$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: eMOEDNvujlWPloH2EgQlRL2SBufvLkiUJsLB9IQIUzk= Subject key identifier: 20:1F:E7:5F:53:7F:51:44:04:38:0B:4E:FC:BE:C9:8D:0B:EB:E5:A1 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019D981901AD7B8440FFA59FC5A89BA31FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0A36 Signing time: Thu 16 Apr 2026 21:01:08 +0000 Manifest this update: Thu 16 Apr 2026 21:01:08 +0000 Manifest next update: Fri 17 Apr 2026 21:01:08 +0000 Files and hashes: 1: 1Xx5yOqEiQ7w5oHl6pnI_Y99OJs.roa (hash: Qx3nCAa4Beyb+QGxZu/J+rc4mQgVdLQcLRYPOorkMM4=) 2: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 3: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 6: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 7: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 8: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: eKbJ0aT/p5+lBHDJi2P+ZVheshETmHCd9ScM9kVlnU0=) 10: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 11: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 12: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:19:01:ad:7b:84:40:ff:a5:9f:c5:a8:9b:a3:1f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Apr 16 21:01:08 2026 GMT Not After : Apr 17 21:01:08 2026 GMT Subject: CN=201fe75f537f514404380b4efcbec98d0bebe5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:fa:08:b5:12:61:9f:b6:2e:f0:cd:c9:76: e9:d9:c6:28:37:e1:d3:a9:b2:27:7f:59:b6:84:08: 14:6e:bc:80:68:69:f9:1a:b3:38:f2:1b:21:ef:f0: e7:0f:96:1f:5e:cb:98:c4:3a:d8:89:b0:9c:69:8c: a9:ff:46:98:b0:97:6d:b0:8b:72:9d:10:fa:08:89: 6d:fc:b3:97:05:b4:fe:a9:15:2d:c7:27:bd:bc:1a: 85:da:2f:92:07:ca:eb:3c:9c:49:03:a7:26:1e:f1: ac:dc:ca:93:6d:c2:94:6c:8c:f1:a5:db:53:19:59: 39:a3:4e:3f:40:f3:27:ac:ef:eb:d3:61:fa:6d:c2: 9d:0a:41:8b:fa:5b:9b:23:e7:19:0d:1e:9f:3c:70: 59:85:5f:c4:3e:8b:b2:48:62:06:c1:7c:0a:b1:c8: c5:fd:87:28:eb:04:7d:60:e4:f4:91:7b:2b:89:c6: 8c:c6:19:9e:79:36:e7:ae:2c:44:5c:32:7a:d4:f0: cb:5f:f7:d8:2d:00:e4:1e:72:2d:b0:5d:6b:98:81: 74:a9:85:dc:e1:77:4b:c0:0e:37:17:35:b8:a4:cb: 3e:05:d2:40:31:8b:7b:86:bc:c2:67:18:bb:6a:f9: 7c:63:38:7b:6c:6a:79:9a:97:ca:3b:be:dc:56:a2: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:E7:5F:53:7F:51:44:04:38:0B:4E:FC:BE:C9:8D:0B:EB:E5:A1 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:5d:b8:e5:37:70:d7:6d:5f:11:7b:be:56:ba:ba:25:78: ec:e8:59:06:90:f3:c8:8c:1a:bb:87:89:2f:f2:8f:f6:db:cf: 81:92:ab:7d:46:3c:7d:46:60:4c:61:48:c3:63:c6:03:f5:c8: 2b:64:12:26:c1:fd:1b:05:e8:a6:bf:3c:6b:fe:60:4a:0f:3e: 85:c1:00:3d:15:23:06:fa:ec:bf:c6:22:29:c2:b2:23:53:cb: 36:ca:0a:69:ef:fb:9d:c1:72:38:ea:09:9d:54:68:16:08:5f: b2:d5:11:29:d4:55:5c:1b:27:ef:dd:17:5d:76:49:12:d1:6a: 32:dc:99:da:66:18:87:57:fe:3f:38:b3:ac:03:85:6a:7d:df: 93:e6:f4:c9:6e:11:e4:cd:ba:2a:c8:9f:1c:07:f3:c7:8f:5c: 4e:86:13:76:6e:a2:84:e0:29:94:da:d0:22:54:87:5e:b7:e5: b3:d4:b0:42:eb:bc:20:1d:00:05:14:46:14:3e:93:b2:5c:3e: 04:21:1f:86:5f:e1:16:8b:57:cd:71:41:6c:23:c5:26:07:44: 61:2f:20:dc:94:93:28:82:2b:d3:f9:ef:5e:0c:d0:2c:47:25: 66:5e:84:4c:9a:88:1c:ff:5b:e6:7c:9f:54:03:49:12:86:dd: 27:e1:63:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGQGte4RA/6Wfxaibox/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwNDE2MjEwMTA4WhcNMjYwNDE3MjEwMTA4WjAzMTEwLwYDVQQD EygyMDFmZTc1ZjUzN2Y1MTQ0MDQzODBiNGVmY2JlYzk4ZDBiZWJlNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd/6CLUSYZ+2LvDNyXbp2cYoN+HT qbInf1m2hAgUbryAaGn5GrM48hsh7/DnD5YfXsuYxDrYibCcaYyp/0aYsJdtsIty nRD6CIlt/LOXBbT+qRUtxye9vBqF2i+SB8rrPJxJA6cmHvGs3MqTbcKUbIzxpdtT GVk5o04/QPMnrO/r02H6bcKdCkGL+lubI+cZDR6fPHBZhV/EPouySGIGwXwKscjF /Yco6wR9YOT0kXsricaMxhmeeTbnrixEXDJ61PDLX/fYLQDkHnItsF1rmIF0qYXc 4XdLwA43FzW4pMs+BdJAMYt7hrzCZxi7avl8Yzh7bGp5mpfKO77cVqJ/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAf519Tf1FEBDgLTvy+yY0L6+WhMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8FduOU3 cNdtXxF7vla6uiV47OhZBpDzyIwau4eJL/KP9tvPgZKrfUY8fUZgTGFIw2PGA/XI K2QSJsH9GwXopr88a/5gSg8+hcEAPRUjBvrsv8YiKcKyI1PLNsoKae/7ncFyOOoJ nVRoFghfstURKdRVXBsn790XXXZJEtFqMtyZ2mYYh1f+PzizrAOFan3fk+b0yW4R 5M26KsifHAfzx49cToYTdm6ihOAplNrQIlSHXrfls9SwQuu8IB0ABRRGFD6Tslw+ BCEfhl/hFotXzXFBbCPFJgdEYS8g3JSTKIIr0/nvXgzQLEclZl6ETJqIHP9b5nyf VANJEobdJ+FjLw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:32:56 2026 by rpki-client