$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: P05n0K/u+SgHvUv+UOdOHwI1UFGfDD7jhoU8Ds1noc8= Subject key identifier: 26:52:7E:39:60:2E:80:05:D6:CD:BB:D0:89:4C:95:9D:95:07:92:50 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019D9BF597BEAFEB5FA59B85975D7F268C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 1150 Signing time: Fri 17 Apr 2026 15:00:56 +0000 Manifest this update: Fri 17 Apr 2026 15:00:56 +0000 Manifest next update: Sat 18 Apr 2026 15:00:56 +0000 Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: 5eg/ql0SgnmybzU282kyvieM6z/NebknL5v+dSsdduI=) 7: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 8: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 9: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=) 10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 14: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (hash: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c=) 15: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 16: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:f5:97:be:af:eb:5f:a5:9b:85:97:5d:7f:26:8c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Apr 17 15:00:56 2026 GMT Not After : Apr 18 15:00:56 2026 GMT Subject: CN=26527e39602e8005d6cdbbd0894c959d95079250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:97:6e:59:61:26:41:c0:55:6f:fb:75:fe:98: 8c:d0:51:5c:ea:20:1f:ef:00:21:19:f5:c3:a1:63: 87:8b:ba:73:f6:85:dd:18:bb:eb:bb:c8:de:5e:2a: 5a:44:a9:19:c0:14:71:de:aa:bb:7d:e4:f5:0c:b3: 80:98:ab:df:a9:4e:f6:a1:cd:43:83:2b:3d:51:75: a6:64:43:84:ea:d3:43:13:87:0a:fd:90:b4:9f:2e: ba:03:2c:c8:4a:a3:7f:52:4e:13:35:54:94:71:bb: 67:58:8c:38:68:12:b8:e5:f1:9f:98:6b:31:c9:e0: 6f:62:1b:04:df:0b:95:80:ba:c1:07:36:d4:e0:c1: 38:79:a8:72:2f:ee:4e:b3:c7:26:f5:8f:e4:51:86: 5c:05:d3:ac:c7:5b:5b:7e:0e:a7:8b:eb:57:89:86: 3f:3e:65:b1:f2:68:50:a5:3a:c4:c9:d8:ca:48:41: d8:55:ae:f7:bf:69:3e:c6:7a:4e:d0:91:61:74:bb: 7e:16:2a:de:26:b0:fa:a3:93:11:38:f5:28:b0:7a: 0b:e9:08:d0:6d:9d:7f:86:66:b4:be:c4:b1:53:3b: bc:65:c6:b0:dd:56:95:6d:a4:17:94:c2:1e:3f:c8: 75:86:47:f5:77:4b:a5:5c:f5:f9:59:c9:8a:02:30: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:52:7E:39:60:2E:80:05:D6:CD:BB:D0:89:4C:95:9D:95:07:92:50 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b6:2f:a6:e9:c6:a4:16:07:12:22:62:30:5e:ee:10:96:69: 35:b4:74:6b:5f:c2:16:44:e3:40:58:e2:1d:d6:0c:23:77:7c: 93:ab:d2:0b:74:85:45:e6:ff:d0:1d:a4:32:43:fb:29:51:0c: 2f:dc:1d:f8:60:56:6e:27:0d:8f:51:88:f9:99:93:78:fb:b7: fa:2b:43:f0:cf:fd:28:47:81:e0:b0:ff:60:7a:4d:2b:fa:12: e1:75:4f:11:3f:85:50:e5:a5:92:36:e9:06:da:11:1b:ae:66: 1a:43:b2:d9:b7:65:8c:1c:3f:6b:87:e5:19:9f:9b:03:f1:48: e4:a6:91:34:ea:92:9a:bf:a2:cc:7b:ec:1d:d7:8c:91:08:82: 45:e1:02:ca:0a:d9:4e:cb:af:00:e6:24:de:56:bb:02:dd:cc: 79:7d:91:35:6d:2d:bd:ed:24:1a:bd:18:cb:8b:b7:0d:00:bc: 5c:77:42:3a:3a:f8:83:57:81:b0:64:66:ab:58:87:19:56:95: 11:79:89:b6:c8:8b:98:2e:6f:5e:97:3f:2e:14:ce:a1:a5:9d: 8d:ce:d6:ee:02:0b:45:49:c6:0b:56:9e:cd:b2:1e:5f:f5:66: f8:cb:f0:c3:ad:6b:8c:9c:45:42:8c:49:b5:be:31:f7:38:f6: 5a:7d:78:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b9Ze+r+tfpZuFl11/JowCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwNDE3MTUwMDU2WhcNMjYwNDE4MTUwMDU2WjAzMTEwLwYDVQQD EygyNjUyN2UzOTYwMmU4MDA1ZDZjZGJiZDA4OTRjOTU5ZDk1MDc5MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pduWWEmQcBVb/t1/piM0FFc6iAf 7wAhGfXDoWOHi7pz9oXdGLvru8jeXipaRKkZwBRx3qq7feT1DLOAmKvfqU72oc1D gys9UXWmZEOE6tNDE4cK/ZC0ny66AyzISqN/Uk4TNVSUcbtnWIw4aBK45fGfmGsx yeBvYhsE3wuVgLrBBzbU4ME4eahyL+5Os8cm9Y/kUYZcBdOsx1tbfg6ni+tXiYY/ PmWx8mhQpTrEydjKSEHYVa73v2k+xnpO0JFhdLt+FireJrD6o5MROPUosHoL6QjQ bZ1/hma0vsSxUzu8Zcaw3VaVbaQXlMIeP8h1hkf1d0ulXPX5WcmKAjAvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZSfjlgLoAF1s270IlMlZ2VB5JQMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrYvpunG pBYHEiJiMF7uEJZpNbR0a1/CFkTjQFjiHdYMI3d8k6vSC3SFReb/0B2kMkP7KVEM L9wd+GBWbicNj1GI+ZmTePu3+itD8M/9KEeB4LD/YHpNK/oS4XVPET+FUOWlkjbp BtoRG65mGkOy2bdljBw/a4flGZ+bA/FI5KaRNOqSmr+izHvsHdeMkQiCReECygrZ TsuvAOYk3la7At3MeX2RNW0tve0kGr0Yy4u3DQC8XHdCOjr4g1eBsGRmq1iHGVaV EXmJtsiLmC5vXpc/LhTOoaWdjc7W7gILRUnGC1aezbIeX/Vm+Mvww61rjJxFQoxJ tb4x9zj2Wn14EQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:31 2026 by rpki-client