$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: EIwQzjPQMkMTExZ+U3J/eyV7KuAEETbe5RJTNbiu9l4= Subject key identifier: 4F:EF:1B:21:C9:B6:67:FE:0B:72:B3:9E:2F:78:93:45:C9:4F:C8:29 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019DF4CBBAAA8ABD4FCC1243F4A778D76FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 117E Signing time: Mon 04 May 2026 21:01:25 +0000 Manifest this update: Mon 04 May 2026 21:01:25 +0000 Manifest next update: Tue 05 May 2026 21:01:25 +0000 Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: j8SjfiFE4AC4oDQ9qahRgXEY5ht09EgRr2eHCfF6+G0=) 7: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 8: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 9: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=) 10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 14: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (hash: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c=) 15: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 16: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 May 2026 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f4:cb:ba:aa:8a:bd:4f:cc:12:43:f4:a7:78:d7:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: May 4 21:01:25 2026 GMT Not After : May 5 21:01:25 2026 GMT Subject: CN=4fef1b21c9b667fe0b72b39e2f789345c94fc829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:f6:b5:38:07:0a:ee:83:4c:ba:87:c0:8f: c0:d2:e4:76:1b:14:0f:35:c1:ba:3c:96:01:35:ba: 6b:aa:ff:01:44:fe:5b:8b:c8:64:a0:17:0e:63:1c: 60:9a:1f:31:70:e0:78:ad:33:37:31:59:1c:5c:3d: 27:7d:73:07:6c:e2:ee:ba:60:d2:c6:57:1d:a2:2e: dc:f1:66:cd:84:96:3f:21:a6:cb:89:71:63:d6:43: 2e:e2:68:f9:13:19:e9:b2:f6:50:ad:83:58:cd:b3: 65:e0:69:94:79:01:56:42:c0:8b:4a:24:b7:58:6f: 90:fc:fb:15:92:8f:9a:cf:3a:be:42:44:5b:49:d4: 17:e6:69:dc:f4:f6:35:31:f3:22:07:95:b7:2c:35: 88:69:b0:2a:de:c4:09:36:4a:64:2d:d1:78:e9:63: 67:3e:79:37:3e:06:ee:c1:5e:95:f8:88:af:d2:87: 01:b0:0b:95:94:61:12:85:a5:1e:d0:41:38:26:c1: 5f:95:db:5e:e8:ee:ef:45:10:f9:02:50:ac:36:69: 06:fe:f3:41:93:5d:7f:8f:7b:3e:cd:7e:bb:2c:7d: f0:c1:ba:07:6a:e3:62:d8:ec:63:44:16:a4:69:ac: fe:59:64:58:8e:40:cd:dd:23:b7:32:b2:16:f4:6d: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EF:1B:21:C9:B6:67:FE:0B:72:B3:9E:2F:78:93:45:C9:4F:C8:29 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:86:4f:76:34:20:a9:6b:63:62:78:ff:41:a7:46:e9:e7:9a: 72:96:a9:ca:e0:43:bb:77:b6:be:b7:32:f1:35:d3:92:77:36: 52:0b:c7:78:65:46:be:6a:a8:9c:3a:da:94:1d:9d:21:e8:74: 30:fe:6d:69:14:4c:97:21:ff:a4:f5:94:6b:80:8c:63:b6:83: b1:c1:2d:86:db:17:53:0e:c5:30:ac:73:13:d7:b0:39:32:a8: 38:a8:7f:9e:23:70:2e:10:a0:9d:bd:90:a7:31:20:5f:cc:75: f4:c6:f2:01:76:c6:66:5d:43:fa:61:35:e2:f0:da:fb:b8:39: b3:a9:d2:73:3c:09:40:36:1f:70:f2:40:27:41:64:a9:06:eb: 8c:50:f1:d7:82:ee:38:73:dc:9a:c8:82:7d:6a:7f:a9:0f:4d: 20:ea:91:8c:4a:b3:0a:57:a0:bd:3c:ef:c9:42:00:b4:7a:84: c2:30:6a:2d:27:10:c9:b2:47:8b:30:87:14:c8:a0:86:9a:99: e0:ac:f8:89:c4:63:dc:6f:0f:8b:94:d6:ae:bc:2c:65:2e:f5: 31:68:b0:25:8a:6f:9b:4c:b1:ba:8a:b5:47:dc:21:bf:4c:f1: 50:cd:c0:e5:26:d2:00:1f:03:20:e4:72:6e:f6:68:a8:fa:05: 54:fe:29:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ30y7qqir1PzBJD9Kd412+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwNTA0MjEwMTI1WhcNMjYwNTA1MjEwMTI1WjAzMTEwLwYDVQQD Eyg0ZmVmMWIyMWM5YjY2N2ZlMGI3MmIzOWUyZjc4OTM0NWM5NGZjODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U72tTgHCu6DTLqHwI/A0uR2GxQP NcG6PJYBNbprqv8BRP5bi8hkoBcOYxxgmh8xcOB4rTM3MVkcXD0nfXMHbOLuumDS xlcdoi7c8WbNhJY/IabLiXFj1kMu4mj5ExnpsvZQrYNYzbNl4GmUeQFWQsCLSiS3 WG+Q/PsVko+azzq+QkRbSdQX5mnc9PY1MfMiB5W3LDWIabAq3sQJNkpkLdF46WNn Pnk3PgbuwV6V+Iiv0ocBsAuVlGEShaUe0EE4JsFfldte6O7vRRD5AlCsNmkG/vNB k11/j3s+zX67LH3wwboHauNi2OxjRBakaaz+WWRYjkDN3SO3MrIW9G2g+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/vGyHJtmf+C3Kzni94k0XJT8gpMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoZPdjQg qWtjYnj/QadG6eeacpapyuBDu3e2vrcy8TXTknc2UgvHeGVGvmqonDralB2dIeh0 MP5taRRMlyH/pPWUa4CMY7aDscEthtsXUw7FMKxzE9ewOTKoOKh/niNwLhCgnb2Q pzEgX8x19MbyAXbGZl1D+mE14vDa+7g5s6nSczwJQDYfcPJAJ0FkqQbrjFDx14Lu OHPcmsiCfWp/qQ9NIOqRjEqzClegvTzvyUIAtHqEwjBqLScQybJHizCHFMighpqZ 4Kz4icRj3G8Pi5TWrrwsZS71MWiwJYpvm0yxuoq1R9whv0zxUM3A5SbSAB8DIORy bvZoqPoFVP4pNw== -----END CERTIFICATE-----Generated at Tue May 5 02:27:16 2026 by rpki-client