$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: qPoLU0H1z2US3woBroxKzA1ltI2/uEleOTmm8z+ua1E= Subject key identifier: 97:70:F3:E2:7E:A0:A4:14:FF:08:9F:DE:F1:37:EA:6F:87:B0:F5:B4 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019CAA58DF75E7E12E280F72F17682AD5404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 1853 Signing time: Sun 01 Mar 2026 17:01:16 +0000 Manifest this update: Sun 01 Mar 2026 17:01:16 +0000 Manifest next update: Mon 02 Mar 2026 17:01:16 +0000 Files and hashes: 1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=) 2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=) 3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=) 4: 34lSajmzV7ghbV2u1KSVPerBr80.roa (hash: NamtEVy8eAOlAQdliJbJze4twHs6pp1lCvXKU+23zoI=) 5: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=) 6: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=) 7: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=) 8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=) 9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=) 10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: rOp8e8uqZdrIcU9z1o4qbyJYVlMWbgRAuA9N2mEUpRY=) 11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=) 12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=) 13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=) 14: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=) 15: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=) 16: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=) 17: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=) 18: x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa (hash: 7TMD01f8lLY3g9AO1/72S5iTfUyRV4cwvwL1UdzW4pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:df:75:e7:e1:2e:28:0f:72:f1:76:82:ad:54:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Mar 1 17:01:16 2026 GMT Not After : Mar 2 17:01:16 2026 GMT Subject: CN=9770f3e27ea0a414ff089fdef137ea6f87b0f5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:ca:31:9f:96:c4:df:75:d5:d2:75:e1:84: 5c:cb:85:eb:78:e9:a0:ef:03:d3:dd:f2:c0:76:05: 39:77:2b:cf:e7:70:19:96:25:fa:82:c0:3c:c3:30: b0:91:16:ac:7c:0e:97:bd:45:07:bb:ff:64:d8:5c: 6b:61:50:e3:0d:43:dc:09:66:f1:6e:92:2f:d8:ea: 5f:09:e2:48:87:92:46:42:d6:54:1a:96:6b:40:d4: 7f:60:b6:b8:c9:7b:b2:69:f3:ab:df:e5:91:17:8d: c6:d6:b7:9e:37:09:31:f9:b2:1f:0a:23:4d:42:e9: d9:18:a8:00:0d:f3:26:b7:f0:df:5e:f2:e4:cc:cd: c4:41:e9:f7:80:61:ff:9d:3f:a4:a2:e8:8a:37:85: 4e:c9:19:ee:55:0b:dd:6f:8a:ea:7a:d6:4e:e5:eb: 02:fe:fb:46:bf:6c:b0:52:0a:eb:38:51:d7:e1:5a: a3:b9:fc:65:26:d0:09:51:25:ba:cc:5e:6c:0a:a2: 1f:a9:7d:8b:f2:ab:ff:67:0a:a8:2a:6c:3e:53:bb: e1:2d:ed:65:4b:73:09:af:2c:6e:0b:cb:0f:bf:96: 62:16:b1:a2:1f:2e:1e:c6:3e:27:b9:1f:34:a1:87: f4:96:89:94:17:95:07:b1:f1:b6:5a:6a:d4:a1:d7: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:F3:E2:7E:A0:A4:14:FF:08:9F:DE:F1:37:EA:6F:87:B0:F5:B4 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:bc:bf:6c:4b:19:63:5b:48:4a:19:0e:05:7f:bc:72:1b:f5: 17:15:ef:33:3f:a7:9f:bf:e6:7b:aa:04:c9:59:a6:23:f7:a2: 7e:7f:4c:a6:ca:59:8e:e4:d4:37:f4:1d:0f:7e:71:f9:8e:95: d9:76:b4:93:3a:07:8a:27:66:da:70:99:25:f8:bc:a7:20:7c: b6:07:fd:fb:97:2e:de:6c:17:80:2e:40:4b:83:16:d6:83:fc: f4:32:a1:88:93:0b:7c:dc:20:10:d7:fa:ab:2c:c5:6e:b4:01: d2:b0:c9:01:5c:66:81:5d:12:bf:c3:dc:e9:06:00:c0:ad:5b: 9c:e4:fe:35:dd:07:04:21:b5:6b:42:48:4b:80:3a:ee:bd:fb: f1:9a:3d:04:e5:ac:3a:0b:44:6f:25:5c:7a:e0:9b:56:4e:cd: 24:48:7b:45:79:9a:38:a5:b3:43:6d:50:57:f1:c0:6f:4d:2e: 49:ea:5e:76:40:db:c8:0e:65:c8:91:72:d5:c8:b4:09:4b:3c: 75:63:dd:01:cd:33:28:2e:34:17:0b:4e:0b:e8:1e:da:e9:9a: 26:b2:b4:26:e7:ec:d1:b0:14:8e:ef:fb:45:0c:f2:fa:e3:29: 2b:e2:af:16:11:f9:69:9e:af:9b:64:de:62:49:a1:18:c7:89: f7:1a:8a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWN915+EuKA9y8XaCrVQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMzAxMTcwMTE2WhcNMjYwMzAyMTcwMTE2WjAzMTEwLwYDVQQD Eyg5NzcwZjNlMjdlYTBhNDE0ZmYwODlmZGVmMTM3ZWE2Zjg3YjBmNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkinKMZ+WxN911dJ14YRcy4XreOmg 7wPT3fLAdgU5dyvP53AZliX6gsA8wzCwkRasfA6XvUUHu/9k2FxrYVDjDUPcCWbx bpIv2OpfCeJIh5JGQtZUGpZrQNR/YLa4yXuyafOr3+WRF43G1reeNwkx+bIfCiNN QunZGKgADfMmt/DfXvLkzM3EQen3gGH/nT+kouiKN4VOyRnuVQvdb4rqetZO5esC /vtGv2ywUgrrOFHX4VqjufxlJtAJUSW6zF5sCqIfqX2L8qv/ZwqoKmw+U7vhLe1l S3MJryxuC8sPv5ZiFrGiHy4exj4nuR80oYf0lomUF5UHsfG2WmrUodfZ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdw8+J+oKQU/wif3vE36m+HsPW0MB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Ly/bEsZ Y1tIShkOBX+8chv1FxXvMz+nn7/me6oEyVmmI/eifn9MpspZjuTUN/QdD35x+Y6V 2Xa0kzoHiidm2nCZJfi8pyB8tgf9+5cu3mwXgC5AS4MW1oP89DKhiJMLfNwgENf6 qyzFbrQB0rDJAVxmgV0Sv8Pc6QYAwK1bnOT+Nd0HBCG1a0JIS4A67r378Zo9BOWs OgtEbyVceuCbVk7NJEh7RXmaOKWzQ21QV/HAb00uSepedkDbyA5lyJFy1ci0CUs8 dWPdAc0zKC40FwtOC+ge2umaJrK0Jufs0bAUju/7RQzy+uMpK+KvFhH5aZ6vm2Te YkmhGMeJ9xqKTA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:52 2026 by rpki-client