$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: WxnXIxpcdEQvI1BIkJBPksSsIQ4udnKeEdj3tj/W1KM= Subject key identifier: AD:2C:DD:51:E5:E7:3E:7D:09:B6:68:F2:04:07:32:3B:7E:89:AF:56 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01A0E99C4A9B1E9042BD8C586225C86DDBD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1A7E Signing time: Mon 28 Sep 2026 20:02:09 +0000 Manifest this update: Mon 28 Sep 2026 20:02:09 +0000 Manifest next update: Tue 29 Sep 2026 20:02:09 +0000 Files and hashes: 1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=) 2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=) 3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=) 4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=) 5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=) 6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=) 7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=) 8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: iJZsfcwdE2DFwm9GFpl1ubA2riMsMREbnagdidkDFyU=) 9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=) 10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=) 11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=) 12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=) 13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=) 14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=) 15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=) 16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e9:9c:4a:9b:1e:90:42:bd:8c:58:62:25:c8:6d:db:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Sep 28 20:02:09 2026 GMT Not After : Sep 29 20:02:09 2026 GMT Subject: CN=ad2cdd51e5e73e7d09b668f20407323b7e89af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:bc:99:ba:fd:6c:99:f0:84:26:35:ca:3b: f9:62:5f:8b:03:c8:79:37:3c:1b:11:c8:b0:b8:11: 00:b8:1e:c6:bf:2a:61:b9:50:bc:be:54:89:28:d5: 0a:b9:0f:7d:00:ab:0f:ae:d1:a3:e2:4e:be:d3:fb: fc:5b:a1:ae:b0:aa:40:d7:14:19:29:b8:38:87:bc: c0:17:99:09:54:d5:19:21:f0:dd:da:bb:3a:c4:d2: ed:1c:30:29:72:58:f6:98:76:72:48:de:18:23:d9: 1c:72:32:4d:2a:15:8e:26:ea:e5:4c:5c:f9:6f:96: db:9e:10:be:05:9a:d7:ca:f2:93:a8:de:99:3f:29: b3:12:c6:f4:8a:50:ed:5f:cf:50:29:c4:86:37:c7: e9:20:40:d8:89:83:85:77:1f:92:b4:c6:65:8d:61: 66:25:b1:26:b7:e2:4b:33:98:03:8f:27:fe:68:c7: fb:9e:a4:bd:3f:d1:23:46:aa:86:16:0a:71:99:07: 03:6a:30:b3:9a:fb:e5:ad:b8:98:88:38:a6:9c:26: b7:0e:fe:60:53:13:fa:f9:31:32:d0:3e:b9:7d:8c: 69:9b:6a:32:92:0f:bf:b5:9a:71:35:26:01:51:03: db:81:18:5c:c9:a9:4c:4b:55:6b:a4:d5:e9:3e:3a: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:DD:51:E5:E7:3E:7D:09:B6:68:F2:04:07:32:3B:7E:89:AF:56 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d0:a0:b0:71:74:20:d9:a8:fd:75:7d:cb:19:4a:04:5b:3d: 2f:82:a3:e7:cb:5c:39:7b:be:1a:0d:a7:a1:2d:4d:75:4a:01: a0:cf:1b:3b:19:c0:68:09:70:01:3f:b9:17:8d:98:00:55:f7: 6a:ad:4b:31:14:75:7b:c9:59:0c:9a:88:47:ff:04:80:44:92: b3:d0:36:2c:d5:59:0e:77:31:84:4c:12:b6:d2:a5:25:1b:e7: 38:96:99:0c:8b:7e:db:80:6c:9f:f8:a8:03:5b:b9:28:72:89: be:75:3d:25:17:e9:2a:de:01:6f:07:44:e0:27:e0:79:dc:ec: b0:7a:8c:e3:6c:f9:d3:2e:f0:8c:62:ff:92:48:fb:d3:c9:ca: 03:2f:f3:dc:21:63:c1:ab:c5:df:bd:96:ad:e7:a6:16:38:0d: 11:cc:8e:fe:6c:f5:1c:e4:4e:7c:87:df:33:d9:6e:9d:8e:9d: a3:56:f0:04:b1:ec:34:97:1f:8f:3d:a8:28:ee:81:b8:3e:d8: b8:c6:f7:d0:2a:ba:a5:22:1c:ab:96:8e:f5:d2:c5:df:e0:7a: ec:7c:d4:2f:ce:56:15:67:32:fc:c8:f6:c8:4e:ac:cd:d8:5a: cd:ac:a4:2b:a0:b3:d0:51:fb:9c:c6:15:cb:85:79:a4:ca:a1: ae:c6:06:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDpnEqbHpBCvYxYYiXIbdvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwOTI4MjAwMjA5WhcNMjYwOTI5MjAwMjA5WjAzMTEwLwYDVQQD EyhhZDJjZGQ1MWU1ZTczZTdkMDliNjY4ZjIwNDA3MzIzYjdlODlhZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D68mbr9bJnwhCY1yjv5Yl+LA8h5 NzwbEciwuBEAuB7GvyphuVC8vlSJKNUKuQ99AKsPrtGj4k6+0/v8W6GusKpA1xQZ Kbg4h7zAF5kJVNUZIfDd2rs6xNLtHDApclj2mHZySN4YI9kccjJNKhWOJurlTFz5 b5bbnhC+BZrXyvKTqN6ZPymzEsb0ilDtX89QKcSGN8fpIEDYiYOFdx+StMZljWFm JbEmt+JLM5gDjyf+aMf7nqS9P9EjRqqGFgpxmQcDajCzmvvlrbiYiDimnCa3Dv5g UxP6+TEy0D65fYxpm2oykg+/tZpxNSYBUQPbgRhcyalMS1VrpNXpPjrpowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0s3VHl5z59CbZo8gQHMjt+ia9WMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9CgsHF0 INmo/XV9yxlKBFs9L4Kj58tcOXu+Gg2noS1NdUoBoM8bOxnAaAlwAT+5F42YAFX3 aq1LMRR1e8lZDJqIR/8EgESSs9A2LNVZDncxhEwSttKlJRvnOJaZDIt+24Bsn/io A1u5KHKJvnU9JRfpKt4BbwdE4CfgedzssHqM42z50y7wjGL/kkj708nKAy/z3CFj wavF372WreemFjgNEcyO/mz1HOROfIffM9lunY6do1bwBLHsNJcfjz2oKO6BuD7Y uMb30Cq6pSIcq5aO9dLF3+B67HzUL85WFWcy/Mj2yE6szdhazaykK6Cz0FH7nMYV y4V5pMqhrsYGZg== -----END CERTIFICATE-----Generated at Mon Sep 28 23:34:14 2026 by rpki-client