$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: SoRH6/Kxeo010Y4rGz7IkqCLLhkd/hrMcwTLCpwtG9g= Subject key identifier: 3F:AA:82:D4:2B:DD:3B:63:A3:19:7C:97:59:82:90:F0:28:E4:55:4D Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019FAA19718516D72EF939A7D2DBC3E26D33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 1A9A Signing time: Tue 28 Jul 2026 19:00:21 +0000 Manifest this update: Tue 28 Jul 2026 19:00:21 +0000 Manifest next update: Wed 29 Jul 2026 19:00:21 +0000 Files and hashes: 1: 5yZRraURZiKqlnX05fjyNx52w8o.roa (hash: +Z9OtbAB80W8dUmluQL2ejT5e57YATp7trdLCUv5PPc=) 2: F8c1izE-9RJV-qYbebPoSy0OO04.roa (hash: R4SfTxNG21QdwRjkrLqrgaOvhx8zK8zawB+KroMpRRM=) 3: GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa (hash: 0OdnNDd1VjIe91ip/f2oXTplzO+hZMDitnnCMaCZMcM=) 4: KHKpEj2THKj58bA0t2ta3IDNpvE.roa (hash: Pq1zZUJA84ZOxc7RlsG24SrZSENVQ5pv+oFLBtS7LdY=) 5: LrE5kuPxn2OtXj9y4fo3BBBJmPg.roa (hash: Gs3AunGylHB59F42LYhpjb1I/VnyDGsD26/q43JcIi0=) 6: Xp1cuH5GckRebQbl04bBVOXl9c0.roa (hash: G9DoetqG3+uFPEjScRTeA6vdZfkVk+8JEJjCMtB7vJ4=) 7: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (hash: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0=) 8: kHJAbRZAn8BmDoNVsIR_1TrPdwU.roa (hash: MQR9UxJH6mrGqbSYbaZNH4TCjTvPKDgCy2uSCTLGIl4=) 9: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: Z0kg2fwq7E831ZeoJlBvQYmMxmwPM54fkI4dvHJDzyQ=) 10: oFjLnFx0PgjFBuwtiF_MYSFpqmA.roa (hash: VK+JXOgRMBfH6LlIiFROL5a7HEYqeypevfrTL4MJN2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:19:71:85:16:d7:2e:f9:39:a7:d2:db:c3:e2:6d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Jul 28 19:00:21 2026 GMT Not After : Jul 29 19:00:21 2026 GMT Subject: CN=3faa82d42bdd3b63a3197c97598290f028e4554d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:6f:80:74:5b:d7:14:0b:ae:08:ba:6f:c9: 41:9e:95:01:8b:68:31:87:36:14:a3:de:fc:7d:b3: d9:ee:31:47:fd:b4:c0:c9:94:6e:70:8b:8c:1c:d0: 78:2b:4d:80:94:af:8a:56:92:9d:bc:98:87:0e:4d: 5b:5c:85:82:4a:90:1f:e3:62:63:7f:7e:89:12:a1: d8:2d:ca:d9:cd:23:90:c1:44:e8:0f:f4:6f:62:c9: 2a:47:d3:4a:97:2b:3e:32:3c:18:97:4b:bf:a2:db: a2:01:b6:62:0d:29:7d:61:d7:23:dd:8b:6a:c5:f1: 1f:b4:40:93:3e:3e:1c:7b:d0:c7:b5:c1:22:d0:b4: 7e:e6:8a:69:8d:a7:be:70:79:b1:0b:1b:ef:f4:6c: 03:61:43:9a:78:c7:b5:73:63:22:2c:db:1e:12:00: 26:10:4e:8b:06:c1:11:9f:fb:75:2c:26:85:d7:18: f5:10:6b:0c:9a:35:f4:a7:76:39:30:89:73:fc:dd: 85:f5:ad:f9:60:0c:9d:1e:b2:b5:8f:6c:1e:3c:60: ae:18:8e:c8:0f:1e:66:75:3d:71:c5:99:18:c9:04: aa:82:14:c1:01:20:40:2f:53:b1:0a:4c:7b:89:49: f5:f2:c6:fb:9d:82:44:b2:cc:9c:71:b9:e7:70:8c: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AA:82:D4:2B:DD:3B:63:A3:19:7C:97:59:82:90:F0:28:E4:55:4D X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1d:6c:a7:3e:b8:41:21:6b:f8:6d:89:46:98:86:45:99:76: 0f:0a:7a:14:d4:c3:8c:e0:e2:6f:25:1f:33:0f:5a:8f:e4:21: 7b:3a:92:c7:0a:aa:b2:89:a0:90:b7:05:ff:29:f0:61:3e:c6: 85:33:b1:c7:1f:c7:29:49:2c:67:69:4e:53:60:12:f8:36:ea: d7:dc:90:7e:f8:be:ea:fe:16:d1:fc:25:a5:73:30:95:3f:87: 11:0f:db:d2:c0:a2:c4:91:d9:7e:fd:45:25:26:a1:6c:2a:4a: ed:d6:ec:7c:0d:a5:c1:7e:1c:44:de:35:36:50:44:da:4a:19: 56:e2:4a:2a:aa:88:1e:8a:ef:fd:78:1f:bd:1d:8f:12:26:ea: f8:c3:14:e1:d8:3c:0c:84:f1:d8:d0:7f:ea:ef:28:4d:8a:ef: 15:0c:61:b6:2c:c2:3f:86:69:63:98:9a:1e:6c:45:94:69:d9: 04:b4:0b:f9:b6:c3:dc:28:d3:3c:89:46:6d:ce:f0:bd:69:a7: 04:91:22:47:a2:9f:99:92:0f:1a:8e:b0:51:63:f5:1c:ce:75: d0:79:97:6f:85:e9:11:c8:38:04:40:3e:54:4c:fd:75:0f:ab: 4c:3e:12:99:ce:38:71:fc:f9:3a:b3:83:d9:6f:0c:e7:28:a2: 77:d5:2e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGXGFFtcu+Tmn0tvD4m0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwNzI4MTkwMDIxWhcNMjYwNzI5MTkwMDIxWjAzMTEwLwYDVQQD EygzZmFhODJkNDJiZGQzYjYzYTMxOTdjOTc1OTgyOTBmMDI4ZTQ1NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFNvgHRb1xQLrgi6b8lBnpUBi2gx hzYUo978fbPZ7jFH/bTAyZRucIuMHNB4K02AlK+KVpKdvJiHDk1bXIWCSpAf42Jj f36JEqHYLcrZzSOQwUToD/RvYskqR9NKlys+MjwYl0u/otuiAbZiDSl9Ydcj3Ytq xfEftECTPj4ce9DHtcEi0LR+5oppjae+cHmxCxvv9GwDYUOaeMe1c2MiLNseEgAm EE6LBsERn/t1LCaF1xj1EGsMmjX0p3Y5MIlz/N2F9a35YAydHrK1j2wePGCuGI7I Dx5mdT1xxZkYyQSqghTBASBAL1OxCkx7iUn18sb7nYJEssyccbnncIzFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+qgtQr3Ttjoxl8l1mCkPAo5FVNMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB1spz64 QSFr+G2JRpiGRZl2Dwp6FNTDjODibyUfMw9aj+QhezqSxwqqsomgkLcF/ynwYT7G hTOxxx/HKUksZ2lOU2AS+Dbq19yQfvi+6v4W0fwlpXMwlT+HEQ/b0sCixJHZfv1F JSahbCpK7dbsfA2lwX4cRN41NlBE2koZVuJKKqqIHorv/XgfvR2PEibq+MMU4dg8 DITx2NB/6u8oTYrvFQxhtizCP4ZpY5iaHmxFlGnZBLQL+bbD3CjTPIlGbc7wvWmn BJEiR6KfmZIPGo6wUWP1HM510HmXb4XpEcg4BEA+VEz9dQ+rTD4Smc44cfz5OrOD 2W8M5yiid9Uu0Q== -----END CERTIFICATE-----Generated at Wed Jul 29 05:26:31 2026 by rpki-client