$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: 2g5Fvu40FeieZhiBotrZ5s3x6yftFowdC1Z+EK02Z78= Subject key identifier: A6:4D:34:8B:9C:5C:97:1B:FB:FC:47:F6:E2:88:25:BE:7B:69:83:1E Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01A14A2AAC65C9FDC9B2F0C3352DE0FF8858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1AB0 Signing time: Sat 17 Oct 2026 14:01:12 +0000 Manifest this update: Sat 17 Oct 2026 14:01:12 +0000 Manifest next update: Sun 18 Oct 2026 14:01:12 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: tL9A+U6OBbA9kilHOeotcJoLH8fuONndbJ3zmY4SORc=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4a:2a:ac:65:c9:fd:c9:b2:f0:c3:35:2d:e0:ff:88:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Oct 17 14:01:12 2026 GMT Not After : Oct 18 14:01:12 2026 GMT Subject: CN=a64d348b9c5c971bfbfc47f6e28825be7b69831e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:42:35:65:ff:14:80:f6:97:b2:cb:0a:a0: 4a:6e:5d:11:8f:b5:bf:c6:c1:8b:be:46:ab:c4:d9: a5:25:70:06:2f:f8:1e:11:07:25:1f:00:02:5a:93: 69:54:02:b4:50:16:dd:46:e4:49:58:08:a0:19:ed: 38:15:12:44:69:46:1e:4f:a4:7d:80:33:52:f2:b2: 18:b9:df:4e:79:70:12:50:f9:fb:72:cf:86:80:29: 82:f7:02:eb:61:7f:95:f5:c4:c9:86:9c:2d:3a:fb: 48:e6:e6:43:f8:6c:3a:d7:fc:0e:02:96:3b:4b:2e: b4:ed:68:20:41:fc:bc:5d:d1:17:e6:87:cf:ca:d9: 25:8d:a9:f4:de:ce:92:97:44:95:1e:b7:0b:d1:75: 95:51:fa:3c:1b:f7:fe:2e:af:99:10:48:6f:23:98: 0f:91:17:ba:9b:ca:3a:67:54:1c:18:21:b9:97:2f: 5c:60:21:16:21:fc:e2:05:45:40:60:b4:ce:d4:c4: 64:20:7b:a9:ad:ef:0c:4e:08:c2:e4:dd:5e:ea:f5: ce:32:ed:9f:90:be:c2:f3:d7:2c:fd:f8:82:7a:72: b8:90:16:12:e7:cc:89:3c:36:5c:b2:44:60:8a:3f: c8:87:66:cf:c7:01:61:fe:a0:2a:ed:ac:4c:51:6f: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:34:8B:9C:5C:97:1B:FB:FC:47:F6:E2:88:25:BE:7B:69:83:1E X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:56:4f:ce:86:f4:44:12:d9:a4:41:f2:7d:f1:78:e7:01: 10:77:33:1d:09:b6:a3:a7:33:fd:b5:ef:4f:e5:c1:03:84:ec: 83:80:b8:bb:f5:86:0b:4d:30:58:39:4d:7f:a3:cd:ce:46:29: 78:01:a2:7d:74:34:d1:35:76:64:9c:7e:96:98:db:5b:4e:5a: db:0b:41:3b:34:09:0e:77:b5:3f:e9:fc:28:0e:21:d0:73:e4: e7:ca:ba:25:91:20:d3:85:48:c6:2e:a5:e0:e9:d5:f9:ff:86: 11:d7:58:d8:98:b3:36:68:5d:c4:58:fa:ff:89:21:4c:fb:33: 7d:6b:f6:7e:e8:bc:7f:d3:14:ce:2b:b4:7e:71:7b:b6:89:00: b8:ca:05:21:fb:09:77:4b:80:fd:2d:01:d6:32:7c:5a:42:8a: 9d:54:35:4b:27:4f:ca:fe:38:78:bb:d2:3f:bc:cb:b1:9a:25: 0d:ce:91:ba:1b:96:e1:62:43:21:fb:53:40:a3:6d:a4:33:07: c1:0a:f7:49:3e:57:65:f0:4f:91:4c:ea:9f:3b:6e:03:d8:1e: ab:9b:ea:35:e6:f2:da:a1:60:f9:a3:7b:c5:27:2b:f8:52:02: 40:46:dc:28:83:c8:21:03:bb:83:6c:b8:bf:f5:89:8e:1e:b0: c5:10:7d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFKKqxlyf3JsvDDNS3g/4hYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYxMDE3MTQwMTEyWhcNMjYxMDE4MTQwMTEyWjAzMTEwLwYDVQQD EyhhNjRkMzQ4YjljNWM5NzFiZmJmYzQ3ZjZlMjg4MjViZTdiNjk4MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwhCNWX/FID2l7LLCqBKbl0Rj7W/ xsGLvkarxNmlJXAGL/geEQclHwACWpNpVAK0UBbdRuRJWAigGe04FRJEaUYeT6R9 gDNS8rIYud9OeXASUPn7cs+GgCmC9wLrYX+V9cTJhpwtOvtI5uZD+Gw61/wOApY7 Sy607WggQfy8XdEX5ofPytkljan03s6Sl0SVHrcL0XWVUfo8G/f+Lq+ZEEhvI5gP kRe6m8o6Z1QcGCG5ly9cYCEWIfziBUVAYLTO1MRkIHupre8MTgjC5N1e6vXOMu2f kL7C89cs/fiCenK4kBYS58yJPDZcskRgij/Ih2bPxwFh/qAq7axMUW8V0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZNNIucXJcb+/xH9uKIJb57aYMeMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTNWT86G 9EQS2aRB8n3xeOcBEHczHQm2o6cz/bXvT+XBA4Tsg4C4u/WGC00wWDlNf6PNzkYp eAGifXQ00TV2ZJx+lpjbW05a2wtBOzQJDne1P+n8KA4h0HPk58q6JZEg04VIxi6l 4OnV+f+GEddY2JizNmhdxFj6/4khTPszfWv2fui8f9MUziu0fnF7tokAuMoFIfsJ d0uA/S0B1jJ8WkKKnVQ1SydPyv44eLvSP7zLsZolDc6RuhuW4WJDIftTQKNtpDMH wQr3ST5XZfBPkUzqnztuA9geq5vqNeby2qFg+aN7xScr+FICQEbcKIPIIQO7g2y4 v/WJjh6wxRB95A== -----END CERTIFICATE-----Generated at Sat Oct 17 18:32:58 2026 by rpki-client