$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: nH8uBoFjYCUJXFVmUG33aodL8vQERCuhXOE7thbj5/w= Subject key identifier: 79:B6:9F:4D:82:7B:9B:A9:7B:B0:3B:98:83:E7:48:E9:D8:07:F7:37 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01A0BE1820E050507647BD1F5EB1C6B90E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0B6C Signing time: Sun 20 Sep 2026 09:14:07 +0000 Manifest this update: Sun 20 Sep 2026 09:14:07 +0000 Manifest next update: Mon 21 Sep 2026 09:14:07 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 3lbK4F5fivglEyKl2FWM_9NvfNY.roa (hash: UWESHxagGyGGQGm3Q0PG1AO6O8Mtb1KyECY0D7XYQm0=) 4: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (hash: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=) 5: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: S49hhmy4bOwqac16yOch8OZII60.roa (hash: Ip97DJR3nHAcsv9fMWbRUjBAkqDWdFOwd8aUSJDdJzM=) 9: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 10: Ww6I0-bFMkAzL3dUq8GFJz1Z4Xw.roa (hash: 7LXBch1nig/wJh6q/kWtYhq7i9O1hCn1Qc6Ofmdk2UQ=) 11: hJ67YINCOCNF7W6k24Xr2IHAh0M.roa (hash: Res6I9Apl5kT3tcbQh0grTsY7aCbi1+hDrSC4ffz3Yc=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: hkj8paaje+KuG7/vsiGUIlOUpMlpeRVLb3+aHmz9pmg=) 13: oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa (hash: CYKz7T4s6quVEcy44p9N3rA7vn+Am2lY+a9Hz6zcmtg=) 14: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (hash: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=) 15: s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa (hash: PX3/dss6fVnR1sM4prrLM9KGqiRqjaUHFQOQkts9Vkk=) 16: vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa (hash: lyyTQyUvfpVllBb+2yRmdAtUMHJ2bYtVjYxUF7Z8MNU=) 17: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 18: zdaO5pCjso7r8z8pVgSdFnBWBo8.roa (hash: g2bAlZpTBSFrnbDmE9GZ/X1CRpYTu/NW/NRQm0UK8VQ=) 19: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:18:20:e0:50:50:76:47:bd:1f:5e:b1:c6:b9:0e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Sep 20 09:14:07 2026 GMT Not After : Sep 21 09:14:07 2026 GMT Subject: CN=79b69f4d827b9ba97bb03b9883e748e9d807f737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:5f:06:0a:de:d8:c0:66:e4:bd:82:48:72: ba:97:c7:f5:23:bd:d4:05:e6:ce:a1:ed:90:2f:bd: 18:46:05:a8:61:d5:b0:5a:81:3e:97:81:18:24:33: 2f:97:1c:8b:99:b6:2f:d8:62:1d:1f:81:26:ce:d0: 58:c4:88:ae:4a:92:be:d9:5d:ef:b0:35:d6:64:14: 99:63:2c:f2:18:f6:e0:8e:c5:24:67:09:d1:c8:ab: 24:bb:0f:6e:ae:ac:ee:57:e9:ac:24:86:aa:77:69: 9f:a4:d1:3a:13:2e:52:34:dd:2f:7e:09:8d:79:aa: 28:bc:71:fe:a8:b8:02:eb:f4:f8:68:8a:5a:9c:78: 95:3b:a9:34:a7:a8:6b:fc:8f:d4:ea:2d:04:8d:a2: f1:78:91:ed:2d:94:05:e5:53:26:b6:b3:ab:1f:fa: 8d:f1:99:27:b0:00:ec:d2:91:e7:5e:ad:1a:2e:19: 7e:f5:bd:8f:c3:07:b9:5d:b1:20:8b:e9:35:7e:d7: 42:31:45:d1:bc:03:c9:68:ec:3f:a6:26:a7:a6:14: 4e:3e:cf:3b:8d:96:ef:fc:8b:d2:12:83:ef:81:6c: e3:81:df:7c:3b:e6:ae:2d:6d:2e:38:f2:f3:ae:78: 5f:36:8c:dc:92:95:e3:ce:56:1f:89:21:f2:28:e6: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B6:9F:4D:82:7B:9B:A9:7B:B0:3B:98:83:E7:48:E9:D8:07:F7:37 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d8:73:64:b3:df:48:bf:6b:51:2a:19:1a:60:ec:49:db:c8: d3:29:c8:f8:78:e1:b6:3a:28:4d:69:a6:63:86:c1:08:8e:73: 32:c6:c3:30:e0:34:16:62:be:de:a1:2b:f4:f8:8b:86:83:27: 7b:27:42:cb:f9:49:f0:68:92:a0:24:da:4f:30:17:e5:c9:26: 45:d0:a8:46:b1:c5:c3:a1:d3:8c:64:93:96:5b:06:a8:e4:56: 9e:1f:e3:43:0b:70:df:51:98:1a:13:6d:38:f9:6f:12:a7:ff: 1b:74:e7:2c:10:96:5d:5b:b5:f1:fd:aa:50:fa:c3:26:52:d5: df:e2:56:e4:5e:23:67:0b:09:33:f8:40:fd:00:f5:43:07:d1: 8c:31:df:51:98:23:b6:4c:40:78:04:0f:07:e4:c7:56:6c:6a: bd:f7:fc:2f:30:15:ff:f5:bb:37:db:e6:5f:6a:8e:e4:46:5b: 5e:fc:2f:9c:b5:91:8c:d2:91:f2:bb:8c:ba:3e:04:6a:72:b2: b6:3d:2b:04:96:7d:28:01:f3:b5:54:9b:11:be:c0:42:83:fa: 8a:a0:4c:73:33:bf:61:03:c4:e9:1a:2c:a6:0f:9d:98:9c:26: 22:4e:16:27:58:05:1c:77:5e:c4:62:fd:d3:20:51:83:b4:5c: c7:6c:18:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+GCDgUFB2R70fXrHGuQ4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwOTIwMDkxNDA3WhcNMjYwOTIxMDkxNDA3WjAzMTEwLwYDVQQD Eyg3OWI2OWY0ZDgyN2I5YmE5N2JiMDNiOTg4M2U3NDhlOWQ4MDdmNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yxfBgre2MBm5L2CSHK6l8f1I73U BebOoe2QL70YRgWoYdWwWoE+l4EYJDMvlxyLmbYv2GIdH4EmztBYxIiuSpK+2V3v sDXWZBSZYyzyGPbgjsUkZwnRyKskuw9urqzuV+msJIaqd2mfpNE6Ey5SNN0vfgmN eaoovHH+qLgC6/T4aIpanHiVO6k0p6hr/I/U6i0EjaLxeJHtLZQF5VMmtrOrH/qN 8ZknsADs0pHnXq0aLhl+9b2Pwwe5XbEgi+k1ftdCMUXRvAPJaOw/pianphROPs87 jZbv/IvSEoPvgWzjgd98O+auLW0uOPLzrnhfNozckpXjzlYfiSHyKOYYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm2n02Ce5upe7A7mIPnSOnYB/c3MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfthzZLPf SL9rUSoZGmDsSdvI0ynI+HjhtjooTWmmY4bBCI5zMsbDMOA0FmK+3qEr9PiLhoMn eydCy/lJ8GiSoCTaTzAX5ckmRdCoRrHFw6HTjGSTllsGqORWnh/jQwtw31GYGhNt OPlvEqf/G3TnLBCWXVu18f2qUPrDJlLV3+JW5F4jZwsJM/hA/QD1QwfRjDHfUZgj tkxAeAQPB+THVmxqvff8LzAV//W7N9vmX2qO5EZbXvwvnLWRjNKR8ruMuj4EanKy tj0rBJZ9KAHztVSbEb7AQoP6iqBMczO/YQPE6Rospg+dmJwmIk4WJ1gFHHdexGL9 0yBRg7Rcx2wYIA== -----END CERTIFICATE-----Generated at Sun Sep 20 18:06:06 2026 by rpki-client