$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: JQMYvgDo5jZHnq/JRMh5ILjImyPTNIK75iQ4JrgzGio= Subject key identifier: D4:CF:F4:F2:F1:61:2C:25:AE:0C:76:8F:72:55:E9:D5:A6:E5:7E:21 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019FA97514BC7B4DCC24358C0D8FFD6E2422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 1262 Signing time: Tue 28 Jul 2026 16:00:50 +0000 Manifest this update: Tue 28 Jul 2026 16:00:50 +0000 Manifest next update: Wed 29 Jul 2026 16:00:50 +0000 Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: XuZC8oHpWI1TBjku50tiBAFjUxk5kC3ISDf/kUPa1Zc=) 7: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 8: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 9: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=) 10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 14: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 15: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) 16: nynFadiKhVTTAb1VPU3Cmie2xF0.roa (hash: 3QJ9XmE3XhfqpSOZbO8CGD3RHkFQ2Ty7eUnID8LQjBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:14:bc:7b:4d:cc:24:35:8c:0d:8f:fd:6e:24:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jul 28 16:00:50 2026 GMT Not After : Jul 29 16:00:50 2026 GMT Subject: CN=d4cff4f2f1612c25ae0c768f7255e9d5a6e57e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:f0:65:31:ed:66:45:ed:b0:fb:5e:e0:bf: 67:8f:c0:91:3d:22:9c:06:87:f7:41:36:ed:0d:0d: 59:ec:17:67:24:1a:83:9f:8e:4e:b1:c4:59:ae:94: 9a:9a:cf:f0:99:25:60:f0:ec:05:01:a3:8e:c2:e4: 97:25:7e:bc:e3:8d:9f:ed:31:bd:34:f8:2a:cd:c4: e1:9c:26:fb:73:23:a8:97:aa:5f:7c:ae:a6:f0:fb: 8d:de:b1:5d:fe:f5:31:26:0f:34:90:26:3f:fb:da: 39:6c:37:e1:a9:e3:00:a6:a9:b9:22:42:7d:fa:ed: 28:02:b1:e7:74:07:d6:dc:57:f5:41:92:3a:e3:3d: 48:76:d3:4f:e3:a0:6b:f7:62:9d:df:d0:90:8c:e9: be:83:a5:d7:c7:94:e8:09:14:0a:d6:8c:27:57:06: 9f:d6:94:9d:ef:31:c2:ca:e0:ba:0f:6a:90:5f:f9: 12:5e:6b:55:84:57:9b:77:1d:a2:cf:ed:75:d0:fe: c9:98:1e:1f:21:4d:61:05:43:ec:b0:2e:0f:4d:98: 8b:e3:58:62:3f:18:06:a5:00:a6:cb:90:b1:52:e6: 3c:bc:07:b7:da:2d:6c:a5:3f:02:f2:56:da:b2:3c: 1e:be:f2:15:20:81:fa:f4:28:5c:da:05:dd:ba:7e: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:F4:F2:F1:61:2C:25:AE:0C:76:8F:72:55:E9:D5:A6:E5:7E:21 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:29:d5:55:b7:c6:c4:b2:58:c0:eb:93:1d:61:a0:18:47:7f: 37:ef:b7:d1:26:63:f7:70:50:7f:68:7a:ff:4d:08:c0:69:d3: a6:b2:dc:a6:dd:5a:23:1d:12:84:48:f7:c7:66:d8:27:55:ae: c0:1d:54:d8:37:5b:75:fb:02:21:a5:00:f0:30:de:ed:1a:b3: c2:e5:6d:69:33:ef:df:ed:9d:34:af:a6:72:81:ac:6b:fd:e8: 20:cc:28:72:45:87:97:59:28:d0:c9:93:4f:3d:2b:1b:34:25: 43:4b:da:c0:d9:7a:93:5c:e3:ff:6e:1b:e5:de:b7:97:fa:8c: 2a:52:07:7b:28:af:8c:50:eb:ed:68:de:29:3a:d6:97:34:89: d2:15:79:5e:bf:7f:bc:b2:c5:22:92:6f:b7:d1:8b:9b:e5:cd: bc:a8:ec:8e:56:01:6d:e8:b1:1b:64:6c:0d:6e:d0:c8:f9:71: 2f:a2:b1:de:4b:b8:46:b4:d4:c3:79:82:ea:82:4c:f0:54:19: 87:52:5c:ea:d8:22:19:95:81:95:bc:2d:92:0a:14:0f:55:80: 24:cc:61:10:cb:fc:fd:f2:67:59:07:c9:8c:3a:14:d8:44:b8: 79:5b:ab:29:ee:ae:dd:75:f4:58:c2:a5:d1:ed:c8:75:c9:a6: f5:e2:db:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdRS8e03MJDWMDY/9biQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwNzI4MTYwMDUwWhcNMjYwNzI5MTYwMDUwWjAzMTEwLwYDVQQD EyhkNGNmZjRmMmYxNjEyYzI1YWUwYzc2OGY3MjU1ZTlkNWE2ZTU3ZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxDwZTHtZkXtsPte4L9nj8CRPSKc Bof3QTbtDQ1Z7BdnJBqDn45OscRZrpSams/wmSVg8OwFAaOOwuSXJX68442f7TG9 NPgqzcThnCb7cyOol6pffK6m8PuN3rFd/vUxJg80kCY/+9o5bDfhqeMApqm5IkJ9 +u0oArHndAfW3Ff1QZI64z1IdtNP46Br92Kd39CQjOm+g6XXx5ToCRQK1ownVwaf 1pSd7zHCyuC6D2qQX/kSXmtVhFebdx2iz+110P7JmB4fIU1hBUPssC4PTZiL41hi PxgGpQCmy5CxUuY8vAe32i1spT8C8lbasjwevvIVIIH69Chc2gXdun66gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTP9PLxYSwlrgx2j3JV6dWm5X4hMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASynVVbfG xLJYwOuTHWGgGEd/N++30SZj93BQf2h6/00IwGnTprLcpt1aIx0ShEj3x2bYJ1Wu wB1U2DdbdfsCIaUA8DDe7RqzwuVtaTPv3+2dNK+mcoGsa/3oIMwockWHl1ko0MmT Tz0rGzQlQ0vawNl6k1zj/24b5d63l/qMKlIHeyivjFDr7WjeKTrWlzSJ0hV5Xr9/ vLLFIpJvt9GLm+XNvKjsjlYBbeixG2RsDW7QyPlxL6Kx3ku4RrTUw3mC6oJM8FQZ h1Jc6tgiGZWBlbwtkgoUD1WAJMxhEMv8/fJnWQfJjDoU2ES4eVurKe6u3XX0WMKl 0e3Idcmm9eLbQw== -----END CERTIFICATE-----Generated at Wed Jul 29 01:16:12 2026 by rpki-client