$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: qIIyQufr0FhFCIn4b8aaNbVvgacBMOjGf/bGjV3Yths= Subject key identifier: D0:66:6E:E2:A2:0D:A1:5C:68:B6:B2:7D:FC:39:0F:A4:D8:B5:86:69 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019CAF11207F6758A027ED65086C09A29A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 17F2 Signing time: Mon 02 Mar 2026 15:01:01 +0000 Manifest this update: Mon 02 Mar 2026 15:01:01 +0000 Manifest next update: Tue 03 Mar 2026 15:01:01 +0000 Files and hashes: 1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=) 2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 4: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 5: KMqFRhG1oB7XQrI1JrhtCF0dkM0.roa (hash: u9p+aTNn5LsuuLVNKku2JA40ElEYw0DtmMlYYXK0qh8=) 6: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: oH8ORs/OhFjJGPP62H8KUbVuzMV5uSVCaoao45DvKSw=) 7: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 8: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 9: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=) 10: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=) 11: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 12: cp19veFqJ88SBhBp4tNLZVRp77k.roa (hash: HI5bMRDZI8iWggu7qJa5j4vXWXU/42PJ1I9xbp6XIl0=) 13: dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa (hash: LtFziGiCB6ZSk0IFD9YNBjwpbHldhOQjU/Bt2FiebEA=) 14: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 15: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=) 16: kFIGHgWSxMJstzgGk9TS3U4izk4.roa (hash: Wp+o2DoEKjNqVY95Mi26u9ZtvO2Ywg3uG2CJ6XS5KF0=) 17: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 18: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 19: wTUTEHFq8P8Z2-EjSoFCaCdxr2k.roa (hash: pGzzlGQ5JMcpGrgZ0v6y6dhSjSHQ57ERl8VkHdr/pSI=) 20: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:af:11:20:7f:67:58:a0:27:ed:65:08:6c:09:a2:9a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Mar 2 15:01:01 2026 GMT Not After : Mar 3 15:01:01 2026 GMT Subject: CN=d0666ee2a20da15c68b6b27dfc390fa4d8b58669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:56:6f:05:ad:53:3e:8e:0e:06:63:79:ce: bc:8f:d3:a1:ce:fd:b6:86:a5:6d:a4:4e:67:ba:96: a6:a0:07:8c:50:fb:78:20:e3:f4:04:1b:00:64:7e: 10:2b:86:01:ac:4d:ee:f7:13:cf:40:e1:d8:f7:36: 2e:81:da:99:d2:00:bf:5f:f2:54:52:aa:cc:db:c0: f2:d1:2e:2a:fe:c2:d3:11:3c:95:5b:3b:0f:8c:2b: 19:35:51:a6:37:9c:ac:c4:31:a3:28:83:80:ac:b4: e7:45:52:4c:a9:20:4f:b2:f5:0d:36:84:dd:bc:20: 06:58:8e:a7:86:22:22:ca:34:27:38:f2:e6:fc:ae: 03:86:77:84:02:65:09:e6:75:5f:5e:3b:b8:2e:5d: b3:bd:6a:24:51:58:3a:1d:73:9a:69:ae:53:15:76: 7f:9d:0b:89:db:3a:13:5d:83:6b:a5:9a:33:18:10: 01:b9:cc:d4:e3:40:46:96:0a:2d:d4:b6:6f:7e:54: 67:ba:a2:b4:33:fe:21:20:a2:5e:d8:f6:32:96:84: 46:ad:60:f5:3a:ae:bc:a5:7b:da:df:45:3f:8c:dc: 8b:2b:83:f9:e6:b2:5d:22:64:39:d5:d0:a3:54:46: f4:c7:e1:ff:03:2d:cb:26:18:44:c2:2e:f1:a1:50: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:66:6E:E2:A2:0D:A1:5C:68:B6:B2:7D:FC:39:0F:A4:D8:B5:86:69 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:70:bb:99:7e:88:b3:d6:92:43:8e:df:a9:ac:81:97:70:a9: aa:06:59:67:57:38:70:11:ca:9e:8c:c1:e2:4e:cc:74:40:73: 3f:c1:fb:66:24:5c:cf:bc:49:54:b2:05:da:70:aa:02:aa:0b: 67:84:e6:2e:e9:d3:f1:9c:f4:2a:2c:8c:59:c4:5d:21:bc:39: 57:23:19:42:a4:32:b1:07:fb:8a:9c:f3:52:04:fa:80:bd:84: 78:96:ea:24:f9:86:90:a1:52:a6:44:54:d4:66:e0:ad:fe:79: 48:62:00:88:ad:11:ba:ef:13:8a:84:53:2f:f4:db:6e:7a:dc: e7:a8:5d:38:9e:48:d8:b4:ab:52:21:10:df:7c:2d:0d:97:c7: ba:a2:c1:97:b0:67:e5:db:c6:98:a3:d2:15:5f:36:98:c4:4c: 3f:48:d5:32:d6:c7:3c:a4:d0:05:b1:30:f9:f4:93:4a:b3:7c: d9:c5:6c:c0:98:b5:a3:62:ec:f8:b6:b7:dc:2e:5b:7d:5e:b1: d2:d9:4d:ce:13:f6:1d:bd:d1:d1:79:a7:97:73:dd:01:08:39: 7f:5b:51:5c:9b:bf:4e:31:c5:70:7a:4f:0e:ac:c7:98:3d:b9: da:56:fe:4f:17:8d:fb:2b:34:c8:57:44:d9:52:12:0e:80:2e: c3:52:aa:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyvESB/Z1igJ+1lCGwJoppEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMzAyMTUwMTAxWhcNMjYwMzAzMTUwMTAxWjAzMTEwLwYDVQQD EyhkMDY2NmVlMmEyMGRhMTVjNjhiNmIyN2RmYzM5MGZhNGQ4YjU4NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/1WbwWtUz6ODgZjec68j9Ohzv22 hqVtpE5nupamoAeMUPt4IOP0BBsAZH4QK4YBrE3u9xPPQOHY9zYugdqZ0gC/X/JU UqrM28Dy0S4q/sLTETyVWzsPjCsZNVGmN5ysxDGjKIOArLTnRVJMqSBPsvUNNoTd vCAGWI6nhiIiyjQnOPLm/K4DhneEAmUJ5nVfXju4Ll2zvWokUVg6HXOaaa5TFXZ/ nQuJ2zoTXYNrpZozGBABuczU40BGlgot1LZvflRnuqK0M/4hIKJe2PYyloRGrWD1 Oq68pXva30U/jNyLK4P55rJdImQ51dCjVEb0x+H/Ay3LJhhEwi7xoVClXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBmbuKiDaFcaLayffw5D6TYtYZpMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnC7mX6I s9aSQ47fqayBl3CpqgZZZ1c4cBHKnozB4k7MdEBzP8H7ZiRcz7xJVLIF2nCqAqoL Z4TmLunT8Zz0KiyMWcRdIbw5VyMZQqQysQf7ipzzUgT6gL2EeJbqJPmGkKFSpkRU 1Gbgrf55SGIAiK0Ruu8TioRTL/Tbbnrc56hdOJ5I2LSrUiEQ33wtDZfHuqLBl7Bn 5dvGmKPSFV82mMRMP0jVMtbHPKTQBbEw+fSTSrN82cVswJi1o2Ls+La33C5bfV6x 0tlNzhP2Hb3R0Xmnl3PdAQg5f1tRXJu/TjHFcHpPDqzHmD252lb+TxeN+ys0yFdE 2VISDoAuw1Kq0A== -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:18 2026 by rpki-client