CN=661d2efcec84577d5357b26995f2e1dc60361509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:57:e1:08:81:3a:49:12:ef:8d:6f:92:35: d8:63:46:67:e3:f1:a2:25:b7:67:bb:20:5d:dc:a0: 25:0f:68:3b:0c:15:e7:f2:3e:84:90:62:f8:83:84: 8b:35:8b:fb:41:ea:77:47:02:8a:67:a2:ab:24:a6: 7b:a5:46:d4:4e:cc:34:e8:5f:fa:ca:92:51:dc:bd: 08:4b:94:55:ac:bb:9f:66:68:82:0e:69:52:09:ed: 44:58:12:0f:14:55:5b:65:63:4c:22:5c:33:7d:8b: 11:9f:2b:f4:c1:8f:b9:82:d0:b0:05:3b:f4:d6:60: 4b:e2:2a:df:ae:38:04:60:21:43:9a:b7:2c:1d:e7: 75:88:08:cc:33:02:2f:1f:fd:ef:4c:5c:60:92:f9: dd:db:c4:96:87:f2:c6:9a:69:4d:6f:96:bb:30:c8: 5c:d0:2b:54:eb:44:8b:a6:60:e7:2e:50:2f:a8:36: 5e:2a:e0:b4:04:f0:df:b3:20:e6:24:67:07:cc:67: ed:8f:ce:ec:d8:7b:80:f4:0c:3f:c2:8e:64:ab:88: 7d:fa:15:09:ab:e8:fc:bd:cd:7f:b8:19:ce:38:83: bf:e7:ba:42:27:ee:85:7b:36:37:5f:4e:e0:e7:16: 6b:9d:52:97:36:53:6d:26:5f:d0:71:1d:12:e9:ed: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1D:2E:FC:EC:84:57:7D:53:57:B2:69:95:F2:E1:DC:60:36:15:09 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:80:17:2d:a6:2c:6e:d7:c9:28:c5:ee:60:9c:44:36:91:7f: c2:4a:f6:51:bc:97:6a:1f:3b:d8:dc:03:95:74:3c:a8:12:59: af:c2:e1:7b:ff:73:86:38:70:a6:a2:5f:61:4d:4d:cb:90:e2: e6:a7:fe:d0:07:48:75:68:f9:cb:4d:a1:1d:b1:b8:d8:72:80: 44:52:b0:50:3c:69:79:bb:b3:45:eb:ea:b0:f8:8d:55:b8:bc: c7:f2:d7:4c:c5:72:ae:f5:2c:f0:aa:e1:63:52:18:8c:36:c9: 63:8a:43:a9:b4:40:44:3b:03:21:d5:ee:7a:4c:0a:af:c4:8e: 38:1d:f5:9a:81:16:25:98:dc:07:c7:ae:98:d8:3a:f5:20:f3: 2f:b0:8d:c6:58:44:a9:60:c2:82:61:3e:cf:17:24:c4:37:00: 55:1a:fa:82:f0:3b:42:1f:2b:71:7d:15:9d:d6:5c:c1:6e:03: e8:b2:c4:d7:0e:65:62:87:12:9a:d2:43:c8:46:e8:ec:ba:22: 25:c0:d0:c5:f4:1a:fa:b1:fc:b5:81:fc:dc:df:92:8d:65:43: b9:bf:c4:fa:94:25:16:95:1e:e3:90:4c:f7:a8:aa:cd:c1:b5: c7:2c:03:a6:97:68:9d:6a:bb:27:c3:f9:a8:fc:cf:c8:ca:eb: 57:90:63:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFpR1O7CC5YXHsPN2I430+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYxMDIzMTUwMDQ0WhcNMjYxMDI0MTUwMDQ0WjAzMTEwLwYDVQQD Eyg2NjFkMmVmY2VjODQ1NzdkNTM1N2IyNjk5NWYyZTFkYzYwMzYxNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv69X4QiBOkkS741vkjXYY0Zn4/Gi JbdnuyBd3KAlD2g7DBXn8j6EkGL4g4SLNYv7Qep3RwKKZ6KrJKZ7pUbUTsw06F/6 ypJR3L0IS5RVrLufZmiCDmlSCe1EWBIPFFVbZWNMIlwzfYsRnyv0wY+5gtCwBTv0 1mBL4irfrjgEYCFDmrcsHed1iAjMMwIvH/3vTFxgkvnd28SWh/LGmmlNb5a7MMhc 0CtU60SLpmDnLlAvqDZeKuC0BPDfsyDmJGcHzGftj87s2HuA9Aw/wo5kq4h9+hUJ q+j8vc1/uBnOOIO/57pCJ+6FezY3X07g5xZrnVKXNlNtJl/QcR0S6e1DlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYdLvzshFd9U1eyaZXy4dxgNhUJMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYAXLaYs btfJKMXuYJxENpF/wkr2UbyXah872NwDlXQ8qBJZr8Lhe/9zhjhwpqJfYU1Ny5Di 5qf+0AdIdWj5y02hHbG42HKARFKwUDxpebuzRevqsPiNVbi8x/LXTMVyrvUs8Krh Y1IYjDbJY4pDqbRARDsDIdXuekwKr8SOOB31moEWJZjcB8eumNg69SDzL7CNxlhE qWDCgmE+zxckxDcAVRr6gvA7Qh8rcX0VndZcwW4D6LLE1w5lYocSmtJDyEbo7Loi JcDQxfQa+rH8tYH83N+SjWVDub/E+pQlFpUe45BM96iqzcG1xywDppdonWq7J8P5 qPzPyMrrV5Bjaw== -----END CERTIFICATE-----Generated at Sat Oct 24 00:57:00 2026 by rpki-client