$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: oJg9EynuKHUkJ4NDVl7rji4/PcTz+34H2Qf+IfycqRs= Subject key identifier: CB:82:41:54:77:07:79:AF:26:41:1F:0A:AA:85:E7:DD:C1:4D:62:E0 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019D2772B15AA0A4C4E3D056DF3657F4A5B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0EF4 Signing time: Thu 26 Mar 2026 00:02:01 +0000 Manifest this update: Thu 26 Mar 2026 00:02:01 +0000 Manifest next update: Fri 27 Mar 2026 00:02:01 +0000 Files and hashes: 1: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=) 2: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: MxRPs8vLzrRIiiCZQ19m+4We8b1DQ43f8YdmJUO/Yr8=) 3: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=) 4: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=) 5: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=) 6: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=) 7: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=) 8: dXvzyfOdOJH0q6xYVkjSdHKWSdE.roa (hash: 7SC4vR0R2kuqeE6TaEujJclCq7gK1eHalGhCH7IVpOw=) 9: fUaZWG_IPZnqKDdAMhvv99c2mz0.roa (hash: RwmFqSWLrw9UABaecDwpgjoOqF5LfYrQuwlDYozBirU=) 10: j2bhtci2rRb7PBQlLKaByIjyvws.roa (hash: yVGrMjz7Zm3px5ln/KZr2nj2ezCEkV9wTHK0Rkt5dDc=) 11: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=) 12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=) 13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=) 14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:b1:5a:a0:a4:c4:e3:d0:56:df:36:57:f4:a5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Mar 26 00:02:01 2026 GMT Not After : Mar 27 00:02:01 2026 GMT Subject: CN=cb824154770779af26411f0aaa85e7ddc14d62e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:bc:6b:85:ff:74:a9:43:0e:df:8e:8d:be: e3:25:39:c9:9d:17:66:ea:f8:f9:79:17:78:51:a4: ec:7a:36:ab:c5:d1:3e:4b:ff:2a:69:16:64:28:b6: e6:f8:4b:77:bf:aa:b3:bf:f3:1b:6a:a8:14:86:03: 35:84:9c:fd:82:95:f2:ba:4e:3b:b0:f3:a0:09:80: 49:a2:15:3e:68:a2:88:79:55:99:2a:18:f9:d5:99: 96:6c:7e:56:76:3a:c3:93:96:fa:7f:ce:5c:ee:1d: 26:3e:66:7a:bd:89:92:1e:64:16:c5:2f:10:9e:3b: ba:e9:9f:16:00:9d:f5:c5:fd:93:c5:11:de:30:8e: 96:64:97:d4:3c:d4:02:fc:e7:a4:0f:d3:82:f1:0e: 98:32:23:28:fb:50:f8:91:12:73:7d:99:a9:82:3a: fd:94:ac:42:b1:f3:03:93:cd:d7:15:d0:0e:42:7b: 6b:26:51:95:6d:5a:8f:e3:8c:91:79:ad:56:3c:57: 99:1c:e8:30:74:f4:8c:0b:ea:60:cb:9d:f9:b9:4f: 13:1d:06:e5:87:39:8c:1d:35:98:dd:3c:90:fc:c6: 4d:73:95:9e:9d:10:52:be:74:20:01:e7:b2:41:4b: 61:2a:ee:d2:49:9a:1b:74:67:c6:ef:4f:94:de:72: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:41:54:77:07:79:AF:26:41:1F:0A:AA:85:E7:DD:C1:4D:62:E0 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a4:6f:db:f7:9f:46:0a:14:80:e3:d3:99:63:73:85:a1:e4: b4:6e:6c:63:3f:4a:70:dd:61:fa:36:da:1e:8b:1e:56:99:a1: a0:07:b8:79:18:d1:05:97:23:63:f8:ec:44:3d:65:c4:f8:dd: 59:e3:36:d3:13:7f:e4:97:4e:d5:47:eb:d0:9d:eb:d7:a3:7e: a6:8d:2b:b7:a2:41:15:15:c5:04:f9:50:e2:99:bd:fd:e7:7e: 33:d3:1b:e5:d8:38:bf:ba:81:f1:ae:42:53:0d:ad:67:19:0c: 99:3c:d1:4f:51:57:81:13:d8:d5:91:60:e5:f3:5e:43:e8:6e: 6a:20:b2:8a:36:c2:87:ff:a8:fd:dd:1c:b2:b5:2d:e4:f9:7a: be:64:62:bb:eb:6c:d4:99:ae:57:9b:04:87:90:d2:48:a0:3b: 41:18:e2:de:31:05:7f:83:e9:8d:d4:e7:ba:e1:49:a2:59:cf: 8d:b8:79:e9:4e:52:06:1e:97:c0:98:23:32:5a:cc:25:79:fe: 6f:45:71:a5:1f:a2:73:42:28:da:63:c4:cd:70:75:ff:ba:22: 68:a1:1f:0a:4b:bc:bb:2a:dc:6c:cf:06:ce:9d:3c:54:3c:b6: ca:62:2c:d8:d6:a0:2e:64:48:52:14:e3:70:ff:62:f9:93:c3: da:f9:9d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncrFaoKTE49BW3zZX9KW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMzI2MDAwMjAxWhcNMjYwMzI3MDAwMjAxWjAzMTEwLwYDVQQD EyhjYjgyNDE1NDc3MDc3OWFmMjY0MTFmMGFhYTg1ZTdkZGMxNGQ2MmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZq8a4X/dKlDDt+Ojb7jJTnJnRdm 6vj5eRd4UaTsejarxdE+S/8qaRZkKLbm+Et3v6qzv/MbaqgUhgM1hJz9gpXyuk47 sPOgCYBJohU+aKKIeVWZKhj51ZmWbH5WdjrDk5b6f85c7h0mPmZ6vYmSHmQWxS8Q nju66Z8WAJ31xf2TxRHeMI6WZJfUPNQC/OekD9OC8Q6YMiMo+1D4kRJzfZmpgjr9 lKxCsfMDk83XFdAOQntrJlGVbVqP44yRea1WPFeZHOgwdPSMC+pgy535uU8THQbl hzmMHTWY3TyQ/MZNc5WenRBSvnQgAeeyQUthKu7SSZobdGfG70+U3nKDpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuCQVR3B3mvJkEfCqqF593BTWLgMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6Rv2/ef RgoUgOPTmWNzhaHktG5sYz9KcN1h+jbaHoseVpmhoAe4eRjRBZcjY/jsRD1lxPjd WeM20xN/5JdO1Ufr0J3r16N+po0rt6JBFRXFBPlQ4pm9/ed+M9Mb5dg4v7qB8a5C Uw2tZxkMmTzRT1FXgRPY1ZFg5fNeQ+huaiCyijbCh/+o/d0csrUt5Pl6vmRiu+ts 1JmuV5sEh5DSSKA7QRji3jEFf4PpjdTnuuFJolnPjbh56U5SBh6XwJgjMlrMJXn+ b0VxpR+ic0Io2mPEzXB1/7oiaKEfCku8uyrcbM8Gzp08VDy2ymIs2NagLmRIUhTj cP9i+ZPD2vmdiA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:54:43 2026 by rpki-client