$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: +kt7ChmiVln785m9501s6i51JxNRpK0t0SKmIAYbkok= Subject key identifier: 75:E8:A6:12:44:E6:6A:18:68:36:80:AF:B7:B3:3E:A3:51:AA:A0:5C Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019DA30A71E2B76B3C7C4A84237738350FF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0F34 Signing time: Sun 19 Apr 2026 00:01:03 +0000 Manifest this update: Sun 19 Apr 2026 00:01:03 +0000 Manifest next update: Mon 20 Apr 2026 00:01:03 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: QNNUP6FA0hdU7mJplRLzEbVfF7/LWx+MHAI4C1wawa8=) 3: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 4: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 5: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 6: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 7: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 8: dXvzyfOdOJH0q6xYVkjSdHKWSdE.roa (hash: 7SC4vR0R2kuqeE6TaEujJclCq7gK1eHalGhCH7IVpOw=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:0a:71:e2:b7:6b:3c:7c:4a:84:23:77:38:35:0f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Apr 19 00:01:03 2026 GMT Not After : Apr 20 00:01:03 2026 GMT Subject: CN=75e8a61244e66a18683680afb7b33ea351aaa05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:96:2a:d7:11:9d:47:b9:b9:5f:27:58:1c: 78:1c:f2:5c:fc:9c:68:d5:36:c9:a0:f6:52:59:1f: 4f:c0:a7:f3:8f:bf:5e:74:a7:1f:92:a2:ab:47:2f: e0:c5:d1:d0:89:31:9e:5b:19:74:9a:75:05:79:a3: 42:aa:6e:eb:50:2e:de:12:bc:3d:06:ff:ea:87:d8: 5e:8f:8b:2e:9a:56:5c:c5:c1:df:ca:09:c8:b2:64: 5e:30:23:0a:30:3c:c1:82:7a:69:1d:cb:d0:6a:cf: cc:f2:23:e9:d8:f9:55:ef:ed:1d:fd:d8:4d:a7:dd: 66:da:13:db:63:98:4b:1f:b7:b7:89:3f:e4:ad:e8: ef:b8:91:fd:00:a7:10:3a:15:3e:ca:6f:55:99:67: 8a:0c:80:67:07:6e:6e:93:f7:64:a0:91:ed:88:65: 24:8b:bb:1a:5b:56:23:20:df:f2:4b:3d:4c:61:df: 02:0a:5a:fc:16:b7:6f:8a:48:dd:ff:47:ac:94:41: 53:9b:36:1b:5e:ee:11:f4:97:c9:7f:4e:8d:30:7f: 4d:a5:90:3c:58:b5:a8:d2:a8:65:64:85:ab:ac:36: 96:29:0a:83:32:70:97:d9:58:f8:cf:00:da:f3:cd: 4c:ca:88:50:61:64:52:af:0a:15:3a:ac:fb:2a:a1: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E8:A6:12:44:E6:6A:18:68:36:80:AF:B7:B3:3E:A3:51:AA:A0:5C X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:55:2b:41:0f:c9:95:e3:42:cc:17:79:b1:9b:9a:60:5d:1a: 91:25:9e:24:87:e2:c7:9a:a6:11:6a:79:7d:da:07:ff:04:71: 25:d8:06:3f:9e:35:e9:25:02:13:37:70:58:61:75:d5:2a:2d: d9:49:41:cc:f1:97:94:4a:99:ee:49:7f:2c:c6:e1:ba:37:15: ae:17:2f:2a:19:df:63:17:72:94:a9:28:51:22:09:7c:86:96: 6a:9c:13:41:54:7b:b4:90:f2:c2:d3:c4:ae:f5:0a:6c:5c:c7: ef:0f:db:f0:72:b5:3f:09:29:cf:61:d2:36:f0:19:3e:aa:86: 2b:63:b7:6b:95:70:24:36:fc:a4:6e:51:c7:72:ae:34:a4:06: b6:30:bb:8b:f9:af:ce:dd:fd:1f:bf:90:b7:3d:67:f8:25:49: 1e:ac:db:46:f2:ec:f4:9c:04:ff:0b:99:4d:46:b1:04:22:08: db:b2:a3:58:b9:18:0d:3c:b9:9a:14:82:97:1b:4d:9e:1b:cf: 51:b9:83:8f:53:27:5b:30:59:a7:fd:27:aa:0a:b4:23:d4:31: 95:27:5a:58:a6:87:01:42:b0:7c:b7:03:87:cf:92:37:67:dd: a0:9b:ca:7b:93:a8:a7:84:04:ed:e3:14:43:d3:21:84:0a:0a: e5:36:8f:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCnHit2s8fEqEI3c4NQ/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwNDE5MDAwMTAzWhcNMjYwNDIwMDAwMTAzWjAzMTEwLwYDVQQD Eyg3NWU4YTYxMjQ0ZTY2YTE4NjgzNjgwYWZiN2IzM2VhMzUxYWFhMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRiWKtcRnUe5uV8nWBx4HPJc/Jxo 1TbJoPZSWR9PwKfzj79edKcfkqKrRy/gxdHQiTGeWxl0mnUFeaNCqm7rUC7eErw9 Bv/qh9hej4sumlZcxcHfygnIsmReMCMKMDzBgnppHcvQas/M8iPp2PlV7+0d/dhN p91m2hPbY5hLH7e3iT/krejvuJH9AKcQOhU+ym9VmWeKDIBnB25uk/dkoJHtiGUk i7saW1YjIN/ySz1MYd8CClr8Frdvikjd/0eslEFTmzYbXu4R9JfJf06NMH9NpZA8 WLWo0qhlZIWrrDaWKQqDMnCX2Vj4zwDa881MyohQYWRSrwoVOqz7KqHNYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXophJE5moYaDaAr7ezPqNRqqBcMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1UrQQ/J leNCzBd5sZuaYF0akSWeJIfix5qmEWp5fdoH/wRxJdgGP5416SUCEzdwWGF11Sot 2UlBzPGXlEqZ7kl/LMbhujcVrhcvKhnfYxdylKkoUSIJfIaWapwTQVR7tJDywtPE rvUKbFzH7w/b8HK1Pwkpz2HSNvAZPqqGK2O3a5VwJDb8pG5Rx3KuNKQGtjC7i/mv zt39H7+Qtz1n+CVJHqzbRvLs9JwE/wuZTUaxBCII27KjWLkYDTy5mhSClxtNnhvP UbmDj1MnWzBZp/0nqgq0I9QxlSdaWKaHAUKwfLcDh8+SN2fdoJvKe5Oop4QE7eMU Q9MhhAoK5TaPTA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:51:19 2026 by rpki-client