$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: /gmf4YCTbIdCMrnYtH+zZIKmRlEkNmfXRPseqhUAJt0= Subject key identifier: 87:BB:E0:10:50:32:F9:9B:7E:ED:4A:27:AF:9E:41:C9:2E:23:4D:CE Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019D992B7C435F08B29BF693EF01FE3DF37E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 18CF Signing time: Fri 17 Apr 2026 02:00:56 +0000 Manifest this update: Fri 17 Apr 2026 02:00:56 +0000 Manifest next update: Sat 18 Apr 2026 02:00:56 +0000 Files and hashes: 1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=) 2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=) 3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=) 4: 34lSajmzV7ghbV2u1KSVPerBr80.roa (hash: NamtEVy8eAOlAQdliJbJze4twHs6pp1lCvXKU+23zoI=) 5: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=) 6: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=) 7: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=) 8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=) 9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=) 10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: cTIdPx6Xiq9I6rujZiRG5SC3eeR41gmKxOVCkjl1mTE=) 11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=) 12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=) 13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=) 14: XZk-yWmlDDM9CxBVtm8oXZP5lLg.roa (hash: 4M0vAZEtj82VVd8AbgFS4P7h6woEavJ+CLFH4jVH08E=) 15: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=) 16: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=) 17: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=) 18: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=) 19: x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa (hash: 7TMD01f8lLY3g9AO1/72S5iTfUyRV4cwvwL1UdzW4pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:7c:43:5f:08:b2:9b:f6:93:ef:01:fe:3d:f3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Apr 17 02:00:56 2026 GMT Not After : Apr 18 02:00:56 2026 GMT Subject: CN=87bbe0105032f99b7eed4a27af9e41c92e234dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:4e:38:13:48:ad:32:a2:29:9d:4c:05:23: e7:6e:35:78:03:89:79:6a:f2:46:1e:28:5d:7b:61: cb:6a:db:2d:c6:ee:3e:c3:86:26:86:ca:f8:73:cf: da:77:84:1b:4d:eb:78:bb:13:08:c9:10:54:91:d5: 87:05:f1:a5:5a:a2:c8:22:1f:ba:b7:f9:f4:ab:70: d5:b7:06:3a:86:51:21:11:a8:5c:b9:50:b7:f9:8e: ab:7b:85:0b:af:63:a1:0d:4a:31:11:f3:bd:df:f2: 00:74:92:b0:35:9d:2a:8a:35:33:b2:e9:87:8e:d7: 1a:2e:a0:ee:6e:2f:4f:6d:19:be:15:74:19:c2:8c: c4:c9:8b:4d:44:2d:89:22:7e:2d:f0:34:42:9e:f8: 5f:a0:60:60:2c:bf:a2:95:e1:65:93:9d:71:fe:04: e5:d0:3a:33:70:9b:04:50:32:12:bc:1b:04:0a:dc: d0:c7:79:04:ea:25:a4:23:e3:2d:0b:82:8a:35:14: 32:1e:1c:b1:a2:84:52:37:e0:67:47:41:72:db:74: 95:9c:95:e7:01:9f:af:d8:f4:d2:77:4e:b6:73:5e: 2e:86:e1:ec:32:a1:96:af:89:8f:bc:fc:f1:c0:93: 7c:90:74:3e:24:c8:82:7d:86:5f:a2:8f:aa:93:90: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:E0:10:50:32:F9:9B:7E:ED:4A:27:AF:9E:41:C9:2E:23:4D:CE X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8f:aa:d9:56:26:25:89:56:fd:32:9a:45:20:dc:ef:ec:c4: a4:ca:72:7c:ea:3a:1f:bb:29:03:0d:49:eb:97:ec:d6:cd:7c: 6c:27:4b:66:6f:1d:e7:59:46:f7:41:a7:b6:e7:5c:f0:a3:9b: dd:0a:b0:a4:2f:f3:e7:52:17:bf:38:42:d2:90:85:15:63:06: 34:07:af:b6:06:e1:57:b8:64:5a:52:31:63:09:01:9d:f3:bc: cd:22:46:f3:4a:e0:ea:35:a8:fd:8b:cb:e0:b7:31:a0:12:c2: 74:54:f6:af:e0:20:7d:1b:a9:12:e4:f8:3a:37:4f:d6:af:96: a5:2a:85:15:33:e9:e8:9f:b8:c7:15:3d:71:2a:bd:5c:e5:d6: f5:c7:c7:b6:c7:27:71:73:dc:17:ea:83:fd:f8:3e:7d:35:4d: 21:92:50:cf:d6:88:cd:a2:e5:53:1d:55:d1:c3:c1:46:c3:a7: 7c:66:71:00:d0:9f:d5:cc:ec:f3:92:8d:1f:5b:3f:eb:eb:22: 22:d9:ac:7e:83:39:d9:30:67:9f:9c:6a:1a:57:65:e9:d1:2a: 3d:ce:1d:0d:71:52:0d:1c:bc:d7:00:1c:fd:85:5f:54:83:cd: 38:1e:ed:cb:e8:a9:b3:2d:a7:06:9e:45:c6:1f:c9:be:fb:c4: b9:c3:f4:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK3xDXwiym/aT7wH+PfN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwNDE3MDIwMDU2WhcNMjYwNDE4MDIwMDU2WjAzMTEwLwYDVQQD Eyg4N2JiZTAxMDUwMzJmOTliN2VlZDRhMjdhZjllNDFjOTJlMjM0ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJNOOBNIrTKiKZ1MBSPnbjV4A4l5 avJGHihde2HLatstxu4+w4Ymhsr4c8/ad4QbTet4uxMIyRBUkdWHBfGlWqLIIh+6 t/n0q3DVtwY6hlEhEahcuVC3+Y6re4ULr2OhDUoxEfO93/IAdJKwNZ0qijUzsumH jtcaLqDubi9PbRm+FXQZwozEyYtNRC2JIn4t8DRCnvhfoGBgLL+ileFlk51x/gTl 0DozcJsEUDISvBsECtzQx3kE6iWkI+MtC4KKNRQyHhyxooRSN+BnR0Fy23SVnJXn AZ+v2PTSd062c14uhuHsMqGWr4mPvPzxwJN8kHQ+JMiCfYZfoo+qk5DUUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIe74BBQMvmbfu1KJ6+eQckuI03OMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI+q2VYm JYlW/TKaRSDc7+zEpMpyfOo6H7spAw1J65fs1s18bCdLZm8d51lG90Gntudc8KOb 3QqwpC/z51IXvzhC0pCFFWMGNAevtgbhV7hkWlIxYwkBnfO8zSJG80rg6jWo/YvL 4LcxoBLCdFT2r+AgfRupEuT4OjdP1q+WpSqFFTPp6J+4xxU9cSq9XOXW9cfHtscn cXPcF+qD/fg+fTVNIZJQz9aIzaLlUx1V0cPBRsOnfGZxANCf1czs85KNH1s/6+si ItmsfoM52TBnn5xqGldl6dEqPc4dDXFSDRy81wAc/YVfVIPNOB7ty+ipsy2nBp5F xh/JvvvEucP0Dw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:43:20 2026 by rpki-client