$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: rwOlUkX0ZooMK2Dng35/7DTCvUH8l6Z+Wi3tFpoI3fY= Subject key identifier: 8F:37:BE:C0:AC:94:58:9A:7E:39:83:48:F4:67:DB:1E:3F:2D:64:08 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019FA97537D389126A0CF64D72703909BDD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0AD1 Signing time: Tue 28 Jul 2026 16:00:59 +0000 Manifest this update: Tue 28 Jul 2026 16:00:59 +0000 Manifest next update: Wed 29 Jul 2026 16:00:59 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (hash: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: JP2E_UJFi_eEzACBA8u2c0uDfb8.roa (hash: YGH1JcJafoyWgqhD6Mi4OsdAWnJ/Ak1uDrRgAPydk/s=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: Ty5DpdqPOmydyDg_bQAaBkoGLp8.roa (hash: akNfDUTh82avi6l8pVfNZIbM0Tw4axKISXdVg+zVbtA=) 9: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 10: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: GnXtavhsj1BgdWeTbdYjzXgFXQ85+pnZCaNAa6PotFQ=) 12: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (hash: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=) 13: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 14: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:37:d3:89:12:6a:0c:f6:4d:72:70:39:09:bd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jul 28 16:00:59 2026 GMT Not After : Jul 29 16:00:59 2026 GMT Subject: CN=8f37bec0ac94589a7e398348f467db1e3f2d6408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:ef:1c:cb:53:bd:47:d1:b7:95:5c:ff:b5: 6a:e1:18:2d:63:6b:5b:32:41:3f:c6:56:9f:a1:8d: a8:1d:fe:b6:c6:40:69:f4:9e:61:14:7c:1b:5f:33: 3c:eb:cb:11:de:7a:38:69:84:39:e6:13:26:9b:2f: 3b:78:f3:2d:2a:96:6d:4c:f7:c0:77:d7:82:ad:e2: f5:84:49:82:2f:63:42:b0:4f:4e:57:8d:34:1f:ca: 45:8b:56:58:f2:aa:22:2b:34:cf:78:2f:a1:bf:68: f2:b9:61:2c:bb:9f:8a:83:6e:9c:e5:35:3b:1e:e6: c3:48:01:47:3f:22:35:7e:99:cf:99:37:78:ed:72: 27:be:e4:d7:1f:d3:99:f7:1c:5a:c5:5f:24:44:47: 71:cc:1a:29:42:d9:a5:9e:b2:66:7a:e9:28:c2:97: e8:4d:1f:f7:01:08:5a:b8:14:31:fa:27:b3:cf:20: 23:1f:91:69:a9:d0:67:68:34:ef:1b:53:9f:2a:7a: e3:41:ec:01:5f:f3:79:2e:e4:85:47:f7:f2:7a:e7: 81:d6:6e:3c:fe:fb:4e:4e:a0:ec:17:74:61:be:8f: 56:a5:c7:1b:69:ea:58:72:35:66:9e:a9:24:3d:45: 05:62:f6:57:5d:fd:d7:d5:34:c8:f9:aa:78:95:fd: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:BE:C0:AC:94:58:9A:7E:39:83:48:F4:67:DB:1E:3F:2D:64:08 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:3d:1c:49:76:bc:d3:25:66:2b:74:34:bf:87:c2:5f:62: a7:2f:86:57:be:9e:07:cf:92:95:43:ea:03:19:7c:f9:7b:80: 4f:ef:c9:c9:e7:04:4b:8c:08:b3:ce:e5:6f:b5:66:d2:6b:07: 36:1a:2b:55:1b:05:ae:7d:6a:ad:48:ce:0e:af:4a:0e:7d:b1: 1f:ca:86:0a:7d:4c:0b:9c:18:b4:a3:ec:4d:d3:b8:eb:79:95: d0:1e:d0:0e:79:53:42:f6:44:3c:73:7b:bc:ee:62:23:99:03: 88:8b:a4:e3:51:e6:11:70:b0:55:83:c8:4e:2a:9c:67:06:91: 89:f1:fd:b5:6a:e1:43:8f:64:25:55:88:1f:0d:15:4e:06:31: 9e:43:64:31:58:71:bc:c0:e6:13:a9:67:d8:c6:da:8e:13:a4: a2:d6:c4:db:96:c4:e1:fd:40:20:f8:64:e5:0c:ca:79:4b:d9: 3e:a2:36:c1:cc:a7:4c:0b:29:c6:1e:31:73:db:20:a3:fc:84: ba:f2:6f:d0:0a:af:64:7f:1b:cd:8c:5c:46:23:7e:b5:8c:39: eb:ac:3c:02:c6:ff:80:72:8c:5c:45:86:1f:1e:02:e1:17:56: ea:60:8e:0c:2d:a6:9b:e5:93:8b:aa:81:5f:3d:a3:c1:44:52: f7:02:a9:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdTfTiRJqDPZNcnA5Cb3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNzI4MTYwMDU5WhcNMjYwNzI5MTYwMDU5WjAzMTEwLwYDVQQD Eyg4ZjM3YmVjMGFjOTQ1ODlhN2UzOTgzNDhmNDY3ZGIxZTNmMmQ2NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHDvHMtTvUfRt5Vc/7Vq4RgtY2tb MkE/xlafoY2oHf62xkBp9J5hFHwbXzM868sR3no4aYQ55hMmmy87ePMtKpZtTPfA d9eCreL1hEmCL2NCsE9OV400H8pFi1ZY8qoiKzTPeC+hv2jyuWEsu5+Kg26c5TU7 HubDSAFHPyI1fpnPmTd47XInvuTXH9OZ9xxaxV8kREdxzBopQtmlnrJmeukowpfo TR/3AQhauBQx+iezzyAjH5FpqdBnaDTvG1OfKnrjQewBX/N5LuSFR/fyeueB1m48 /vtOTqDsF3Rhvo9WpccbaepYcjVmnqkkPUUFYvZXXf3X1TTI+ap4lf0FUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI83vsCslFiafjmDSPRn2x4/LWQIMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyY9HEl2 vNMlZit0NL+Hwl9ipy+GV76eB8+SlUPqAxl8+XuAT+/JyecES4wIs87lb7Vm0msH NhorVRsFrn1qrUjODq9KDn2xH8qGCn1MC5wYtKPsTdO463mV0B7QDnlTQvZEPHN7 vO5iI5kDiIuk41HmEXCwVYPITiqcZwaRifH9tWrhQ49kJVWIHw0VTgYxnkNkMVhx vMDmE6ln2MbajhOkotbE25bE4f1AIPhk5QzKeUvZPqI2wcynTAspxh4xc9sgo/yE uvJv0AqvZH8bzYxcRiN+tYw566w8Asb/gHKMXEWGHx4C4RdW6mCODC2mm+WTi6qB Xz2jwURS9wKpBA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:28:36 2026 by rpki-client