$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: RQ2wUHanuJRNNOi3vuMdXACJf6DVWBNCdlfzMH46rzw= Subject key identifier: F9:C6:43:68:9B:18:74:21:90:8D:0C:09:34:09:CE:96:5D:2A:4C:AA Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 01A0DFBD1AF346B3D7629A2CED490E196421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 10E2 Signing time: Sat 26 Sep 2026 22:01:47 +0000 Manifest this update: Sat 26 Sep 2026 22:01:47 +0000 Manifest next update: Sun 27 Sep 2026 22:01:47 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: R2XR66+CbnpqcICpSMIW8Xhi/zXdVTZ40GdyRILdAMc=) 3: QSUim-oJI7quDVdAPsLmjgxRP2Y.roa (hash: eJHNXVy0/883iOfWh3J9+VQsmwNkzJsJL/pzsURiO8s=) 4: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 5: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 6: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 7: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 8: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:bd:1a:f3:46:b3:d7:62:9a:2c:ed:49:0e:19:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Sep 26 22:01:47 2026 GMT Not After : Sep 27 22:01:47 2026 GMT Subject: CN=f9c643689b187421908d0c093409ce965d2a4caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:c2:c5:8e:62:c2:d8:21:9b:3d:ed:47:14: 17:14:78:63:6e:02:f3:37:43:b2:f3:b4:ef:ce:8c: 4e:4b:87:cd:d0:e4:9f:35:f2:55:f1:46:9d:b1:06: 89:2a:fa:d2:2d:eb:42:f5:08:a8:ae:d8:7b:f6:c6: a8:da:09:c7:5f:68:a6:28:ed:40:53:57:b3:b4:45: f8:78:0f:1b:ec:9e:64:a7:16:31:37:2d:82:d6:51: b9:55:4f:bb:57:c1:36:ee:d4:0d:38:92:66:27:62: 92:e6:9e:4a:3d:4b:d0:f2:93:66:0e:88:95:b5:c3: eb:10:b3:ee:40:47:a5:2c:a4:0b:15:1a:78:1b:32: 30:d8:02:aa:71:72:cc:b5:de:3f:32:92:95:e8:04: e3:de:1e:d0:53:43:0a:74:64:f8:9f:b5:6f:4a:8b: 47:76:29:06:1a:d8:9b:8e:7d:65:6b:aa:33:d2:5a: fa:47:19:bc:f1:52:2a:fd:51:18:7a:82:6e:67:47: a9:3b:bb:35:67:f6:55:fd:b7:e2:47:51:74:f4:a2: 25:fd:5e:0a:53:ea:09:37:c8:9b:07:72:13:22:c4: ef:db:4f:77:a5:0d:a3:24:19:31:74:f8:cd:1b:c4: c2:fc:c5:08:98:01:bb:c9:84:e4:d8:7e:5c:e2:a1: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:43:68:9B:18:74:21:90:8D:0C:09:34:09:CE:96:5D:2A:4C:AA X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f8:2d:aa:8e:90:19:94:2b:b5:2c:f9:53:30:1d:17:c2:9f: ea:9c:9b:88:98:44:07:94:b6:26:c8:2a:d0:0b:a2:51:a2:6b: 30:87:ba:04:9b:ed:4b:62:10:e0:7c:e1:1e:17:38:d2:13:23: 0c:e2:14:6c:44:df:f2:59:8a:5d:91:e8:1e:cc:1c:67:03:15: 29:fb:d8:dd:26:13:a0:03:5c:c1:f9:61:f1:02:e1:f0:a0:d9: 1a:05:61:8b:aa:f9:09:1e:41:3c:94:5b:c6:ca:95:57:ee:7e: a4:19:a3:02:7a:3c:35:74:1d:e2:1b:56:19:cb:f7:14:1e:8c: aa:75:7c:e0:c2:3d:bf:65:b5:d6:20:19:1b:40:51:7a:c6:ab: 7f:2c:a2:d6:e5:20:3a:78:5f:85:cd:c2:64:de:04:25:69:9a: 07:f8:21:41:42:f3:d2:e7:5a:25:3e:53:bd:d2:d8:22:4c:c5: f3:74:d6:85:99:59:f3:8c:4e:05:7e:6b:78:54:58:2f:f4:d9: 8d:87:cc:6e:79:7d:9f:09:4b:b7:7a:dd:2d:1b:68:9c:ba:c6: 3c:0d:31:7f:6b:82:2d:0e:b4:92:fc:a1:74:58:83:79:85:b1: f5:8b:ce:f2:cd:67:b3:1d:35:82:79:14:48:82:19:7c:f0:18: 1c:db:a3:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfvRrzRrPXYpos7UkOGWQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwOTI2MjIwMTQ3WhcNMjYwOTI3MjIwMTQ3WjAzMTEwLwYDVQQD EyhmOWM2NDM2ODliMTg3NDIxOTA4ZDBjMDkzNDA5Y2U5NjVkMmE0Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyXCxY5iwtghmz3tRxQXFHhjbgLz N0Oy87TvzoxOS4fN0OSfNfJV8UadsQaJKvrSLetC9Qiorth79sao2gnHX2imKO1A U1eztEX4eA8b7J5kpxYxNy2C1lG5VU+7V8E27tQNOJJmJ2KS5p5KPUvQ8pNmDoiV tcPrELPuQEelLKQLFRp4GzIw2AKqcXLMtd4/MpKV6ATj3h7QU0MKdGT4n7VvSotH dikGGtibjn1la6oz0lr6Rxm88VIq/VEYeoJuZ0epO7s1Z/ZV/bfiR1F09KIl/V4K U+oJN8ibB3ITIsTv2093pQ2jJBkxdPjNG8TC/MUImAG7yYTk2H5c4qFHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnGQ2ibGHQhkI0MCTQJzpZdKkyqMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfgtqo6Q GZQrtSz5UzAdF8Kf6pybiJhEB5S2Jsgq0AuiUaJrMIe6BJvtS2IQ4HzhHhc40hMj DOIUbETf8lmKXZHoHswcZwMVKfvY3SYToANcwflh8QLh8KDZGgVhi6r5CR5BPJRb xsqVV+5+pBmjAno8NXQd4htWGcv3FB6MqnV84MI9v2W11iAZG0BResarfyyi1uUg Onhfhc3CZN4EJWmaB/ghQULz0udaJT5TvdLYIkzF83TWhZlZ84xOBX5reFRYL/TZ jYfMbnl9nwlLt3rdLRtonLrGPA0xf2uCLQ60kvyhdFiDeYWx9YvO8s1nsx01gnkU SIIZfPAYHNuj3Q== -----END CERTIFICATE-----Generated at Sun Sep 27 07:50:26 2026 by rpki-client