$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: ZL0LqJKHEprJAl62Eixo01wSmulY4YCNv0WV7CLcdWI= Subject key identifier: 3D:6C:87:A8:75:61:B3:3E:95:55:BC:BA:F6:03:C9:6C:01:57:2F:F3 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019D992B7660B2C6DC3574CAF47C51B0B88B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 09BC Signing time: Fri 17 Apr 2026 02:00:55 +0000 Manifest this update: Fri 17 Apr 2026 02:00:55 +0000 Manifest next update: Sat 18 Apr 2026 02:00:55 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (hash: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg=) 6: IM5_eIuCChOU0hAdp1zJIv4yOMs.roa (hash: VA5/Mu9B9mqKC3R4eDVMT7aNe6I5GNd86uRr7j7Zj64=) 7: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 8: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 9: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 10: bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa (hash: oXiEsLmzNMIEZvn6zcV/UwZ/24olqpUKpuRIwHp2tTQ=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: YrI62d8XwPZ0eX8DjNz/ic3Hp4t62PrKvLZOqG0ewG8=) 12: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 13: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:76:60:b2:c6:dc:35:74:ca:f4:7c:51:b0:b8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Apr 17 02:00:55 2026 GMT Not After : Apr 18 02:00:55 2026 GMT Subject: CN=3d6c87a87561b33e9555bcbaf603c96c01572ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:18:ff:33:98:cd:70:68:6f:a2:fc:d6:a3: 92:33:2d:0a:b5:40:9b:4e:99:d4:ae:a8:89:9b:08: fc:c0:67:46:49:16:13:30:f7:3d:59:06:9f:85:2e: 02:8f:fe:15:f0:98:76:f8:f8:8c:b8:54:98:58:6d: fc:36:bc:9b:49:e1:d1:e8:b4:c2:4f:49:e1:5a:67: 1d:73:50:87:9b:83:45:74:b1:3d:7b:c7:93:18:12: 8d:61:a8:d4:7e:b6:df:25:1b:f2:15:db:1d:10:e8: 9b:56:ea:96:ee:89:55:33:73:83:4e:da:e4:d5:37: ec:3f:0d:f5:94:ef:7e:f7:44:ec:4a:f6:32:3d:f0: f1:53:a9:1b:a8:18:c3:b5:86:c4:7a:d7:83:bc:5c: 76:94:bb:09:c5:95:6c:ef:d2:74:48:3b:d4:c2:1c: 44:0f:49:e4:12:f8:86:2f:66:22:f7:a4:de:67:53: 92:6b:5d:d4:57:36:6f:c5:f3:89:7b:aa:86:aa:55: 54:8c:5c:de:3f:e7:6e:e0:19:4c:50:69:26:c7:ce: cf:d2:66:e3:10:5f:f6:0b:20:0b:91:d6:a3:54:85: 54:a7:e5:ff:de:bc:12:5c:59:ee:90:6a:ec:26:95: e3:05:a8:07:e8:7d:60:54:c7:c7:4d:4d:cd:44:7d: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:87:A8:75:61:B3:3E:95:55:BC:BA:F6:03:C9:6C:01:57:2F:F3 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:77:ad:16:f6:85:0d:f3:39:f9:e4:41:97:08:56:4e:91:ba: 46:a7:15:0a:fb:04:0e:4b:7d:e8:08:bd:66:34:35:45:19:e9: 41:39:dd:52:3e:42:98:77:15:8d:bf:78:53:be:d4:96:54:33: ea:62:ed:3b:67:62:47:72:dd:c8:69:a2:51:0a:1f:f1:7c:9c: 5a:80:6a:e4:51:26:de:c2:30:6b:8a:67:ac:eb:ef:b5:87:1c: 4a:0d:26:71:f8:8d:d8:b4:64:82:0c:a3:21:e4:24:3e:72:fa: 8a:e9:e3:ca:da:18:9a:5a:83:84:89:0f:3d:22:f3:e7:28:6f: ef:9c:3d:03:9a:b1:c9:6c:0d:51:71:e4:74:48:65:8f:4e:6e: db:0f:c6:f3:32:33:d9:bf:a2:a7:83:73:95:d7:2d:d6:39:d6: e8:58:0b:5e:51:ba:80:0d:b3:f6:fa:77:61:e3:1c:e9:c0:b8: 38:c3:26:b1:e1:14:16:3d:93:e7:81:dc:db:68:e9:0d:ba:9c: 61:d7:2a:4a:3e:47:2a:4f:d2:2c:07:d0:f2:a9:69:bd:83:34: 29:de:f5:7a:e7:8b:53:d4:e5:ad:4f:3e:6d:66:8b:e8:f9:f0: 85:b8:bb:43:69:72:00:da:1d:59:e8:df:ed:9a:ea:20:07:ad: 01:40:d7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK3ZgssbcNXTK9HxRsLiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNDE3MDIwMDU1WhcNMjYwNDE4MDIwMDU1WjAzMTEwLwYDVQQD EygzZDZjODdhODc1NjFiMzNlOTU1NWJjYmFmNjAzYzk2YzAxNTcyZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bUY/zOYzXBob6L81qOSMy0KtUCb TpnUrqiJmwj8wGdGSRYTMPc9WQafhS4Cj/4V8Jh2+PiMuFSYWG38NrybSeHR6LTC T0nhWmcdc1CHm4NFdLE9e8eTGBKNYajUfrbfJRvyFdsdEOibVuqW7olVM3ODTtrk 1TfsPw31lO9+90TsSvYyPfDxU6kbqBjDtYbEeteDvFx2lLsJxZVs79J0SDvUwhxE D0nkEviGL2Yi96TeZ1OSa13UVzZvxfOJe6qGqlVUjFzeP+du4BlMUGkmx87P0mbj EF/2CyALkdajVIVUp+X/3rwSXFnukGrsJpXjBagH6H1gVMfHTU3NRH0OmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1sh6h1YbM+lVW8uvYDyWwBVy/zMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXetFvaF DfM5+eRBlwhWTpG6RqcVCvsEDkt96Ai9ZjQ1RRnpQTndUj5CmHcVjb94U77UllQz 6mLtO2diR3LdyGmiUQof8XycWoBq5FEm3sIwa4pnrOvvtYccSg0mcfiN2LRkggyj IeQkPnL6iunjytoYmlqDhIkPPSLz5yhv75w9A5qxyWwNUXHkdEhlj05u2w/G8zIz 2b+ip4Nzldct1jnW6FgLXlG6gA2z9vp3YeMc6cC4OMMmseEUFj2T54Hc22jpDbqc YdcqSj5HKk/SLAfQ8qlpvYM0Kd71eueLU9TlrU8+bWaL6Pnwhbi7Q2lyANodWejf 7ZrqIAetAUDXjw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:34:38 2026 by rpki-client