$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: JYhM56j5PVmrCShnMTTpLG89g3QmMuwL/++kzcZTbS0= Subject key identifier: 14:77:B8:7C:E7:B9:76:62:64:23:80:40:6A:66:99:AA:C7:05:F6:C7 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019D9A74B75BB3054991B16DAC779EF7160D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 168F Signing time: Fri 17 Apr 2026 08:00:33 +0000 Manifest this update: Fri 17 Apr 2026 08:00:33 +0000 Manifest next update: Sat 18 Apr 2026 08:00:33 +0000 Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=) 2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=) 3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=) 4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=) 5: KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa (hash: 5MjMmws8ncjSHeVa5J4LmPdEnI2b6Mjqn9vh8n6pFxs=) 6: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: JCqRSPe0hG78UbgmlRiRuNsnR+RJHHlcd0ukgGtcpE4=) 7: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=) 8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=) 9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=) 10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=) 11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:b7:5b:b3:05:49:91:b1:6d:ac:77:9e:f7:16:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Apr 17 08:00:33 2026 GMT Not After : Apr 18 08:00:33 2026 GMT Subject: CN=1477b87ce7b97662642380406a6699aac705f6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:d7:55:a4:72:9e:42:fa:dc:36:7d:35:53: 04:01:f2:5a:b2:b0:09:dc:86:31:83:08:5d:f0:d8: b6:fc:74:53:01:f3:db:24:f2:b6:9d:c1:8a:74:38: 6e:7c:e1:bf:0b:ca:4d:20:34:a5:33:79:4e:19:10: 05:bc:4a:55:2a:c3:8c:56:01:83:71:f7:db:05:e4: fc:0a:b8:23:7f:1b:16:53:26:de:9c:79:2e:76:07: d3:5c:44:f5:64:e8:b4:8c:c7:74:7c:09:7b:ca:74: 9a:23:d4:57:69:59:97:cd:48:ac:fc:a7:1c:39:2e: f7:96:5c:f8:30:f2:76:1b:09:da:79:77:3a:63:ae: f0:f7:5e:01:53:91:78:64:ea:6f:a6:41:b0:37:09: 59:91:c0:b4:95:a6:fa:81:bd:b7:d1:b8:5f:80:09: af:5d:e2:0f:9e:e4:52:c3:17:aa:fe:16:00:3e:88: c9:f2:2c:a5:ea:95:ab:20:72:bf:ce:f0:95:0e:a8: 1e:2b:fa:f2:5a:9e:34:ab:82:51:61:4e:df:d4:ee: e4:58:bc:bf:88:f3:d5:bf:bb:6d:a6:25:02:1b:76: 6d:c5:3f:bd:ad:af:bb:09:95:43:f2:e2:97:0c:44: a1:22:29:2c:0d:24:55:f4:40:71:08:8e:01:e6:21: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:B8:7C:E7:B9:76:62:64:23:80:40:6A:66:99:AA:C7:05:F6:C7 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9f:9e:a2:10:d4:12:57:32:38:30:67:e7:45:13:9b:78:ec: f9:90:50:a0:44:cb:62:1f:c7:07:a2:34:c7:3b:13:57:e3:2e: 94:50:4a:a9:af:29:72:29:97:f7:99:0f:37:cb:7a:1e:99:94: 51:77:9d:d0:bf:66:96:ca:38:9c:29:68:fe:30:b6:b8:23:65: b0:ab:81:d4:75:5a:b3:3d:fe:88:e4:34:a0:65:54:3c:a7:ec: 7a:49:42:a6:c8:fb:3c:33:42:a3:19:de:a6:a6:c4:fe:44:73: 47:23:21:b1:6a:c8:76:ef:f2:63:dc:75:dc:b6:2e:3d:2f:b9: 4d:5c:ec:f2:45:4c:75:ed:83:89:c3:fb:8b:8e:93:0d:b0:e7: 0b:49:5b:99:ad:e6:90:1a:a0:5a:d7:d6:81:80:b2:96:12:d6: 9a:9d:92:3b:e3:5f:e3:65:e6:ae:d9:cf:48:0c:2f:b4:e0:73: 50:1a:c1:73:18:b8:4e:f9:7b:46:de:1c:d7:3e:54:a0:85:67: c2:67:87:4e:9c:a1:94:df:3a:df:4a:c5:4e:2c:da:ec:8b:11: b1:18:1c:b6:6e:00:c0:65:97:41:03:38:56:98:9b:36:48:83: 34:97:37:06:63:4e:8e:77:79:aa:72:6d:7a:2b:b0:e5:80:1d: e9:5b:c4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adLdbswVJkbFtrHee9xYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwNDE3MDgwMDMzWhcNMjYwNDE4MDgwMDMzWjAzMTEwLwYDVQQD EygxNDc3Yjg3Y2U3Yjk3NjYyNjQyMzgwNDA2YTY2OTlhYWM3MDVmNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO/XVaRynkL63DZ9NVMEAfJasrAJ 3IYxgwhd8Ni2/HRTAfPbJPK2ncGKdDhufOG/C8pNIDSlM3lOGRAFvEpVKsOMVgGD cffbBeT8CrgjfxsWUybenHkudgfTXET1ZOi0jMd0fAl7ynSaI9RXaVmXzUis/Kcc OS73llz4MPJ2GwnaeXc6Y67w914BU5F4ZOpvpkGwNwlZkcC0lab6gb230bhfgAmv XeIPnuRSwxeq/hYAPojJ8iyl6pWrIHK/zvCVDqgeK/ryWp40q4JRYU7f1O7kWLy/ iPPVv7ttpiUCG3ZtxT+9ra+7CZVD8uKXDEShIiksDSRV9EBxCI4B5iH32wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR3uHznuXZiZCOAQGpmmarHBfbHMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ+eohDU ElcyODBn50UTm3js+ZBQoETLYh/HB6I0xzsTV+MulFBKqa8pcimX95kPN8t6HpmU UXed0L9mlso4nClo/jC2uCNlsKuB1HVasz3+iOQ0oGVUPKfseklCpsj7PDNCoxne pqbE/kRzRyMhsWrIdu/yY9x13LYuPS+5TVzs8kVMde2DicP7i46TDbDnC0lbma3m kBqgWtfWgYCylhLWmp2SO+Nf42XmrtnPSAwvtOBzUBrBcxi4Tvl7Rt4c1z5UoIVn wmeHTpyhlN8630rFTiza7IsRsRgctm4AwGWXQQM4VpibNkiDNJc3BmNOjnd5qnJt eiuw5YAd6VvErA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:24:35 2026 by rpki-client