$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: xFzBYt6G8abRIbkpnW8NDIgbDmtvaOdDfmfWJ6aLbmg= Subject key identifier: 76:8C:AD:01:98:EA:20:85:23:87:D3:5D:C2:3B:F0:12:AD:EF:37:33 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019D389C438E120EA210AB82FAE5E1DD76FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 189D Signing time: Sun 29 Mar 2026 08:00:58 +0000 Manifest this update: Sun 29 Mar 2026 08:00:58 +0000 Manifest next update: Mon 30 Mar 2026 08:00:58 +0000 Files and hashes: 1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=) 2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=) 3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=) 4: 34lSajmzV7ghbV2u1KSVPerBr80.roa (hash: NamtEVy8eAOlAQdliJbJze4twHs6pp1lCvXKU+23zoI=) 5: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=) 6: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=) 7: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=) 8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=) 9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=) 10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: KKBz3LoKsoM1VPB4UP5PtY6Gpm9UB6PCH0+vAbipocE=) 11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=) 12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=) 13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=) 14: XZk-yWmlDDM9CxBVtm8oXZP5lLg.roa (hash: 4M0vAZEtj82VVd8AbgFS4P7h6woEavJ+CLFH4jVH08E=) 15: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=) 16: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=) 17: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=) 18: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=) 19: x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa (hash: 7TMD01f8lLY3g9AO1/72S5iTfUyRV4cwvwL1UdzW4pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:9c:43:8e:12:0e:a2:10:ab:82:fa:e5:e1:dd:76:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Mar 29 08:00:58 2026 GMT Not After : Mar 30 08:00:58 2026 GMT Subject: CN=768cad0198ea20852387d35dc23bf012adef3733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:30:a3:6d:9f:95:13:1f:41:23:15:7a:a7: aa:74:de:98:7d:22:f3:57:da:80:e1:35:e2:c1:5f: 34:5e:fa:3b:2e:d6:3d:e1:2c:f1:6c:7e:17:b7:c0: 24:21:3a:7d:47:c6:6e:55:84:1e:66:a0:b4:ff:cd: bf:60:10:d5:ec:73:c3:21:22:66:aa:42:37:67:28: 61:c7:09:9c:2f:ad:d4:c1:67:3a:0f:4e:bf:4d:3f: bb:90:75:bf:7e:2f:dd:97:cf:a4:9e:22:25:07:07: c3:9d:b6:3e:bd:82:31:dd:8f:e6:73:65:7b:cb:c2: ac:07:18:21:ff:11:71:3f:35:8a:f7:df:45:43:b0: fb:f1:02:b6:20:96:97:54:11:3a:db:8f:f4:af:ad: 5f:0c:5b:3e:7e:10:0b:ac:98:8a:df:3d:c2:88:21: 9a:a7:8b:0d:0c:0d:8e:99:37:be:3b:2f:30:40:2b: ee:39:0a:cf:77:9d:3f:de:67:1c:2c:64:a3:39:23: c0:ed:e8:bd:38:80:f0:bd:89:af:1f:54:2e:58:96: bb:79:3d:2a:a9:03:da:8b:fe:be:1c:32:2d:c1:0d: 34:0d:13:ec:ec:db:8c:0b:82:dc:11:0e:ca:3a:ea: cd:e5:3f:de:45:b7:f7:52:19:fb:e4:27:58:76:ee: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8C:AD:01:98:EA:20:85:23:87:D3:5D:C2:3B:F0:12:AD:EF:37:33 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f6:40:6e:96:2d:90:00:86:bd:6f:7e:9c:37:82:a3:78:d3: ea:de:26:07:87:54:7d:3c:12:84:b2:0a:65:6d:a3:e9:40:67: f2:77:7f:c5:cc:8e:f8:e7:4e:45:61:80:8c:e6:6a:a4:d9:3c: fb:ad:00:ce:6f:bb:26:09:89:ab:83:65:1f:58:ad:41:c8:ff: de:80:bc:af:68:4c:eb:d4:e3:1e:61:13:8e:2a:83:fe:2e:fa: c2:41:9a:a5:11:6e:14:15:b3:fa:e3:91:ec:1a:54:cd:ab:93: 3d:04:99:e4:e4:d3:2b:f8:86:53:eb:13:9b:1a:ab:cd:4a:4d: 71:27:b9:b7:6e:69:36:cd:50:6e:49:11:83:09:ce:94:5c:9c: b2:2f:b2:4d:4a:22:10:83:b3:3b:6c:50:50:ff:46:d4:54:ac: d1:70:fc:c1:de:c5:16:50:19:22:03:11:82:38:b5:1a:90:57: 1a:f0:eb:39:14:27:de:0c:b0:22:63:39:e4:0c:74:de:10:a8: 58:39:b3:06:48:9b:fd:4f:eb:02:9b:5a:45:b3:2f:e6:e8:f0: 38:f7:6d:36:0b:ae:d3:84:eb:7f:dd:02:fb:2e:0b:c0:47:01: a1:2a:e0:71:92:37:02:d6:3d:79:40:ad:7c:1d:50:1e:3c:12: 57:7c:0f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04nEOOEg6iEKuC+uXh3Xb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMzI5MDgwMDU4WhcNMjYwMzMwMDgwMDU4WjAzMTEwLwYDVQQD Eyg3NjhjYWQwMTk4ZWEyMDg1MjM4N2QzNWRjMjNiZjAxMmFkZWYzNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCgwo22flRMfQSMVeqeqdN6YfSLz V9qA4TXiwV80Xvo7LtY94SzxbH4Xt8AkITp9R8ZuVYQeZqC0/82/YBDV7HPDISJm qkI3ZyhhxwmcL63UwWc6D06/TT+7kHW/fi/dl8+kniIlBwfDnbY+vYIx3Y/mc2V7 y8KsBxgh/xFxPzWK999FQ7D78QK2IJaXVBE624/0r61fDFs+fhALrJiK3z3CiCGa p4sNDA2OmTe+Oy8wQCvuOQrPd50/3mccLGSjOSPA7ei9OIDwvYmvH1QuWJa7eT0q qQPai/6+HDItwQ00DRPs7NuMC4LcEQ7KOurN5T/eRbf3Uhn75CdYdu5jvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaMrQGY6iCFI4fTXcI78BKt7zczMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/ZAbpYt kACGvW9+nDeCo3jT6t4mB4dUfTwShLIKZW2j6UBn8nd/xcyO+OdORWGAjOZqpNk8 +60Azm+7JgmJq4NlH1itQcj/3oC8r2hM69TjHmETjiqD/i76wkGapRFuFBWz+uOR 7BpUzauTPQSZ5OTTK/iGU+sTmxqrzUpNcSe5t25pNs1QbkkRgwnOlFycsi+yTUoi EIOzO2xQUP9G1FSs0XD8wd7FFlAZIgMRgji1GpBXGvDrORQn3gywImM55Ax03hCo WDmzBkib/U/rAptaRbMv5ujwOPdtNguu04Trf90C+y4LwEcBoSrgcZI3AtY9eUCt fB1QHjwSV3wPTQ== -----END CERTIFICATE-----Generated at Sun Mar 29 12:49:08 2026 by rpki-client