$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: V+yMPto2rLhojy74EhUxCJMXlb7FY4Ziz5aZFjTvjvM= Subject key identifier: F4:DC:5B:8C:A0:AE:F8:A4:35:BC:FC:21:6F:A8:3B:00:37:F8:E7:BD Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019D9A0757F26E63A8FEA3E704BFEC60ACDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 114F Signing time: Fri 17 Apr 2026 06:01:05 +0000 Manifest this update: Fri 17 Apr 2026 06:01:05 +0000 Manifest next update: Sat 18 Apr 2026 06:01:05 +0000 Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: OprqQ3uavLOKxgsxclqnFDwHRTMXANaxZU7WguIYsNQ=) 7: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 8: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 9: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=) 10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 14: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (hash: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c=) 15: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 16: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:57:f2:6e:63:a8:fe:a3:e7:04:bf:ec:60:ac:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Apr 17 06:01:05 2026 GMT Not After : Apr 18 06:01:05 2026 GMT Subject: CN=f4dc5b8ca0aef8a435bcfc216fa83b0037f8e7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:1b:b9:6c:3b:f1:07:ab:76:70:56:8e:63: 4b:86:d9:cc:e0:17:3e:0a:1e:06:21:d2:43:4c:3e: b0:d2:c5:08:11:6b:63:c3:38:eb:2d:27:88:2c:e5: 02:e5:77:66:d5:c3:dd:65:a1:03:36:9c:8e:37:2d: 73:14:9a:67:f1:a9:46:cc:38:32:ee:2c:57:88:b3: e5:67:ff:f5:bd:39:fa:3f:d1:dd:e7:0d:77:c0:8c: 62:30:89:e0:69:cc:a3:53:73:ea:92:9b:47:58:74: 76:53:9a:0e:30:34:ea:0a:fe:b2:81:35:c1:9e:e8: 30:df:29:5c:ff:81:29:de:8e:92:1f:0f:94:77:f4: 1a:6a:36:fa:bc:3e:7e:3e:61:27:cd:a2:f6:9a:91: e7:2b:90:21:4a:43:c7:bd:56:a9:ff:a0:1b:35:2d: 31:7a:15:de:22:86:2e:29:55:db:3f:c9:f2:4c:29: fe:16:e6:f7:04:17:17:1c:d3:e4:5a:2b:79:7a:4e: 99:1e:c9:c1:d6:8b:76:d5:85:0b:cb:ab:5b:42:fb: aa:95:f9:f5:c6:7c:21:84:92:c0:c5:eb:61:f4:ae: c1:ce:5a:b9:59:51:84:04:b9:9b:0a:14:a9:d0:ea: f6:75:ce:db:a4:ab:12:96:72:11:40:24:2b:7b:ef: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DC:5B:8C:A0:AE:F8:A4:35:BC:FC:21:6F:A8:3B:00:37:F8:E7:BD X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:8f:4c:41:84:3f:c7:5c:c0:f9:27:90:1d:3d:0e:7b:1d:f2: 48:fa:88:c1:73:e2:c5:30:90:cf:a0:86:70:1a:8c:75:1d:3f: 9e:9f:c5:c9:54:09:b9:38:58:b8:4b:f9:f6:39:ef:df:c1:1d: 50:f3:30:26:28:77:46:91:af:9a:fa:35:53:01:6a:9a:67:0b: 36:ba:b4:d1:c6:a0:7c:27:ab:98:29:73:69:37:1a:b5:4e:e3: 6f:cb:c9:21:33:49:37:db:21:26:4f:66:36:8e:26:79:99:86: 49:47:5e:f7:9f:d7:ef:ac:e7:f6:26:8f:c3:ed:93:13:14:7d: 17:02:56:b4:3b:a1:3c:6a:66:54:f4:23:ae:bd:e6:b6:4d:a3: 87:ce:53:02:c1:e5:99:d8:6b:16:64:d3:74:12:a5:91:e6:bf: 33:41:98:5a:5e:1f:7f:a2:7e:6c:3f:c2:ac:f3:87:a5:7d:a6: 2e:26:16:fb:13:b5:96:87:2c:2d:22:9b:76:97:c8:a2:fc:cc: 2c:a7:0f:ac:ea:3b:69:59:95:00:3b:44:b8:39:d6:d2:01:d5: f7:5c:87:cb:51:75:9b:6c:9b:32:f7:a4:26:73:5e:ca:81:80: 46:40:24:01:47:2f:c7:fa:69:84:38:2b:c6:b3:f3:84:2e:de: 32:14:2a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aB1fybmOo/qPnBL/sYKzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwNDE3MDYwMTA1WhcNMjYwNDE4MDYwMTA1WjAzMTEwLwYDVQQD EyhmNGRjNWI4Y2EwYWVmOGE0MzViY2ZjMjE2ZmE4M2IwMDM3ZjhlN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA148buWw78QerdnBWjmNLhtnM4Bc+ Ch4GIdJDTD6w0sUIEWtjwzjrLSeILOUC5Xdm1cPdZaEDNpyONy1zFJpn8alGzDgy 7ixXiLPlZ//1vTn6P9Hd5w13wIxiMIngacyjU3PqkptHWHR2U5oOMDTqCv6ygTXB nugw3ylc/4Ep3o6SHw+Ud/Qaajb6vD5+PmEnzaL2mpHnK5AhSkPHvVap/6AbNS0x ehXeIoYuKVXbP8nyTCn+Fub3BBcXHNPkWit5ek6ZHsnB1ot21YULy6tbQvuqlfn1 xnwhhJLAxeth9K7Bzlq5WVGEBLmbChSp0Or2dc7bpKsSlnIRQCQre+8RkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTcW4ygrvikNbz8IW+oOwA3+Oe9MB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwY9MQYQ/ x1zA+SeQHT0Oex3ySPqIwXPixTCQz6CGcBqMdR0/np/FyVQJuThYuEv59jnv38Ed UPMwJih3RpGvmvo1UwFqmmcLNrq00cagfCermClzaTcatU7jb8vJITNJN9shJk9m No4meZmGSUde95/X76zn9iaPw+2TExR9FwJWtDuhPGpmVPQjrr3mtk2jh85TAsHl mdhrFmTTdBKlkea/M0GYWl4ff6J+bD/CrPOHpX2mLiYW+xO1locsLSKbdpfIovzM LKcPrOo7aVmVADtEuDnW0gHV91yHy1F1m2ybMvekJnNeyoGARkAkAUcvx/pphDgr xrPzhC7eMhQqLQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:07 2026 by rpki-client