$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: xVQjZFzVmPTXX29LTH+QoYjQKy2M1mSodQ908Tgb5oo= Subject key identifier: B5:91:0E:69:90:C0:3A:EB:07:61:73:BC:C5:7C:DA:BA:ED:DA:EF:5E Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 01A0D049327DD9FB2CB9385ECF7E5BF71B63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 10DA Signing time: Wed 23 Sep 2026 22:00:52 +0000 Manifest this update: Wed 23 Sep 2026 22:00:52 +0000 Manifest next update: Thu 24 Sep 2026 22:00:52 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: WaECSld0p5pfyTr1Su1tXsuLL4/Bwrgpe48btz6rr1c=) 3: QSUim-oJI7quDVdAPsLmjgxRP2Y.roa (hash: eJHNXVy0/883iOfWh3J9+VQsmwNkzJsJL/pzsURiO8s=) 4: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 5: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 6: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 7: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 8: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:49:32:7d:d9:fb:2c:b9:38:5e:cf:7e:5b:f7:1b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Sep 23 22:00:52 2026 GMT Not After : Sep 24 22:00:52 2026 GMT Subject: CN=b5910e6990c03aeb076173bcc57cdabaeddaef5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:14:20:02:19:89:a9:41:44:c2:2a:db:2d: 4e:05:74:c3:e0:f2:09:3e:82:fa:62:c2:90:9b:f3: 2d:9a:35:9c:46:da:55:f6:c3:18:9a:38:34:1e:e7: b9:e4:b4:19:4a:b7:1c:5b:f2:bf:3e:ec:37:07:3d: ae:8b:a5:40:29:76:42:98:22:24:16:05:df:39:e3: d8:74:ec:c5:dc:98:8b:bb:0d:68:15:3e:56:52:86: 2d:22:db:f4:df:4c:ae:8c:cb:f4:05:43:dc:cb:7e: c5:d7:05:3d:9e:bc:5c:99:4a:c6:82:78:09:fd:75: 96:10:cd:57:15:22:72:ec:fa:ce:cc:52:54:ec:68: 2a:37:ac:46:73:77:31:87:5b:46:72:c1:4b:5d:c8: 6a:70:7a:6b:b0:d8:03:7b:19:87:9f:4b:d6:1f:dd: 4d:8c:51:64:e8:54:4b:f4:0b:0f:07:f0:2b:58:54: bb:af:05:c6:c2:09:12:e7:df:32:a5:4b:05:f6:5f: 0a:76:25:ce:02:2f:21:c2:5a:1b:7e:f1:ff:a1:be: 3a:a1:e7:be:e3:41:ae:e4:e5:1c:a2:8a:ff:1c:35: 8b:93:3b:2c:dc:e5:a9:8a:fb:9b:8d:3f:90:ac:c0: 6c:3a:81:e8:38:6b:a4:b7:cf:42:19:d4:fb:3c:ea: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:0E:69:90:C0:3A:EB:07:61:73:BC:C5:7C:DA:BA:ED:DA:EF:5E X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0d:52:56:df:4c:f7:80:c6:95:63:3a:43:12:dc:91:54:71: 68:b0:2c:b1:da:41:d4:05:8a:2a:a5:3b:1f:ad:8c:a2:d3:ae: 1b:6b:a1:88:39:bb:72:8d:d4:17:bb:6a:18:86:55:3b:b2:cd: 33:3e:2f:48:4c:ac:a5:7b:8b:50:4f:01:fd:53:12:94:29:39: b4:33:0a:e7:23:a6:8c:9e:7c:45:0d:ea:ab:dc:3b:74:70:41: ad:17:0c:02:cb:7f:83:d0:aa:09:18:aa:54:ee:c5:b1:44:0a: a1:79:84:1e:3e:46:4d:84:c7:92:08:d7:3e:9e:7a:99:d5:a7: 64:91:90:f8:97:14:75:98:43:64:cc:33:b5:6a:35:41:84:d9: 29:4c:d2:b8:34:72:2a:d8:6d:0b:18:70:9b:45:5c:f5:76:8e: 5e:06:e4:08:48:19:5b:e0:05:e9:da:08:70:df:9c:6a:2d:13: b4:1e:ef:ab:4a:97:55:ab:96:5c:c2:62:fa:29:9b:63:cb:dc: b7:f0:45:eb:09:bf:a8:51:c7:dd:c7:67:b2:76:ca:47:a3:59: d2:aa:5e:db:66:5c:c8:40:cf:c7:cb:1b:2e:ff:97:0e:25:0a: 5c:46:08:e8:d8:1d:7c:a9:9c:2f:81:91:fb:6c:51:85:fd:f2: 89:d0:0d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQSTJ92fssuThez35b9xtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwOTIzMjIwMDUyWhcNMjYwOTI0MjIwMDUyWjAzMTEwLwYDVQQD EyhiNTkxMGU2OTkwYzAzYWViMDc2MTczYmNjNTdjZGFiYWVkZGFlZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquEUIAIZialBRMIq2y1OBXTD4PIJ PoL6YsKQm/MtmjWcRtpV9sMYmjg0Hue55LQZSrccW/K/Puw3Bz2ui6VAKXZCmCIk FgXfOePYdOzF3JiLuw1oFT5WUoYtItv030yujMv0BUPcy37F1wU9nrxcmUrGgngJ /XWWEM1XFSJy7PrOzFJU7GgqN6xGc3cxh1tGcsFLXchqcHprsNgDexmHn0vWH91N jFFk6FRL9AsPB/ArWFS7rwXGwgkS598ypUsF9l8KdiXOAi8hwlobfvH/ob46oee+ 40Gu5OUcoor/HDWLkzss3OWpivubjT+QrMBsOoHoOGukt89CGdT7POrhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWRDmmQwDrrB2FzvMV82rrt2u9eMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw1SVt9M 94DGlWM6QxLckVRxaLAssdpB1AWKKqU7H62MotOuG2uhiDm7co3UF7tqGIZVO7LN Mz4vSEyspXuLUE8B/VMSlCk5tDMK5yOmjJ58RQ3qq9w7dHBBrRcMAst/g9CqCRiq VO7FsUQKoXmEHj5GTYTHkgjXPp56mdWnZJGQ+JcUdZhDZMwztWo1QYTZKUzSuDRy KthtCxhwm0Vc9XaOXgbkCEgZW+AF6doIcN+cai0TtB7vq0qXVauWXMJi+imbY8vc t/BF6wm/qFHH3cdnsnbKR6NZ0qpe22ZcyEDPx8sbLv+XDiUKXEYI6NgdfKmcL4GR +2xRhf3yidAN7Q== -----END CERTIFICATE-----Generated at Thu Sep 24 02:07:30 2026 by rpki-client