$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: jIHwTP6FDjcAYcdo6X+89FZKkUCe22/tqUJB715QgPU= Subject key identifier: F1:70:53:59:E6:5F:BE:AC:06:35:D8:4A:63:AF:A7:8F:B2:EF:57:69 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019CABA1DBD172FC883FEF4594397B2A28D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0EB2 Signing time: Sun 01 Mar 2026 23:00:37 +0000 Manifest this update: Sun 01 Mar 2026 23:00:37 +0000 Manifest next update: Mon 02 Mar 2026 23:00:37 +0000 Files and hashes: 1: 4RZTKbN1v-K-y22tAcFXWig3lW0.roa (hash: /VQ5TaILo3ZhfCH+yi7l1JJuhoymVfNhArSLZ/BLWfc=) 2: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 3: CPRW8P-dWt3q43tk8wC_BcQDCs8.roa (hash: FS0mv+wp+q+UW726jj+JxZBQxP4OfD+roz+I1dPg1uo=) 4: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: bGtkFABE/wV9/K5s2qqebzVle3aKTaJqxyoOifZ2o8I=) 5: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 6: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 7: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 8: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 9: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a1:db:d1:72:fc:88:3f:ef:45:94:39:7b:2a:28:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Mar 1 23:00:37 2026 GMT Not After : Mar 2 23:00:37 2026 GMT Subject: CN=f1705359e65fbeac0635d84a63afa78fb2ef5769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:5b:3d:ac:d6:17:b7:94:58:74:3d:3f:be: 8d:3c:31:51:59:67:9d:58:5d:28:65:ae:9c:a7:a6: 94:cd:2a:3c:9c:0f:58:01:9a:14:4b:96:86:8c:34: 06:0b:06:08:0c:38:a1:6c:38:6f:7d:87:72:e5:80: 5a:2c:e2:34:8a:94:3a:80:6e:b5:75:8d:13:19:01: bc:b9:e3:c2:67:b5:1b:e8:49:bc:d1:4d:ba:77:91: 7f:40:1b:df:3d:01:66:6b:fe:46:47:9c:da:0b:5c: 82:0c:63:61:53:0f:40:1f:04:29:d7:99:06:98:2a: 5f:29:3d:45:7b:48:48:33:4d:5a:64:c1:67:e4:b3: 17:bc:93:b8:9d:99:dc:79:ab:6a:26:04:ab:20:b6: d3:6b:bb:86:84:47:9e:46:8b:ce:37:27:a2:22:aa: a4:08:78:5f:ae:a9:11:e4:78:1c:02:ab:fc:2a:b1: 2a:dc:39:4d:0c:0e:65:08:db:14:83:6c:90:47:af: bd:1a:24:ca:35:3b:bd:9c:42:27:da:ac:4e:83:88: ed:56:e6:2d:90:20:65:64:50:c2:ef:ed:e8:96:80: 5f:c0:50:34:56:af:5b:d1:0c:0a:36:20:90:88:9c: 72:e4:5b:22:56:7d:71:f0:37:d3:72:8e:c1:f6:ef: 17:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:53:59:E6:5F:BE:AC:06:35:D8:4A:63:AF:A7:8F:B2:EF:57:69 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f1:34:b2:90:19:91:ac:a1:73:17:bb:11:3e:2d:19:b0:78: 36:d1:54:65:82:c5:1b:cc:28:69:b9:1e:86:b8:27:82:37:bc: d4:f7:98:f8:76:b7:99:e6:f3:7b:20:48:72:8e:d2:ad:e1:9d: f7:1a:48:04:bc:e2:72:59:8e:a9:91:be:bd:c2:e2:e0:ef:b4: 60:63:36:7f:5a:fe:ff:0b:f4:c5:87:31:3c:56:83:5e:32:5e: 64:ca:dd:1c:51:d1:dc:4f:87:e2:da:4a:cd:ee:e7:d3:f9:77: d7:ca:9f:de:7f:34:2e:14:b4:8c:2e:63:06:8e:68:7a:17:1b: 89:f6:17:1a:17:4b:ec:74:4c:02:d3:a5:fb:e2:44:d3:e3:17: 2f:b0:0a:7f:f4:4e:44:44:77:ad:ea:8e:7c:a9:5d:24:74:37: 15:97:1d:70:55:3b:9e:9a:ad:21:4f:71:d6:1d:83:3f:84:06: 21:cf:33:b5:e3:ba:44:7b:69:22:53:27:05:38:47:ee:dd:90: 4a:b8:ad:ec:c6:58:79:a8:1a:c3:8a:d4:62:6a:54:d3:d0:7d: 27:d6:0c:58:83:da:91:c2:f1:02:95:83:6c:6d:5d:e9:e8:39: 89:46:3a:a3:34:7d:c3:fa:5f:65:6e:81:eb:70:87:f9:37:89: 2b:af:f8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrodvRcvyIP+9FlDl7KijYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMzAxMjMwMDM3WhcNMjYwMzAyMjMwMDM3WjAzMTEwLwYDVQQD EyhmMTcwNTM1OWU2NWZiZWFjMDYzNWQ4NGE2M2FmYTc4ZmIyZWY1NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJdbPazWF7eUWHQ9P76NPDFRWWed WF0oZa6cp6aUzSo8nA9YAZoUS5aGjDQGCwYIDDihbDhvfYdy5YBaLOI0ipQ6gG61 dY0TGQG8uePCZ7Ub6Em80U26d5F/QBvfPQFma/5GR5zaC1yCDGNhUw9AHwQp15kG mCpfKT1Fe0hIM01aZMFn5LMXvJO4nZnceatqJgSrILbTa7uGhEeeRovONyeiIqqk CHhfrqkR5HgcAqv8KrEq3DlNDA5lCNsUg2yQR6+9GiTKNTu9nEIn2qxOg4jtVuYt kCBlZFDC7+3oloBfwFA0Vq9b0QwKNiCQiJxy5FsiVn1x8DfTco7B9u8XYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFwU1nmX76sBjXYSmOvp4+y71dpMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfE0spAZ kayhcxe7ET4tGbB4NtFUZYLFG8woabkehrgngje81PeY+Ha3mebzeyBIco7SreGd 9xpIBLziclmOqZG+vcLi4O+0YGM2f1r+/wv0xYcxPFaDXjJeZMrdHFHR3E+H4tpK ze7n0/l318qf3n80LhS0jC5jBo5oehcbifYXGhdL7HRMAtOl++JE0+MXL7AKf/RO RER3reqOfKldJHQ3FZcdcFU7npqtIU9x1h2DP4QGIc8zteO6RHtpIlMnBThH7t2Q Srit7MZYeagaw4rUYmpU09B9J9YMWIPakcLxApWDbG1d6eg5iUY6ozR9w/pfZW6B 63CH+TeJK6/48Q== -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:20 2026 by rpki-client