$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: wkyVYTnu6EgoTUZd3PAfU1WbXcayuNjiQ9W1/9VdQRY= Subject key identifier: 2D:AF:34:FE:DF:42:3E:29:5F:45:9A:FF:E2:B5:E4:CE:C6:12:D6:BD Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019D9BBF272CC60C3B0A5AD40A936E49819A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 18C8 Signing time: Fri 17 Apr 2026 14:01:28 +0000 Manifest this update: Fri 17 Apr 2026 14:01:28 +0000 Manifest next update: Sat 18 Apr 2026 14:01:28 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 22eqaQ7zHorv2zANugMfEU4GRzIaq/Kby5hUR9gBEcg=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:bf:27:2c:c6:0c:3b:0a:5a:d4:0a:93:6e:49:81:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Apr 17 14:01:28 2026 GMT Not After : Apr 18 14:01:28 2026 GMT Subject: CN=2daf34fedf423e295f459affe2b5e4cec612d6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:68:4d:47:8a:3e:d9:e2:1e:de:d3:0e:33: 44:fa:0f:ed:19:f9:d0:37:bc:12:c6:d8:77:25:b5: 50:1a:74:68:1d:1f:90:c5:89:a1:d6:42:09:7d:a4: 08:43:5d:ae:95:24:a8:ae:3b:e6:a9:e6:57:9d:11: a0:0e:1a:9d:45:99:35:d4:7a:ea:61:f6:e0:d1:97: bf:f4:fe:66:75:48:87:54:8d:84:c0:e0:07:14:46: 24:f0:75:74:73:78:b3:0d:1c:94:b1:51:16:4a:1a: 7a:b7:1e:84:d3:83:be:c6:88:3f:7a:2b:d7:a9:d8: 94:00:29:ce:46:06:76:90:aa:76:d1:70:fc:d3:9a: d8:38:0d:98:55:41:59:e4:50:78:13:0f:a8:34:25: 59:ee:09:f6:c4:5b:c5:89:58:09:d4:40:02:0f:6e: e5:45:fb:3a:4a:2f:b5:f1:87:b4:61:83:45:43:a3: 70:9f:a6:08:9f:56:82:b3:18:41:d4:3f:94:98:9e: d7:b3:51:53:2c:38:ab:79:ca:19:63:45:1e:7a:9c: d4:2a:92:e3:09:48:ef:10:84:17:84:f7:ca:9c:70: f4:eb:7b:dd:b5:74:c5:9a:cb:b0:cc:41:f9:0c:df: bd:d9:20:58:da:3e:ec:04:28:e3:6f:8e:e9:bf:c7: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AF:34:FE:DF:42:3E:29:5F:45:9A:FF:E2:B5:E4:CE:C6:12:D6:BD X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:b0:4e:1a:ba:2c:c8:77:48:85:ee:f9:36:fe:68:82:bb: 97:ae:71:47:9e:18:01:94:10:ec:79:b1:71:0e:75:ab:14:b4: 44:dc:9e:4b:42:be:0a:3d:73:3c:b0:59:2b:d3:15:4c:4c:a0: 42:52:2c:31:90:e2:38:1e:8c:16:8d:be:c4:cf:57:87:1f:26: f5:b5:c7:e1:e2:79:24:60:e6:9b:b8:b7:8f:89:50:10:34:7b: 29:b1:5d:01:15:29:f9:26:45:03:b1:cc:bb:c8:4d:6f:08:5f: d0:63:33:14:b5:6b:87:b0:63:9c:54:ac:94:77:43:1a:4e:75: 47:86:13:bd:dd:24:96:be:69:75:72:70:4e:3e:fc:10:a1:21: 77:53:4e:6c:a8:9b:0b:2a:06:3f:5b:fc:b4:2b:6c:08:70:5d: 8a:42:1d:f6:9c:c3:7a:76:40:3d:39:cd:3f:8d:b0:3a:c0:17: 0a:fc:a4:46:d4:cb:22:a1:ea:70:b5:49:13:b7:81:b0:94:21: ba:6f:c3:79:53:9d:e5:b5:55:42:01:e1:07:12:2b:c4:c5:c0: f2:16:39:de:60:da:b8:c2:99:2b:30:4f:6c:d9:41:ba:d7:a5: 5d:0f:56:bd:29:03:0e:73:2d:a8:aa:ba:ef:d0:f9:06:e9:c6: bc:45:10:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bvycsxgw7ClrUCpNuSYGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwNDE3MTQwMTI4WhcNMjYwNDE4MTQwMTI4WjAzMTEwLwYDVQQD EygyZGFmMzRmZWRmNDIzZTI5NWY0NTlhZmZlMmI1ZTRjZWM2MTJkNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRFoTUeKPtniHt7TDjNE+g/tGfnQ N7wSxth3JbVQGnRoHR+QxYmh1kIJfaQIQ12ulSSorjvmqeZXnRGgDhqdRZk11Hrq Yfbg0Ze/9P5mdUiHVI2EwOAHFEYk8HV0c3izDRyUsVEWShp6tx6E04O+xog/eivX qdiUACnORgZ2kKp20XD805rYOA2YVUFZ5FB4Ew+oNCVZ7gn2xFvFiVgJ1EACD27l Rfs6Si+18Ye0YYNFQ6Nwn6YIn1aCsxhB1D+UmJ7Xs1FTLDirecoZY0UeepzUKpLj CUjvEIQXhPfKnHD063vdtXTFmsuwzEH5DN+92SBY2j7sBCjjb47pv8eiRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2vNP7fQj4pX0Wa/+K15M7GEta9MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfSwThq6 LMh3SIXu+Tb+aIK7l65xR54YAZQQ7HmxcQ51qxS0RNyeS0K+Cj1zPLBZK9MVTEyg QlIsMZDiOB6MFo2+xM9Xhx8m9bXH4eJ5JGDmm7i3j4lQEDR7KbFdARUp+SZFA7HM u8hNbwhf0GMzFLVrh7BjnFSslHdDGk51R4YTvd0klr5pdXJwTj78EKEhd1NObKib CyoGP1v8tCtsCHBdikId9pzDenZAPTnNP42wOsAXCvykRtTLIqHqcLVJE7eBsJQh um/DeVOd5bVVQgHhBxIrxMXA8hY53mDauMKZKzBPbNlButelXQ9WvSkDDnMtqKq6 79D5BunGvEUQWw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:18:07 2026 by rpki-client