$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: UEgqKAkGLG9e0crq7EOV/Z0lZD9yRRGmG763eAW4L6M= Subject key identifier: C5:F8:41:9C:48:65:38:9D:B7:C4:58:22:3E:AE:FF:F3:B2:62:6E:53 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019CD4D5686FACBE9A92E6A32E19DED4813D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1808 Signing time: Mon 09 Mar 2026 23:01:21 +0000 Manifest this update: Mon 09 Mar 2026 23:01:21 +0000 Manifest next update: Tue 10 Mar 2026 23:01:21 +0000 Files and hashes: 1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=) 2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 4: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 5: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: 1v34Eejqf10aH1n9tzPHh7+2iyRlV8J671SXCcrTNL8=) 6: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 7: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 8: SDJCLd5gpc4zjtMspJLu6gjia4g.roa (hash: vxQe/FExbEBA7d59PlcXXWMapeqWVYBt8St5pFOCkPI=) 9: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=) 10: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=) 11: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 12: dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa (hash: LtFziGiCB6ZSk0IFD9YNBjwpbHldhOQjU/Bt2FiebEA=) 13: gM79P_KyJDMZfPmv7Pu4MaeA2a0.roa (hash: RqzLuUmWHViLernWWURsGmsYZYz0PTQuPaipXnOzdyc=) 14: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 15: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=) 16: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 17: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 18: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d4:d5:68:6f:ac:be:9a:92:e6:a3:2e:19:de:d4:81:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Mar 9 23:01:21 2026 GMT Not After : Mar 10 23:01:21 2026 GMT Subject: CN=c5f8419c4865389db7c458223eaefff3b2626e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:bd:64:bc:9a:fa:5f:cf:f6:4d:12:0a:b4: 0a:c9:56:62:dc:69:39:be:4e:97:ba:32:a3:a5:64: 7e:cd:10:7c:7a:37:fe:7b:7d:08:b9:14:c1:51:ea: c8:52:07:9e:0d:c3:ba:1a:f9:59:b3:d1:a1:78:6f: 6e:d7:64:a7:cd:a6:b0:77:31:82:88:89:03:0c:40: b5:a3:6d:a4:d6:a6:21:18:4a:42:b1:e5:f2:59:77: 8e:6f:af:ad:19:f5:f7:5d:15:fc:bf:23:f7:b2:ba: 30:d9:8a:95:3b:03:f9:a3:bc:99:12:3c:e8:25:37: 27:a2:ce:50:ea:1f:ca:2f:2b:be:25:c5:03:20:b1: 01:2f:eb:00:5a:53:dd:b4:24:c0:17:6c:70:b0:84: e2:b1:a1:b2:be:89:4b:00:d6:27:d3:58:e1:53:aa: f6:fe:f5:41:5a:50:5c:e1:93:0e:4a:b9:51:66:30: 0c:0e:25:90:b3:f1:4a:94:c8:b6:1c:84:52:d1:51: e2:78:e6:63:04:63:0a:8d:dd:85:0c:a0:6b:ff:56: fe:a0:1b:5f:47:10:2d:fe:c4:d7:e9:40:c6:ea:ec: 36:3f:3d:7d:f3:f5:75:d5:34:f1:99:50:33:7d:25: e2:7f:17:97:5c:2e:c7:a7:d8:a0:a3:bc:27:c2:1b: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:41:9C:48:65:38:9D:B7:C4:58:22:3E:AE:FF:F3:B2:62:6E:53 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:89:19:fa:9d:39:29:4f:f4:32:3d:86:27:fc:13:51:18:8b: 0f:0b:17:76:a5:94:1a:da:00:a1:ae:52:21:ca:2c:06:75:f5: 2d:bb:4a:f6:7d:f1:4f:40:fb:1e:e2:e3:74:77:18:db:bb:6f: ce:69:57:ee:24:46:b2:e7:c6:8e:7d:f5:d0:c6:65:a2:4b:b9: eb:47:91:30:7a:4e:87:fa:e2:9e:b0:18:d7:ad:99:c6:3c:ba: 7b:8b:cf:83:25:af:4f:f7:01:4c:c2:1f:49:61:16:6f:a3:08: 1c:7f:59:4f:86:51:ef:bf:ac:7a:88:1a:bb:6b:26:1e:a7:0b: 32:b2:0a:b3:03:14:60:5f:cc:16:43:0e:e2:1f:bf:d2:6e:c5: 55:4b:cd:c9:ca:dd:06:86:89:ed:ce:71:c3:fe:b7:90:3a:4f: cd:55:c2:df:9f:e2:79:93:5f:7f:f0:0f:9b:27:76:42:c1:b3: 73:9f:6c:20:44:b9:2a:c3:36:f4:8e:b6:49:80:b7:40:fe:1b: 52:e7:48:ed:cb:fe:49:6f:f5:cd:d4:c6:ef:a9:c0:0b:01:2f: a9:5a:a7:79:11:93:47:77:88:fb:31:a2:50:d2:5c:c9:70:2d: 00:9a:e8:2c:03:49:5c:85:23:cf:de:5d:32:ab:36:58:b2:19: a9:11:8f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzU1WhvrL6akuajLhne1IE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMzA5MjMwMTIxWhcNMjYwMzEwMjMwMTIxWjAzMTEwLwYDVQQD EyhjNWY4NDE5YzQ4NjUzODlkYjdjNDU4MjIzZWFlZmZmM2IyNjI2ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvu9ZLya+l/P9k0SCrQKyVZi3Gk5 vk6XujKjpWR+zRB8ejf+e30IuRTBUerIUgeeDcO6GvlZs9GheG9u12SnzaawdzGC iIkDDEC1o22k1qYhGEpCseXyWXeOb6+tGfX3XRX8vyP3srow2YqVOwP5o7yZEjzo JTcnos5Q6h/KLyu+JcUDILEBL+sAWlPdtCTAF2xwsITisaGyvolLANYn01jhU6r2 /vVBWlBc4ZMOSrlRZjAMDiWQs/FKlMi2HIRS0VHieOZjBGMKjd2FDKBr/1b+oBtf RxAt/sTX6UDG6uw2Pz198/V11TTxmVAzfSXifxeXXC7Hp9igo7wnwhv8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX4QZxIZTidt8RYIj6u//OyYm5TMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVokZ+p05 KU/0Mj2GJ/wTURiLDwsXdqWUGtoAoa5SIcosBnX1LbtK9n3xT0D7HuLjdHcY27tv zmlX7iRGsufGjn310MZloku560eRMHpOh/rinrAY162Zxjy6e4vPgyWvT/cBTMIf SWEWb6MIHH9ZT4ZR77+seogau2smHqcLMrIKswMUYF/MFkMO4h+/0m7FVUvNycrd BoaJ7c5xw/63kDpPzVXC35/ieZNff/APmyd2QsGzc59sIES5KsM29I62SYC3QP4b UudI7cv+SW/1zdTG76nACwEvqVqneRGTR3eI+zGiUNJcyXAtAJroLANJXIUjz95d Mqs2WLIZqRGP7A== -----END CERTIFICATE-----Generated at Tue Mar 10 07:56:43 2026 by rpki-client