$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: qejuJUwtj55rrhgTtDxoOkTadb8nZgcr8nq6klYQVk8= Subject key identifier: BB:FE:4B:E4:AC:95:15:D9:DA:86:EB:98:DC:82:DB:B3:78:1D:3D:13 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019D9A3EC71303B2A5AD13D415827FFE35D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1872 Signing time: Fri 17 Apr 2026 07:01:38 +0000 Manifest this update: Fri 17 Apr 2026 07:01:38 +0000 Manifest next update: Sat 18 Apr 2026 07:01:38 +0000 Files and hashes: 1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=) 2: 1HlEs2YC4vP8Y6eRn4maKBlHD4w.roa (hash: 10RB13fTX0Xa1pKypHZAB1p2a6ribPQE6Kbo5wMIs/I=) 3: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 5: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=) 6: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=) 7: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: STtwjFyrd7L5/DGgjhzNamOQWc1ChFk9Jlb2BPD1FT8=) 9: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 10: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 11: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=) 12: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=) 13: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=) 14: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 15: dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa (hash: LtFziGiCB6ZSk0IFD9YNBjwpbHldhOQjU/Bt2FiebEA=) 16: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 17: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=) 18: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 19: oiFnJz8OW03WCWtsMHubcwWCEnU.roa (hash: NGNeywVT/9a30EqHXW3cwLcQm7wpXQ63rm74pTj5fag=) 20: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 21: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:c7:13:03:b2:a5:ad:13:d4:15:82:7f:fe:35:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Apr 17 07:01:38 2026 GMT Not After : Apr 18 07:01:38 2026 GMT Subject: CN=bbfe4be4ac9515d9da86eb98dc82dbb3781d3d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:cd:b1:6d:b5:d3:7e:93:4e:31:0a:bb:2e: 64:db:a2:3c:df:4b:c5:f3:0f:1f:89:76:aa:b7:75: 28:2b:11:57:5c:00:50:d5:96:2b:6d:64:e3:ce:fc: 94:13:78:41:7b:1c:05:0d:f0:34:11:a1:c8:55:60: 90:98:8e:9d:83:7c:aa:f7:80:7c:89:d0:77:08:8f: 73:ce:36:8c:80:1b:fa:ca:32:8a:67:fd:d0:ba:f4: ae:d8:90:1f:0c:00:a3:0d:5f:0d:48:23:61:ba:63: 00:3b:09:b5:ce:ca:0b:47:af:17:ac:a1:ad:18:b7: 34:cd:3c:12:6c:0e:a1:8b:96:4f:83:bb:96:22:50: 73:10:93:8c:4e:1b:b1:c6:cd:f0:7d:a1:b0:6b:a2: 99:58:f6:f9:ac:0c:76:2a:4a:33:98:b9:a2:ef:ef: 99:c5:fd:47:94:e8:43:86:f0:40:28:a7:58:0e:dc: c4:d5:4e:26:46:78:6f:48:0b:4a:99:86:4e:21:5e: cd:d3:1c:2f:d1:1c:d6:e0:76:33:9f:1a:07:5e:9b: 6e:0d:ec:b8:91:42:29:11:e8:3b:d4:75:a2:53:12: e7:4d:5f:80:0e:59:fe:4b:15:01:0a:8c:1b:29:c4: c2:72:59:66:ed:dd:6a:86:18:fe:f2:38:7d:71:18: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FE:4B:E4:AC:95:15:D9:DA:86:EB:98:DC:82:DB:B3:78:1D:3D:13 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:74:6c:f4:1d:f0:12:29:31:b6:0a:50:4e:e9:8c:b3:0e:ab: 42:4b:7d:87:7f:01:b3:87:a9:3d:e7:3c:6a:d5:4d:82:67:09: dc:ff:57:1c:8a:79:92:ad:26:a0:eb:de:62:c5:15:fa:30:07: 00:e7:34:ea:76:bc:2f:82:e7:37:bb:c4:8b:c6:03:5d:34:b4: 82:20:4b:c1:85:dc:c6:42:15:3d:31:0a:31:28:12:aa:91:a7: 85:79:e9:8c:7c:8d:29:62:b6:e0:08:9d:49:c6:84:c1:68:5c: 2e:b8:99:0a:fa:bb:91:4b:2f:fa:e9:9b:fc:43:9d:7d:9f:39: ff:16:d6:16:de:05:68:0e:5c:6f:99:e5:7b:de:a5:e0:0a:9c: ef:5a:9c:3f:87:03:0a:b7:28:cb:3e:c9:39:83:d8:6c:c2:cf: d8:81:1d:60:3b:cf:2d:17:c3:7a:5a:24:0a:49:64:87:3f:f8: 64:6f:aa:04:9b:ad:ff:59:0a:de:a4:c2:c2:31:9e:4b:7e:9a: 10:6a:a0:c8:ee:10:23:22:e3:a3:fd:88:19:44:31:ef:c6:6c: 29:8f:a0:5b:c2:f8:60:2b:37:1d:cd:f8:6b:f8:f1:5c:4e:12: 97:fa:6f:39:b0:54:e9:2a:c4:de:45:4e:4e:a1:1c:a9:9d:b0: 8e:3b:f5:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPscTA7KlrRPUFYJ//jXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwNDE3MDcwMTM4WhcNMjYwNDE4MDcwMTM4WjAzMTEwLwYDVQQD EyhiYmZlNGJlNGFjOTUxNWQ5ZGE4NmViOThkYzgyZGJiMzc4MWQzZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKDNsW21036TTjEKuy5k26I830vF 8w8fiXaqt3UoKxFXXABQ1ZYrbWTjzvyUE3hBexwFDfA0EaHIVWCQmI6dg3yq94B8 idB3CI9zzjaMgBv6yjKKZ/3QuvSu2JAfDACjDV8NSCNhumMAOwm1zsoLR68XrKGt GLc0zTwSbA6hi5ZPg7uWIlBzEJOMThuxxs3wfaGwa6KZWPb5rAx2KkozmLmi7++Z xf1HlOhDhvBAKKdYDtzE1U4mRnhvSAtKmYZOIV7N0xwv0RzW4HYznxoHXptuDey4 kUIpEeg71HWiUxLnTV+ADln+SxUBCowbKcTCcllm7d1qhhj+8jh9cRjQdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLv+S+SslRXZ2obrmNyC27N4HT0TMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3Rs9B3w EikxtgpQTumMsw6rQkt9h38Bs4epPec8atVNgmcJ3P9XHIp5kq0moOveYsUV+jAH AOc06na8L4LnN7vEi8YDXTS0giBLwYXcxkIVPTEKMSgSqpGnhXnpjHyNKWK24Aid ScaEwWhcLriZCvq7kUsv+umb/EOdfZ85/xbWFt4FaA5cb5nle96l4Aqc71qcP4cD Crcoyz7JOYPYbMLP2IEdYDvPLRfDelokCklkhz/4ZG+qBJut/1kK3qTCwjGeS36a EGqgyO4QIyLjo/2IGUQx78ZsKY+gW8L4YCs3Hc34a/jxXE4Sl/pvObBU6SrE3kVO TqEcqZ2wjjv1Kw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:42 2026 by rpki-client