$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: RrNC1twv6DKm052ApmfpUGv2hVff40CQ/qPX2q9/uRU= Subject key identifier: B8:D7:99:3B:D6:F7:20:68:1C:0F:1A:7E:6D:C5:E8:E6:15:AE:19:7A Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019CA8A15F2EBFAFA6405479A8A4E4A763F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 09B9 Signing time: Sun 01 Mar 2026 09:01:13 +0000 Manifest this update: Sun 01 Mar 2026 09:01:13 +0000 Manifest next update: Mon 02 Mar 2026 09:01:13 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 4: XPDlq-HeT_N_sHKNDPQmVFP0Ivw.roa (hash: kysYySEZmFj+8n7DlA09NetFDPPbrGWXcdcAS1Hu5j0=) 5: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 6: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 7: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 8: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: hLrksILFCzxakn/eOUHDVEENPOgzSoa1auaitrwNpQ4=) 10: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 11: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 12: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:a1:5f:2e:bf:af:a6:40:54:79:a8:a4:e4:a7:63:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Mar 1 09:01:13 2026 GMT Not After : Mar 2 09:01:13 2026 GMT Subject: CN=b8d7993bd6f720681c0f1a7e6dc5e8e615ae197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:0b:55:bc:a0:af:c5:58:f8:5b:72:c3:8d: b3:27:84:63:ea:d7:2c:bd:2d:1d:c0:c5:39:5f:32: d6:68:ca:91:80:97:aa:5f:c7:61:b9:d6:46:d5:0a: f1:b4:71:b8:b1:b4:92:97:e1:8e:29:5d:24:98:4a: b4:29:f3:8a:05:ed:76:6b:1e:5a:d2:3a:d2:8a:a1: 12:df:3e:ab:e4:22:21:36:63:5f:91:3e:1d:0a:9d: 8d:82:fc:00:ca:f2:a4:97:4e:d4:82:e3:ba:25:ec: 31:f6:24:a5:c9:14:72:d4:2d:25:1c:e4:2d:84:7f: 58:64:36:6b:56:8c:1d:83:55:eb:77:a0:3c:85:6b: 23:69:a8:4a:67:1a:7a:be:f2:0c:1b:89:a9:a5:63: e3:c7:78:d8:1b:53:6a:41:15:3c:51:bd:8b:5f:20: 5b:2f:e6:bb:01:7d:07:0f:dd:26:5f:d6:67:b3:b8: 9f:54:4e:a5:5c:28:a5:c3:11:2d:4c:87:8d:cf:1d: 75:81:ce:84:2b:b2:99:b0:9a:f5:f1:54:1e:40:d5: 38:a7:70:e4:bd:db:87:f5:7a:1a:e5:9f:10:7d:2b: 32:27:66:26:8e:fd:1f:b6:45:56:98:7e:96:01:f6: 4c:92:c8:e5:7e:04:79:23:4e:f2:67:27:82:b0:6d: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D7:99:3B:D6:F7:20:68:1C:0F:1A:7E:6D:C5:E8:E6:15:AE:19:7A X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bb:b0:0f:75:2e:9f:4e:90:f2:27:3e:a8:01:15:88:9c:2a: 06:07:ba:69:4e:61:20:2d:68:b1:b9:66:79:b2:8a:d9:40:e5: 3d:fa:44:51:6a:a4:a9:e0:f1:a8:72:71:78:97:f2:5a:d0:e9: 74:dd:20:db:04:b4:57:0d:97:58:3e:80:c9:92:13:33:21:cd: 58:f8:c7:32:43:ec:ef:eb:13:cf:8a:f4:9d:14:1c:5f:cc:09: 3c:72:15:47:76:67:bf:36:22:91:b9:ab:21:5f:43:9d:4a:c0: 16:b2:8b:e5:de:d7:94:8e:fe:23:48:15:dc:83:8d:84:7b:84: 0e:c1:53:51:e1:70:36:b1:32:9b:d7:6b:9e:59:3c:fd:66:dc: 98:f6:7d:28:8c:f4:eb:b5:91:e5:db:b5:a1:52:e8:d7:d4:58: b1:48:75:c1:75:95:21:e2:e6:b6:e3:14:13:0c:cd:a6:03:f4: 65:f6:19:8c:ae:60:57:75:0c:ea:7e:95:40:26:38:2a:ba:b3: ba:cd:22:0d:66:21:2c:3e:0d:d6:49:8c:01:2d:c6:16:b6:84: 87:df:73:8d:2a:a6:0f:32:2a:7d:30:10:2d:36:75:50:24:11: 44:13:92:88:34:63:00:d5:c7:52:85:2c:a3:75:cf:2f:c5:8b: 5a:27:5b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyooV8uv6+mQFR5qKTkp2P5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMzAxMDkwMTEzWhcNMjYwMzAyMDkwMTEzWjAzMTEwLwYDVQQD EyhiOGQ3OTkzYmQ2ZjcyMDY4MWMwZjFhN2U2ZGM1ZThlNjE1YWUxOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH8LVbygr8VY+Ftyw42zJ4Rj6tcs vS0dwMU5XzLWaMqRgJeqX8dhudZG1QrxtHG4sbSSl+GOKV0kmEq0KfOKBe12ax5a 0jrSiqES3z6r5CIhNmNfkT4dCp2NgvwAyvKkl07UguO6Jewx9iSlyRRy1C0lHOQt hH9YZDZrVowdg1Xrd6A8hWsjaahKZxp6vvIMG4mppWPjx3jYG1NqQRU8Ub2LXyBb L+a7AX0HD90mX9Zns7ifVE6lXCilwxEtTIeNzx11gc6EK7KZsJr18VQeQNU4p3Dk vduH9Xoa5Z8QfSsyJ2Ymjv0ftkVWmH6WAfZMksjlfgR5I07yZyeCsG240QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjXmTvW9yBoHA8afm3F6OYVrhl6MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLuwD3Uu n06Q8ic+qAEViJwqBge6aU5hIC1osblmebKK2UDlPfpEUWqkqeDxqHJxeJfyWtDp dN0g2wS0Vw2XWD6AyZITMyHNWPjHMkPs7+sTz4r0nRQcX8wJPHIVR3ZnvzYikbmr IV9DnUrAFrKL5d7XlI7+I0gV3IONhHuEDsFTUeFwNrEym9drnlk8/WbcmPZ9KIz0 67WR5du1oVLo19RYsUh1wXWVIeLmtuMUEwzNpgP0ZfYZjK5gV3UM6n6VQCY4Krqz us0iDWYhLD4N1kmMAS3GFraEh99zjSqmDzIqfTAQLTZ1UCQRRBOSiDRjANXHUoUs o3XPL8WLWidb1Q== -----END CERTIFICATE-----Generated at Sun Mar 1 16:36:31 2026 by rpki-client