$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: 5ESGsIOE9e7K3oHJSqikg89yeNGzVIyyMyHNNIgmSKc= Subject key identifier: 55:B0:B0:C0:1A:3E:A5:06:FB:6C:EC:6B:7F:F2:B0:85:BB:8C:7A:CF Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019D2695F1DDB42D317F21039D44E696341D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 1653 Signing time: Wed 25 Mar 2026 20:00:53 +0000 Manifest this update: Wed 25 Mar 2026 20:00:53 +0000 Manifest next update: Thu 26 Mar 2026 20:00:53 +0000 Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=) 2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=) 3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=) 4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=) 5: KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa (hash: 5MjMmws8ncjSHeVa5J4LmPdEnI2b6Mjqn9vh8n6pFxs=) 6: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: 0OXfu/leqyrBXMmizK4psU5nyD2pXZJm9ZygbUJGcv0=) 7: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=) 8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=) 9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=) 10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=) 11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:95:f1:dd:b4:2d:31:7f:21:03:9d:44:e6:96:34:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Mar 25 20:00:53 2026 GMT Not After : Mar 26 20:00:53 2026 GMT Subject: CN=55b0b0c01a3ea506fb6cec6b7ff2b085bb8c7acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:88:bf:06:a5:88:11:22:6a:4f:28:b5:c3: 03:39:33:c5:b5:96:ff:9c:b9:53:48:f9:49:b1:35: 51:f4:46:b3:15:e5:97:50:ba:1d:f3:5c:a9:eb:1b: 9e:ac:9e:bc:1b:59:4a:57:b6:54:55:88:e7:cb:68: 20:22:75:37:90:7f:09:01:13:c6:39:6c:3f:0d:ba: c9:82:07:57:07:b6:98:3b:af:6f:09:f8:af:7e:01: ef:ac:30:28:6e:f9:88:8f:c7:62:d2:e1:6b:c4:0c: d5:18:4d:74:32:fb:12:b7:58:29:a8:9c:22:74:e9: 47:d1:78:eb:79:ff:27:84:5c:5b:75:92:5c:52:24: c7:4f:0b:90:04:45:bb:3d:8b:eb:eb:35:64:4b:a7: 0e:63:b5:b8:83:dd:8a:49:5b:ab:c6:d7:bc:1d:e6: cf:04:a2:b7:9a:bd:a4:b3:aa:5c:d1:84:59:6b:00: f6:12:d1:68:20:ae:73:25:39:11:c2:18:02:b9:6c: 50:15:1f:a7:54:09:6c:69:a6:79:48:6e:fa:71:59: c8:cf:22:ca:64:5a:50:e1:f6:7e:38:b9:b0:fb:75: c0:c9:1f:52:fb:7c:de:e6:1b:9b:bf:30:aa:7c:9b: 49:34:83:4f:26:67:7e:62:1c:19:47:7b:d8:90:34: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B0:B0:C0:1A:3E:A5:06:FB:6C:EC:6B:7F:F2:B0:85:BB:8C:7A:CF X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:28:89:08:8e:38:f5:b3:86:e7:13:ed:9b:e6:7d:80:6c:c6: 0e:c9:81:16:1e:e0:8c:a4:60:7f:a0:aa:35:9c:88:f6:98:44: 4d:1d:90:6e:85:c8:bf:74:70:cf:86:f7:ea:72:b1:0e:89:15: 0b:f2:07:2c:eb:ef:28:a8:ef:d9:37:16:04:b0:1c:64:06:bd: ad:22:99:71:8b:f6:39:81:c1:04:3f:d3:4b:27:97:9f:fe:9c: d9:e6:fa:7e:d1:18:a6:c5:ac:d2:8d:03:8c:d0:d8:aa:ff:5e: 1a:a6:dc:85:13:bc:ae:00:b8:7a:65:bf:86:a2:50:de:db:07: de:bf:4b:26:ae:39:f0:5b:e0:91:9f:19:50:4e:0b:83:c1:4a: 22:2f:83:2a:85:92:cf:b3:b6:7e:7d:20:d9:38:99:a3:c9:b4: 2c:ce:36:09:1d:d7:8f:f3:a6:ae:4a:30:19:ec:a9:c5:60:af: eb:b3:6e:93:a9:b3:9e:a1:ac:86:e1:9f:bb:60:91:1c:b8:58: df:88:ad:e8:17:f6:99:33:7a:17:34:5c:ff:85:6b:97:6b:a2: af:3f:1a:06:7b:37:8e:e7:b0:aa:48:b0:09:6e:97:ce:b3:fe: 3c:5b:e4:5a:4e:26:e7:c4:77:2c:22:75:7b:de:cf:ca:e1:0a: 49:15:50:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mlfHdtC0xfyEDnUTmljQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMzI1MjAwMDUzWhcNMjYwMzI2MjAwMDUzWjAzMTEwLwYDVQQD Eyg1NWIwYjBjMDFhM2VhNTA2ZmI2Y2VjNmI3ZmYyYjA4NWJiOGM3YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTiIvwaliBEiak8otcMDOTPFtZb/ nLlTSPlJsTVR9EazFeWXULod81yp6xuerJ68G1lKV7ZUVYjny2ggInU3kH8JARPG OWw/DbrJggdXB7aYO69vCfivfgHvrDAobvmIj8di0uFrxAzVGE10MvsSt1gpqJwi dOlH0Xjref8nhFxbdZJcUiTHTwuQBEW7PYvr6zVkS6cOY7W4g92KSVurxte8HebP BKK3mr2ks6pc0YRZawD2EtFoIK5zJTkRwhgCuWxQFR+nVAlsaaZ5SG76cVnIzyLK ZFpQ4fZ+OLmw+3XAyR9S+3ze5hubvzCqfJtJNINPJmd+YhwZR3vYkDSW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWwsMAaPqUG+2zsa3/ysIW7jHrPMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyiJCI44 9bOG5xPtm+Z9gGzGDsmBFh7gjKRgf6CqNZyI9phETR2QboXIv3Rwz4b36nKxDokV C/IHLOvvKKjv2TcWBLAcZAa9rSKZcYv2OYHBBD/TSyeXn/6c2eb6ftEYpsWs0o0D jNDYqv9eGqbchRO8rgC4emW/hqJQ3tsH3r9LJq458FvgkZ8ZUE4Lg8FKIi+DKoWS z7O2fn0g2TiZo8m0LM42CR3Xj/OmrkowGeypxWCv67Nuk6mznqGshuGfu2CRHLhY 34it6Bf2mTN6FzRc/4Vrl2uirz8aBns3juewqkiwCW6XzrP+PFvkWk4m58R3LCJ1 e97PyuEKSRVQtw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:17:10 2026 by rpki-client