$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: 15WsROhiA9xtjQIB3DBUntMvGyfQQxT5wZ2a+rFQVv0= Subject key identifier: 40:73:77:0C:89:FD:95:60:41:E3:0F:25:F9:88:B3:D8:A4:5E:9F:0B Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019CA945EF6D9BAD1EBCC2C5A7197D70C531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 10D1 Signing time: Sun 01 Mar 2026 12:00:58 +0000 Manifest this update: Sun 01 Mar 2026 12:00:58 +0000 Manifest next update: Mon 02 Mar 2026 12:00:58 +0000 Files and hashes: 1: 0T1AgadQnTT1ndiweRyvS_vkm-A.roa (hash: /3Ju2hidnDzh8I33GDIaLYQdRHbtjqqOqVBYvQZmXDw=) 2: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 3: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 4: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 5: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 6: J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa (hash: PrA2PJs5TSn3H+asdA2g/RA7lWRRSyMMok+HJEOvi0U=) 7: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: jrDt7XVgj/ubwKi7rRZ8XAn+r0hFolINsNZvpXqop3Y=) 8: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 9: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 14: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (hash: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c=) 15: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 16: gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa (hash: 0rFeNQFoSCuvCIBm913ksBYysYgLDykpUQhP0c/QksE=) 17: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) 18: ybGOVfya0JJH14IWQC-d-Y3nVIw.roa (hash: t0pVqgHknRDwOdfYkcVxATIE3U9MoB5xTK9HaX4a6b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:45:ef:6d:9b:ad:1e:bc:c2:c5:a7:19:7d:70:c5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Mar 1 12:00:58 2026 GMT Not After : Mar 2 12:00:58 2026 GMT Subject: CN=4073770c89fd956041e30f25f988b3d8a45e9f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:a2:e6:06:e4:b7:98:92:60:fd:fa:5f:b0: 9c:85:7f:cf:36:04:5c:a5:1a:ab:34:60:7f:1f:02: 7a:a6:e2:8c:1e:f0:80:e9:7b:96:6a:1a:6c:a9:be: a7:9e:32:c2:8f:34:db:4b:b5:21:5c:0c:bf:a5:9c: 51:4e:54:aa:58:92:c3:78:6d:e9:27:b3:02:cf:7d: 1f:74:0e:4c:ec:06:bc:ec:17:54:91:f5:9d:d3:91: 4f:ec:fc:5b:74:3b:69:10:f8:12:fc:a2:e1:e2:58: e5:fd:9e:48:3c:8f:91:73:af:6b:3d:36:ab:4d:f6: 19:61:45:be:5a:6b:4e:df:b7:84:c9:ad:24:34:a8: 80:40:80:a5:12:0f:ea:69:05:00:07:93:88:1c:96: 9e:e5:c6:2e:18:5a:0d:50:f3:2c:de:9f:9f:55:9a: 46:ec:0b:2d:01:76:63:65:1d:62:21:ae:23:d7:8b: 96:79:39:fb:35:7a:0d:29:58:97:d1:0b:62:50:06: bc:ef:a9:4e:25:ea:72:4e:a5:56:99:1b:dc:be:7c: 7b:ad:03:81:7b:26:2f:58:2d:02:0a:61:fa:d5:a1: 00:fb:49:c7:68:d2:39:b8:35:a7:3d:55:7d:77:46: 52:b9:0a:24:12:93:06:e6:b9:82:22:10:f9:b9:d4: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:73:77:0C:89:FD:95:60:41:E3:0F:25:F9:88:B3:D8:A4:5E:9F:0B X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1d:d3:14:0f:32:70:94:67:f8:cf:d4:54:6f:36:4a:84:5b: 68:c4:f3:f1:a5:06:93:6c:24:77:de:9f:da:a0:58:d6:bb:f7: 01:2b:5f:a5:20:63:43:b5:46:57:ef:ff:8f:31:7c:3b:08:a1: 85:23:a3:31:82:b8:42:06:aa:05:6a:fe:f2:10:1d:68:d3:7b: 9c:f8:ed:96:28:77:a6:fc:1e:6b:65:74:2c:dc:4f:83:7f:bd: 87:52:8d:47:a4:73:d3:bc:74:30:ce:24:aa:0f:e4:57:f8:69: f2:c1:6e:4b:75:d5:c3:10:78:bb:e6:d3:9e:3d:e4:3f:09:3a: cf:f2:53:b3:eb:fe:2f:8d:5b:39:b4:2e:11:7f:e4:26:3c:60: 85:29:81:bc:39:1b:b5:9f:a7:a9:b5:2d:99:51:d5:33:d1:72: 67:07:60:e0:3c:ea:b7:89:2b:88:0a:e4:39:eb:68:6d:d6:23: 75:09:9c:e1:8a:08:07:5b:1f:45:b0:6e:c0:32:51:8d:39:ee: 77:7f:52:1f:60:f4:6e:bb:eb:52:86:cb:87:ce:02:0e:b6:64: fa:bd:a4:97:a1:89:ba:ec:90:07:3f:99:56:41:db:8c:bf:d0: a9:15:a0:b6:35:30:5a:42:40:ae:5b:18:de:18:c1:22:b8:e3: 8f:a6:87:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRe9tm60evMLFpxl9cMUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMzAxMTIwMDU4WhcNMjYwMzAyMTIwMDU4WjAzMTEwLwYDVQQD Eyg0MDczNzcwYzg5ZmQ5NTYwNDFlMzBmMjVmOTg4YjNkOGE0NWU5ZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm02i5gbkt5iSYP36X7CchX/PNgRc pRqrNGB/HwJ6puKMHvCA6XuWahpsqb6nnjLCjzTbS7UhXAy/pZxRTlSqWJLDeG3p J7MCz30fdA5M7Aa87BdUkfWd05FP7PxbdDtpEPgS/KLh4ljl/Z5IPI+Rc69rPTar TfYZYUW+WmtO37eEya0kNKiAQIClEg/qaQUAB5OIHJae5cYuGFoNUPMs3p+fVZpG 7AstAXZjZR1iIa4j14uWeTn7NXoNKViX0QtiUAa876lOJepyTqVWmRvcvnx7rQOB eyYvWC0CCmH61aEA+0nHaNI5uDWnPVV9d0ZSuQokEpMG5rmCIhD5udT1gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBzdwyJ/ZVgQeMPJfmIs9ikXp8LMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch3TFA8y cJRn+M/UVG82SoRbaMTz8aUGk2wkd96f2qBY1rv3AStfpSBjQ7VGV+//jzF8Owih hSOjMYK4QgaqBWr+8hAdaNN7nPjtlih3pvwea2V0LNxPg3+9h1KNR6Rz07x0MM4k qg/kV/hp8sFuS3XVwxB4u+bTnj3kPwk6z/JTs+v+L41bObQuEX/kJjxghSmBvDkb tZ+nqbUtmVHVM9FyZwdg4Dzqt4kriArkOetobdYjdQmc4YoIB1sfRbBuwDJRjTnu d39SH2D0brvrUobLh84CDrZk+r2kl6GJuuyQBz+ZVkHbjL/QqRWgtjUwWkJArlsY 3hjBIrjjj6aH7w== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:38 2026 by rpki-client