$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: unLX+FuiXfiYvGl5gZtt80MIY66urdejcBuuMFU9VzU= Subject key identifier: B6:38:4D:EE:94:10:FC:7D:28:9C:9D:09:A0:F8:DD:BE:28:A1:9F:FC Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 01A0D426F566B1F49D541DD39D3C3EB3355C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 10DC Signing time: Thu 24 Sep 2026 16:01:57 +0000 Manifest this update: Thu 24 Sep 2026 16:01:57 +0000 Manifest next update: Fri 25 Sep 2026 16:01:57 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: Mz8ApNKrR2gksDg8C6KB/IhXFl5QoSSLo2gXPikNbt8=) 3: QSUim-oJI7quDVdAPsLmjgxRP2Y.roa (hash: eJHNXVy0/883iOfWh3J9+VQsmwNkzJsJL/pzsURiO8s=) 4: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 5: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 6: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 7: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 8: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:f5:66:b1:f4:9d:54:1d:d3:9d:3c:3e:b3:35:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Sep 24 16:01:57 2026 GMT Not After : Sep 25 16:01:57 2026 GMT Subject: CN=b6384dee9410fc7d289c9d09a0f8ddbe28a19ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:80:00:3e:4f:65:f2:e8:ec:cc:5c:f5:ac: c2:1b:57:d0:12:c5:a6:68:87:82:f8:90:f8:63:b8: 27:88:bc:93:20:f8:36:60:b3:0a:5b:b6:cf:49:f0: 97:d1:0a:0e:85:36:63:58:ae:c5:32:92:3f:32:aa: b2:44:19:5d:fb:06:2c:79:48:9c:12:79:e5:83:28: c0:d2:0c:da:1b:42:d8:ab:4e:6c:98:4f:52:74:41: 4f:3e:91:c4:68:7b:0d:41:b7:a6:71:27:02:3e:27: 98:47:fe:45:52:ba:48:a1:4e:d0:6f:40:9c:b9:31: 88:78:78:fe:a6:3b:ad:7a:88:b4:e2:65:dc:48:71: b5:3e:13:d6:33:9c:c3:ff:bf:bc:31:f5:c7:f4:91: 63:24:67:e4:52:cb:01:02:2b:ac:8d:c0:58:d9:0e: 46:ea:59:62:7b:c1:30:68:db:37:1a:80:e6:d1:af: 91:4d:d5:34:4b:71:bc:a7:a4:66:40:e7:53:96:85: b3:b1:92:58:ca:2a:91:6c:0f:01:fc:b7:ca:85:63: 75:de:fa:c3:8a:37:f4:a5:3e:fa:0a:43:97:76:46: 1f:ae:72:a7:14:c2:ed:e5:05:53:1e:16:5b:40:1a: 8c:12:77:fc:e5:39:ef:91:2e:43:0f:be:dc:77:1d: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:38:4D:EE:94:10:FC:7D:28:9C:9D:09:A0:F8:DD:BE:28:A1:9F:FC X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a0:71:c5:ea:7f:f3:9b:59:31:c1:c7:cc:d3:de:0c:11:d2: 9b:15:b7:9d:e8:63:3e:91:62:75:d0:18:c6:56:ab:3c:5c:4d: 1f:5d:14:7a:6f:24:70:b0:ec:86:ad:a8:89:fb:91:9d:8e:6b: 16:0d:26:67:ba:d2:38:4f:9a:54:89:e7:44:29:0f:9f:85:52: 85:40:66:92:8b:20:ff:77:49:e5:09:fd:42:6c:97:0b:a4:10: c5:99:f2:4a:e2:7f:a0:5c:ad:b8:9b:d1:7d:04:b4:e3:dd:92: 8e:9f:0e:63:00:db:27:ae:e4:c3:89:16:10:95:51:92:5a:98: e1:32:33:d5:f6:54:cc:de:f7:4a:24:34:e0:68:c2:68:a1:cf: f7:5b:ec:e7:71:93:f4:55:5a:0f:7f:01:0e:a5:0f:86:72:07: ba:24:72:6d:b1:83:47:2e:7d:af:59:25:b6:a1:88:a5:4c:da: b5:a6:4c:5f:8e:6c:0e:5c:b1:41:33:6f:b4:89:e7:69:8f:32: aa:a3:0b:61:41:18:cd:fe:a0:fa:6e:28:a7:6b:bf:ec:45:39: 63:0b:41:f5:3b:52:a5:c3:b0:ae:ff:e0:db:a3:6e:09:74:31: 5b:e2:8b:fe:e7:34:26:fd:ca:25:04:d0:1a:4a:9e:14:76:26: 67:31:0d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJvVmsfSdVB3TnTw+szVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwOTI0MTYwMTU3WhcNMjYwOTI1MTYwMTU3WjAzMTEwLwYDVQQD EyhiNjM4NGRlZTk0MTBmYzdkMjg5YzlkMDlhMGY4ZGRiZTI4YTE5ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriaAAD5PZfLo7Mxc9azCG1fQEsWm aIeC+JD4Y7gniLyTIPg2YLMKW7bPSfCX0QoOhTZjWK7FMpI/MqqyRBld+wYseUic EnnlgyjA0gzaG0LYq05smE9SdEFPPpHEaHsNQbemcScCPieYR/5FUrpIoU7Qb0Cc uTGIeHj+pjuteoi04mXcSHG1PhPWM5zD/7+8MfXH9JFjJGfkUssBAiusjcBY2Q5G 6llie8EwaNs3GoDm0a+RTdU0S3G8p6RmQOdTloWzsZJYyiqRbA8B/LfKhWN13vrD ijf0pT76CkOXdkYfrnKnFMLt5QVTHhZbQBqMEnf85TnvkS5DD77cdx0HjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY4Te6UEPx9KJydCaD43b4ooZ/8MB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6Bxxep/ 85tZMcHHzNPeDBHSmxW3nehjPpFiddAYxlarPFxNH10Uem8kcLDshq2oifuRnY5r Fg0mZ7rSOE+aVInnRCkPn4VShUBmkosg/3dJ5Qn9QmyXC6QQxZnySuJ/oFytuJvR fQS0492Sjp8OYwDbJ67kw4kWEJVRklqY4TIz1fZUzN73SiQ04GjCaKHP91vs53GT 9FVaD38BDqUPhnIHuiRybbGDRy59r1kltqGIpUzataZMX45sDlyxQTNvtInnaY8y qqMLYUEYzf6g+m4op2u/7EU5YwtB9TtSpcOwrv/g26NuCXQxW+KL/uc0Jv3KJQTQ GkqeFHYmZzENHQ== -----END CERTIFICATE-----Generated at Fri Sep 25 01:16:22 2026 by rpki-client