$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: CgbOBe0y4d53sqMhreOoFOeDD42gISrSpA/CPPpffeQ= Subject key identifier: 83:3E:61:01:C6:C0:FE:17:38:42:67:85:C9:C0:FD:95:08:E8:31:74 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019CAB33F7082F1348915AC0BF2C3ABE2ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 093D Signing time: Sun 01 Mar 2026 21:00:35 +0000 Manifest this update: Sun 01 Mar 2026 21:00:35 +0000 Manifest next update: Mon 02 Mar 2026 21:00:35 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: 7p6dd7n2c_iahQHtUgZQiIIJrtQ.roa (hash: XRHiyUNGvTwvAeaPPS/YuesfKfNsucxDCcsj9pUMxso=) 6: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (hash: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg=) 7: I4zIwg88wRBtEseWHwzpqVUk1iA.roa (hash: i5m12+c85OUVnO7uvGnUf7jsGeUS93zAEO3xZ1OhT8E=) 8: Ljz0YqAl4apWJMxAUgKBsFnQJaE.roa (hash: GUPbQPDC9wNuXEfadb1ttXVKajWPMc9cbCuQfVhp8gw=) 9: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 10: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: 11EWElzKxWHBJX1LlhbV5T20ljWEaxDiCxa+yJkYPq4=) 12: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:33:f7:08:2f:13:48:91:5a:c0:bf:2c:3a:be:2e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Mar 1 21:00:35 2026 GMT Not After : Mar 2 21:00:35 2026 GMT Subject: CN=833e6101c6c0fe1738426785c9c0fd9508e83174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:8b:df:1d:dd:ad:92:7d:35:fc:89:38:72: 4e:8e:02:66:94:5d:cf:e0:93:c7:20:66:2d:b4:28: 84:5e:92:f2:dc:55:73:7e:3c:1b:74:2f:51:46:26: 93:67:a0:e7:32:6f:75:87:71:61:66:93:0d:fb:63: 59:a7:87:32:d9:a4:5c:97:63:4f:b4:42:7d:81:8e: 26:99:ee:89:69:2a:95:ce:65:2b:c8:5f:2b:7f:97: f5:6b:ba:60:74:40:15:b3:7a:e8:3e:80:e8:93:af: 51:5a:32:22:19:39:af:92:45:a1:8a:7e:ab:82:e4: 27:8e:a7:65:29:c9:f7:ff:a1:22:b9:1a:c0:95:da: e4:9a:97:93:bc:d0:d3:a3:7e:8b:93:31:2d:d4:86: c9:63:78:6d:73:db:3d:03:f7:47:83:d3:c6:98:b2: 4f:b8:15:f8:7b:23:22:2b:6b:31:39:47:24:b4:da: 75:c7:39:7e:43:c7:c3:e0:05:b1:aa:12:10:9a:bf: af:fc:6d:79:91:3f:02:30:41:4a:fa:02:75:4d:96: 43:4e:81:80:fb:37:33:3a:0e:13:f1:44:35:37:2d: 47:fc:ed:d2:b7:d7:6a:fb:c1:f1:e9:33:40:c0:42: e6:d9:8b:b2:09:12:21:f8:a0:f5:b4:13:6c:d7:c4: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:61:01:C6:C0:FE:17:38:42:67:85:C9:C0:FD:95:08:E8:31:74 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f7:ea:7d:f3:eb:ba:69:29:3e:75:74:2f:0f:1d:7b:58:d2: de:11:f9:ae:61:5a:c6:ee:5b:ac:78:79:8c:f4:62:8a:bc:94: ee:35:02:a3:dd:64:76:80:e3:0e:8c:21:07:b1:c4:af:4c:15: 4a:76:f5:71:0f:e3:47:70:81:50:d9:56:fb:94:0d:76:83:77: fe:93:a2:c2:b7:bd:17:0b:8f:02:a4:13:b0:f9:42:b6:99:8f: fa:dd:66:8f:49:57:e9:7d:cf:8b:bf:d0:91:54:d1:4a:bd:8c: 25:84:b3:ab:62:ae:18:bf:4a:aa:ba:bc:95:a7:4a:54:bd:26: 1e:b5:5f:22:f0:40:8f:63:cd:99:48:cc:92:c3:a1:cd:5e:ac: 07:14:d0:47:9a:59:e3:89:50:51:3c:5f:aa:3e:fa:07:c5:49: d0:4d:64:4b:f0:56:2d:19:98:8d:84:c8:b2:55:90:c1:43:f4: 99:b1:01:6f:04:d4:97:8b:0a:30:df:32:1f:a5:be:af:59:fd: 24:59:f5:59:9f:ba:f5:0c:42:e4:42:12:32:47:84:30:57:18: fc:45:06:87:ec:f4:34:9c:b5:71:db:92:42:45:70:6d:96:dc: 8a:ec:62:a1:8c:9d:c2:09:c6:58:2f:e7:9c:2c:cd:d9:42:03: 33:65:66:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrM/cILxNIkVrAvyw6vi7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMzAxMjEwMDM1WhcNMjYwMzAyMjEwMDM1WjAzMTEwLwYDVQQD Eyg4MzNlNjEwMWM2YzBmZTE3Mzg0MjY3ODVjOWMwZmQ5NTA4ZTgzMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4OL3x3drZJ9NfyJOHJOjgJmlF3P 4JPHIGYttCiEXpLy3FVzfjwbdC9RRiaTZ6DnMm91h3FhZpMN+2NZp4cy2aRcl2NP tEJ9gY4mme6JaSqVzmUryF8rf5f1a7pgdEAVs3roPoDok69RWjIiGTmvkkWhin6r guQnjqdlKcn3/6EiuRrAldrkmpeTvNDTo36LkzEt1IbJY3htc9s9A/dHg9PGmLJP uBX4eyMiK2sxOUcktNp1xzl+Q8fD4AWxqhIQmr+v/G15kT8CMEFK+gJ1TZZDToGA +zczOg4T8UQ1Ny1H/O3St9dq+8Hx6TNAwELm2YuyCRIh+KD1tBNs18QjOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM+YQHGwP4XOEJnhcnA/ZUI6DF0MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgffqffPr umkpPnV0Lw8de1jS3hH5rmFaxu5brHh5jPRiiryU7jUCo91kdoDjDowhB7HEr0wV Snb1cQ/jR3CBUNlW+5QNdoN3/pOiwre9FwuPAqQTsPlCtpmP+t1mj0lX6X3Pi7/Q kVTRSr2MJYSzq2KuGL9Kqrq8ladKVL0mHrVfIvBAj2PNmUjMksOhzV6sBxTQR5pZ 44lQUTxfqj76B8VJ0E1kS/BWLRmYjYTIslWQwUP0mbEBbwTUl4sKMN8yH6W+r1n9 JFn1WZ+69QxC5EISMkeEMFcY/EUGh+z0NJy1cduSQkVwbZbciuxioYydwgnGWC/n nCzN2UIDM2VmpA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:52:03 2026 by rpki-client