$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: Gf5nNsMrNwf6JFZUCOjXSqxGtJCr4hGhHp0XuqupRwg= Subject key identifier: DE:2F:D9:2D:C6:DE:68:47:A2:C7:9A:95:11:F1:BB:47:32:BE:43:E5 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019CAE34F3BE326E745BD56D08720E388BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 184D Signing time: Mon 02 Mar 2026 11:00:31 +0000 Manifest this update: Mon 02 Mar 2026 11:00:31 +0000 Manifest next update: Tue 03 Mar 2026 11:00:31 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 8SQHs9KR3da/mP526xOLBjoW1IsDukkxZOb8xyD0ynY=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:34:f3:be:32:6e:74:5b:d5:6d:08:72:0e:38:8b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Mar 2 11:00:31 2026 GMT Not After : Mar 3 11:00:31 2026 GMT Subject: CN=de2fd92dc6de6847a2c79a9511f1bb4732be43e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:dd:05:e7:9f:46:cd:d6:c1:e0:c7:eb:1d: a2:df:ea:98:13:3c:46:df:8d:ea:ba:1b:f1:d2:4e: 09:6a:2c:fb:96:60:6d:5e:2d:2b:81:32:2f:a7:93: f9:ac:66:74:2a:fb:a1:a3:37:ad:ae:d3:af:2e:73: f2:df:d6:f5:df:4d:7c:7c:f0:f8:47:76:ec:99:44: ba:ba:24:04:ee:d0:28:32:da:4f:7b:2d:86:be:4d: 38:34:a7:1b:92:72:d6:19:eb:29:64:07:e5:d4:7f: 57:c0:12:88:98:25:36:4a:c1:85:d9:e2:7e:64:04: c9:e0:51:c9:3a:d5:fa:62:98:23:ca:92:11:20:38: 1e:bd:4d:fb:26:f8:4d:c3:2f:25:fa:da:42:3c:6c: 78:93:e2:ee:e5:bb:21:77:1a:19:c5:f9:d5:57:1d: 9a:a3:5d:0e:c8:c7:bc:43:39:71:d7:eb:8e:aa:fe: 1c:e0:02:b7:57:2b:9e:9a:4f:86:4f:30:60:c0:a9: 1a:87:ca:51:32:e7:00:2f:46:57:ec:d4:ee:c5:24: 7f:ac:af:1d:2a:75:d6:bd:14:49:69:0a:23:0e:e6: 9b:7c:65:a4:c6:6d:23:a2:f9:9e:70:f1:a9:d4:70: 69:22:a3:1e:dd:35:55:91:29:2d:60:32:b7:a6:f0: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:D9:2D:C6:DE:68:47:A2:C7:9A:95:11:F1:BB:47:32:BE:43:E5 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:66:c1:a6:64:e6:c7:2b:2c:28:50:cb:53:dc:35:db:9d:da: cd:f0:ef:86:f5:80:a1:6d:11:94:17:d5:d4:ef:73:e0:4f:96: 40:d0:6f:8b:ba:a9:47:d6:33:55:40:ea:d5:3e:25:9a:b8:b6: 2c:52:e7:02:69:4d:52:d6:42:5b:75:e0:53:47:1c:0f:ca:25: d7:7c:bd:32:fb:17:d3:49:c9:3d:a1:a6:ff:b6:73:24:e1:2c: 54:5d:27:13:7f:63:c4:77:95:64:bc:cf:f6:c8:6d:13:e4:1c: 8b:e1:fa:47:64:b8:eb:66:ff:17:f5:b3:db:e2:a4:70:2a:9a: eb:77:96:54:64:a2:0c:db:a0:2f:3d:43:4a:99:c8:05:7c:bc: 91:19:58:6f:c7:1f:f5:36:82:f6:95:4f:6a:76:dd:3a:80:85: f8:7e:e7:f3:ce:e8:07:49:a4:07:c3:e8:b6:ec:29:a7:6a:be: bb:7c:46:78:88:a7:18:08:e6:2c:26:77:fc:a7:5a:87:0e:d8: 38:61:d9:23:9b:58:c0:e3:88:73:02:87:a2:d1:c4:24:3d:10: 17:c3:dd:fc:18:54:16:1c:14:23:2b:a0:ec:5b:be:74:13:6d: 44:3f:03:ab:e5:a3:7f:15:fe:d0:04:df:26:0e:54:e3:fe:9e: 58:00:cf:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuNPO+Mm50W9VtCHIOOIuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMzAyMTEwMDMxWhcNMjYwMzAzMTEwMDMxWjAzMTEwLwYDVQQD EyhkZTJmZDkyZGM2ZGU2ODQ3YTJjNzlhOTUxMWYxYmI0NzMyYmU0M2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDdBeefRs3WweDH6x2i3+qYEzxG 343quhvx0k4Jaiz7lmBtXi0rgTIvp5P5rGZ0KvuhozetrtOvLnPy39b13018fPD4 R3bsmUS6uiQE7tAoMtpPey2Gvk04NKcbknLWGespZAfl1H9XwBKImCU2SsGF2eJ+ ZATJ4FHJOtX6YpgjypIRIDgevU37JvhNwy8l+tpCPGx4k+Lu5bshdxoZxfnVVx2a o10OyMe8Qzlx1+uOqv4c4AK3Vyuemk+GTzBgwKkah8pRMucAL0ZX7NTuxSR/rK8d KnXWvRRJaQojDuabfGWkxm0jovmecPGp1HBpIqMe3TVVkSktYDK3pvAWxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4v2S3G3mhHosealRHxu0cyvkPlMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWbBpmTm xyssKFDLU9w1253azfDvhvWAoW0RlBfV1O9z4E+WQNBvi7qpR9YzVUDq1T4lmri2 LFLnAmlNUtZCW3XgU0ccD8ol13y9MvsX00nJPaGm/7ZzJOEsVF0nE39jxHeVZLzP 9shtE+Qci+H6R2S462b/F/Wz2+KkcCqa63eWVGSiDNugLz1DSpnIBXy8kRlYb8cf 9TaC9pVPanbdOoCF+H7n887oB0mkB8Potuwpp2q+u3xGeIinGAjmLCZ3/Kdahw7Y OGHZI5tYwOOIcwKHotHEJD0QF8Pd/BhUFhwUIyug7Fu+dBNtRD8Dq+WjfxX+0ATf Jg5U4/6eWADPPg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:58 2026 by rpki-client