$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: B986xbujOLfj9fDwRnEXJFUbPy3RhrxrZ7FQ2Cfm8S0= Subject key identifier: 46:40:25:4A:54:AD:5F:A6:5B:0C:02:3E:8A:87:BC:26:7E:34:91:6C Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019EBE482E24ACD7B436C6517807CD25291E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0ACF Signing time: Sat 13 Jun 2026 00:01:01 +0000 Manifest this update: Sat 13 Jun 2026 00:01:01 +0000 Manifest next update: Sun 14 Jun 2026 00:01:01 +0000 Files and hashes: 1: 1Xx5yOqEiQ7w5oHl6pnI_Y99OJs.roa (hash: Qx3nCAa4Beyb+QGxZu/J+rc4mQgVdLQcLRYPOorkMM4=) 2: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 3: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: mQwTnMQsY7/qem+UWpSoPafT11D6ixlH7LoX+TuoMpI=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:48:2e:24:ac:d7:b4:36:c6:51:78:07:cd:25:29:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jun 13 00:01:01 2026 GMT Not After : Jun 14 00:01:01 2026 GMT Subject: CN=4640254a54ad5fa65b0c023e8a87bc267e34916c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:1c:ad:8d:49:d8:3c:86:3c:61:9f:b5:fa: 7f:66:82:57:e0:db:32:ad:77:78:18:e0:7d:82:65: d8:e6:7a:55:75:2e:95:c5:c7:d5:b3:8f:a4:3f:8f: e5:fd:a8:47:38:90:bd:28:3b:e0:4f:74:5f:61:88: 89:6d:59:b7:a4:f1:30:55:e3:98:21:4d:bf:36:36: 91:e3:bc:26:c9:9c:1c:4b:1a:17:68:34:c9:9f:de: 2a:1e:34:87:8f:0a:97:db:8e:f0:ac:1e:d6:1b:8a: f7:c2:5e:e1:3d:4d:85:3e:59:44:a6:61:22:91:83: 43:0d:8b:00:e9:3e:c2:fd:dc:8a:b0:ab:95:ae:dd: db:04:c6:8e:4b:ed:0b:af:47:0e:cd:ff:f4:15:48: e4:d9:85:f9:7a:15:bc:2e:3b:85:e6:ee:af:d0:96: e4:b0:64:5c:90:14:a0:6e:4e:fe:f3:64:df:45:b2: 7b:97:74:d0:69:54:aa:f9:b7:f2:f6:d3:6b:ef:6b: 01:a6:fc:55:1b:e7:d6:c2:aa:17:51:b1:0b:72:48: cb:ab:35:96:34:27:15:63:aa:77:ed:b2:b5:ca:61: 4f:92:13:d3:de:0b:6d:cd:f4:60:73:3e:9e:15:c0: 0b:fd:27:34:6b:96:c9:94:2f:d5:e0:ce:7c:9a:25: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:40:25:4A:54:AD:5F:A6:5B:0C:02:3E:8A:87:BC:26:7E:34:91:6C X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:76:0e:45:32:33:21:20:a9:b6:e4:4d:79:98:29:1d:00:a9: 6d:5e:6f:3e:45:7a:2c:5c:1f:93:10:1f:36:e5:49:60:3d:29: 65:e8:66:06:30:f2:6f:3b:7c:99:fe:e8:e9:e2:ee:e6:71:0d: 3e:67:2c:95:27:4d:05:96:0a:72:ee:c9:e8:4c:5e:f5:99:45: 39:92:c6:84:e8:98:09:cf:1f:4f:24:cb:3e:33:75:a5:1b:40: 04:06:9c:3d:b3:61:37:7e:20:80:a2:4a:d5:c2:26:9c:2d:44: ca:c4:0e:f9:27:80:da:04:bb:37:7d:2a:f6:91:a9:67:92:de: e6:53:cb:18:5f:1a:3c:32:4b:aa:5d:77:c5:b9:70:f2:31:9c: 44:ba:66:5f:89:53:02:8e:ae:ba:83:95:63:97:e7:a3:45:90: fd:3c:86:34:1f:39:b0:13:45:2c:15:c6:fa:1a:2a:73:99:6e: c2:d3:77:39:6e:5a:93:c6:1a:20:4b:ce:3a:2a:ea:b8:c3:df: c3:04:33:cd:d2:ce:e9:86:a9:06:ea:cc:29:3f:1b:d4:4f:b4: ca:c1:55:02:72:ea:75:14:b1:b6:fb:e2:0d:d3:ef:21:03:84: 1d:16:67:56:a3:72:74:2d:9e:f9:b2:9f:e3:8c:8d:58:1c:56: c1:de:6b:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+SC4krNe0NsZReAfNJSkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNjEzMDAwMTAxWhcNMjYwNjE0MDAwMTAxWjAzMTEwLwYDVQQD Eyg0NjQwMjU0YTU0YWQ1ZmE2NWIwYzAyM2U4YTg3YmMyNjdlMzQ5MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgQcrY1J2DyGPGGftfp/ZoJX4Nsy rXd4GOB9gmXY5npVdS6VxcfVs4+kP4/l/ahHOJC9KDvgT3RfYYiJbVm3pPEwVeOY IU2/NjaR47wmyZwcSxoXaDTJn94qHjSHjwqX247wrB7WG4r3wl7hPU2FPllEpmEi kYNDDYsA6T7C/dyKsKuVrt3bBMaOS+0Lr0cOzf/0FUjk2YX5ehW8LjuF5u6v0Jbk sGRckBSgbk7+82TfRbJ7l3TQaVSq+bfy9tNr72sBpvxVG+fWwqoXUbELckjLqzWW NCcVY6p37bK1ymFPkhPT3gttzfRgcz6eFcAL/Sc0a5bJlC/V4M58miVqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZAJUpUrV+mWwwCPoqHvCZ+NJFsMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInYORTIz ISCptuRNeZgpHQCpbV5vPkV6LFwfkxAfNuVJYD0pZehmBjDybzt8mf7o6eLu5nEN PmcslSdNBZYKcu7J6Exe9ZlFOZLGhOiYCc8fTyTLPjN1pRtABAacPbNhN34ggKJK 1cImnC1EysQO+SeA2gS7N30q9pGpZ5Le5lPLGF8aPDJLql13xblw8jGcRLpmX4lT Ao6uuoOVY5fno0WQ/TyGNB85sBNFLBXG+hoqc5luwtN3OW5ak8YaIEvOOirquMPf wwQzzdLO6YapBurMKT8b1E+0ysFVAnLqdRSxtvviDdPvIQOEHRZnVqNydC2e+bKf 44yNWBxWwd5rKQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:16:19 2026 by rpki-client