$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: 30MKqP+TylCODU62V5PEOcSCokoW6vooyP39VDsrNmg= Subject key identifier: C1:F5:D1:B8:DE:5F:2E:66:73:BA:65:95:DA:8B:07:3F:BF:4D:AD:C3 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019CA945F286C0B9A4B3902D7D7A418AC22B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 17EF Signing time: Sun 01 Mar 2026 12:00:59 +0000 Manifest this update: Sun 01 Mar 2026 12:00:59 +0000 Manifest next update: Mon 02 Mar 2026 12:00:59 +0000 Files and hashes: 1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=) 2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 4: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 5: KMqFRhG1oB7XQrI1JrhtCF0dkM0.roa (hash: u9p+aTNn5LsuuLVNKku2JA40ElEYw0DtmMlYYXK0qh8=) 6: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: ZJc+2556YQs3Wld/ul0t7sFFqreVQKALDmo5WdQCBXc=) 7: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 8: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 9: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=) 10: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=) 11: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 12: cp19veFqJ88SBhBp4tNLZVRp77k.roa (hash: HI5bMRDZI8iWggu7qJa5j4vXWXU/42PJ1I9xbp6XIl0=) 13: dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa (hash: LtFziGiCB6ZSk0IFD9YNBjwpbHldhOQjU/Bt2FiebEA=) 14: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 15: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=) 16: kFIGHgWSxMJstzgGk9TS3U4izk4.roa (hash: Wp+o2DoEKjNqVY95Mi26u9ZtvO2Ywg3uG2CJ6XS5KF0=) 17: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 18: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 19: wTUTEHFq8P8Z2-EjSoFCaCdxr2k.roa (hash: pGzzlGQ5JMcpGrgZ0v6y6dhSjSHQ57ERl8VkHdr/pSI=) 20: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:45:f2:86:c0:b9:a4:b3:90:2d:7d:7a:41:8a:c2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Mar 1 12:00:59 2026 GMT Not After : Mar 2 12:00:59 2026 GMT Subject: CN=c1f5d1b8de5f2e6673ba6595da8b073fbf4dadc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:49:b6:4a:6c:9e:9d:4d:6b:ed:c6:3d:25: da:bc:13:21:23:7f:ce:c5:e0:6a:6e:7c:21:81:26: fb:fb:92:95:1b:1e:05:a9:b1:9b:77:82:6b:78:8c: 05:81:24:62:9d:32:7a:9e:b4:43:b3:a8:8b:56:78: d1:79:a5:72:70:71:78:04:3d:33:f5:9d:3b:8c:a5: d0:45:43:6d:d1:87:e3:35:19:41:8f:0c:b6:1a:98: da:02:9d:b9:33:4e:7d:72:ad:a9:0f:89:a3:96:1e: b4:b8:b6:7a:95:02:22:eb:01:df:e7:86:83:d9:f4: 7f:48:fb:bc:c1:e5:6d:e8:5d:07:9c:16:28:f0:2f: dd:b0:c3:ea:0e:79:97:cd:3b:d7:72:a6:da:8a:cf: b8:e1:4c:6a:cc:b6:00:0a:04:70:8b:e4:7b:1f:2c: b9:eb:13:d6:53:96:3a:6d:05:77:22:95:fa:25:34: 7f:21:c7:4a:e3:30:c5:56:ba:35:c4:e6:88:ae:01: 3c:5e:6b:e4:9f:9d:50:10:bb:a7:0f:5f:64:ef:92: 96:cb:6c:60:22:c1:a8:e6:12:88:95:3f:d3:31:fd: f4:d6:af:eb:57:0d:54:d6:64:11:1d:79:9e:8a:e7: 19:27:80:2c:e1:65:ca:40:54:77:98:1f:6f:53:19: 09:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F5:D1:B8:DE:5F:2E:66:73:BA:65:95:DA:8B:07:3F:BF:4D:AD:C3 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c4:41:e2:72:a7:4f:9c:9b:b1:fb:75:40:49:9b:77:03:47: e7:59:7c:c4:5a:c2:b4:69:4b:96:b8:d9:dc:e2:b5:ee:a5:bd: 8c:38:5f:b6:60:95:9f:64:2b:21:9d:8e:25:ad:66:46:27:ae: c3:2a:8e:e8:be:6f:6d:40:0b:ac:a9:ed:46:4a:eb:10:3e:4c: 55:92:9b:18:6b:6f:0c:49:77:18:28:d1:01:fc:e0:19:fd:5c: 0c:1c:69:43:b3:57:8e:45:99:2d:95:96:48:03:11:d0:1b:ce: 85:6c:07:28:5f:fd:9a:d3:34:b0:32:3f:97:b5:4b:84:6d:d9: 7c:ef:51:fc:c6:96:f9:75:a9:4b:c1:53:fb:69:0c:1f:99:af: f4:e6:46:ba:2b:c6:92:5b:a3:11:2a:89:c3:53:44:6e:53:dd: 76:72:6d:46:85:5e:0e:c1:56:f2:a5:e5:e5:91:e8:25:90:e7: 46:1c:45:60:1b:7c:9f:c5:73:6d:20:fa:e3:de:53:a0:e0:ec: 58:39:d4:1d:88:36:0a:52:c2:83:ca:8c:21:0c:6e:3c:d4:d1: 21:7c:7d:0f:31:6f:dd:01:45:b5:cf:84:b5:6f:00:be:a4:b5: 49:d2:be:9f:cc:73:af:3a:ba:f5:83:12:2c:cf:0b:15:58:91: fe:d9:d2:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRfKGwLmks5AtfXpBisIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMzAxMTIwMDU5WhcNMjYwMzAyMTIwMDU5WjAzMTEwLwYDVQQD EyhjMWY1ZDFiOGRlNWYyZTY2NzNiYTY1OTVkYThiMDczZmJmNGRhZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vVJtkpsnp1Na+3GPSXavBMhI3/O xeBqbnwhgSb7+5KVGx4FqbGbd4JreIwFgSRinTJ6nrRDs6iLVnjReaVycHF4BD0z 9Z07jKXQRUNt0YfjNRlBjwy2GpjaAp25M059cq2pD4mjlh60uLZ6lQIi6wHf54aD 2fR/SPu8weVt6F0HnBYo8C/dsMPqDnmXzTvXcqbais+44UxqzLYACgRwi+R7Hyy5 6xPWU5Y6bQV3IpX6JTR/IcdK4zDFVro1xOaIrgE8Xmvkn51QELunD19k75KWy2xg IsGo5hKIlT/TMf301q/rVw1U1mQRHXmeiucZJ4As4WXKQFR3mB9vUxkJNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH10bjeXy5mc7plldqLBz+/Ta3DMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8RB4nKn T5ybsft1QEmbdwNH51l8xFrCtGlLlrjZ3OK17qW9jDhftmCVn2QrIZ2OJa1mRieu wyqO6L5vbUALrKntRkrrED5MVZKbGGtvDEl3GCjRAfzgGf1cDBxpQ7NXjkWZLZWW SAMR0BvOhWwHKF/9mtM0sDI/l7VLhG3ZfO9R/MaW+XWpS8FT+2kMH5mv9OZGuivG klujESqJw1NEblPddnJtRoVeDsFW8qXl5ZHoJZDnRhxFYBt8n8VzbSD6495ToODs WDnUHYg2ClLCg8qMIQxuPNTRIXx9DzFv3QFFtc+EtW8AvqS1SdK+n8xzrzq69YMS LM8LFViR/tnSUg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:49 2026 by rpki-client