$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json) Hash identifier: t2nXWKB1DLqt9TfK+Y3T+wPfZO867oMKuYsYMLEW0Rw= Subject key identifier: EF:DB:77:50:19:A3:6C:37:8F:96:1F:0A:52:C5:82:7C:1B:61:1D:C9 Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019E1CB48F3351B22A2F29B569346C44180B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft Manifest number: 19CA Signing time: Tue 12 May 2026 15:00:55 +0000 Manifest this update: Tue 12 May 2026 15:00:55 +0000 Manifest next update: Wed 13 May 2026 15:00:55 +0000 Files and hashes: 1: DphGqvZQrkP0lkUlvlMiKlE5y0Y.roa (hash: CLYeeAHjhgfN3HTjVosWu6pT5KYLJeLfJmbxJK7H16E=) 2: F8c1izE-9RJV-qYbebPoSy0OO04.roa (hash: R4SfTxNG21QdwRjkrLqrgaOvhx8zK8zawB+KroMpRRM=) 3: HxStnFLPdzsPC0WO8bGixWpm5Zw.roa (hash: fuIxA9vCxBfZyKv0l+am+TRHrbOUD64a3j7zrUUU+R4=) 4: KHKpEj2THKj58bA0t2ta3IDNpvE.roa (hash: Pq1zZUJA84ZOxc7RlsG24SrZSENVQ5pv+oFLBtS7LdY=) 5: Xp1cuH5GckRebQbl04bBVOXl9c0.roa (hash: G9DoetqG3+uFPEjScRTeA6vdZfkVk+8JEJjCMtB7vJ4=) 6: cjuW9zHucIxHadivGPbPdZXZ_58.roa (hash: +/HavscS0K4ByxH8Sd+pAVMLMiLtpvePtkXZTD1HVWg=) 7: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (hash: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0=) 8: kHJAbRZAn8BmDoNVsIR_1TrPdwU.roa (hash: MQR9UxJH6mrGqbSYbaZNH4TCjTvPKDgCy2uSCTLGIl4=) 9: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: CPS/1zPbKTZcjBcl5tb+5fkfKX1pLPwTSVY3NCiP+Js=) 10: oFjLnFx0PgjFBuwtiF_MYSFpqmA.roa (hash: VK+JXOgRMBfH6LlIiFROL5a7HEYqeypevfrTL4MJN2k=) 11: qd72DKJaICZWiagHwebWP0vFOJ8.roa (hash: /V0/an8AE34Kq1g8LUh0t2FSys6TP8h7lRi/4uGrR90=) 12: scipXrLku0FsLTMhFiRQqW2YNNI.roa (hash: 27jUzZWoywelCKzQdsVleudIQaMJ5nu6JvgSeIJacw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:8f:33:51:b2:2a:2f:29:b5:69:34:6c:44:18:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: May 12 15:00:55 2026 GMT Not After : May 13 15:00:55 2026 GMT Subject: CN=efdb775019a36c378f961f0a52c5827c1b611dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:31:9c:ee:a0:22:e2:2b:b2:d1:98:62:fa: 92:5e:99:df:bb:22:cc:42:bf:fc:69:7c:da:9f:82: c3:51:3e:7b:0a:94:21:61:18:61:7f:3a:31:27:b5: 25:48:83:62:78:72:9d:04:28:de:1a:66:2f:4f:82: 7a:79:62:5a:8c:7f:e5:1b:fc:5f:3c:fb:71:b4:4f: 8a:1c:e9:86:bf:8e:27:35:90:d7:9f:02:68:57:dc: 09:96:ef:05:a2:cd:46:6d:c8:ae:5e:15:d2:e0:82: 62:97:31:a3:d6:5a:5a:30:ad:52:14:fa:92:73:8b: d6:27:45:76:37:e0:00:7a:4a:a4:0a:7e:ad:1d:c2: ea:c5:59:7f:98:c5:36:99:2c:c2:75:98:cc:bb:7f: a2:b5:36:3e:f4:9d:9d:a7:d6:ba:da:a3:75:84:fa: 0f:3f:94:e8:1b:6e:31:1e:a6:f6:bf:77:6f:34:dd: d5:62:11:80:9b:a5:dc:e3:ad:0c:42:f5:6f:77:6f: 0a:5d:cf:e5:8c:fc:3a:ec:54:a7:97:65:bc:d1:04: 59:28:87:b8:1d:03:1d:f1:b9:2c:bf:41:1d:a3:02: 45:0d:05:88:96:45:2c:b0:79:0e:fb:d0:4b:a5:e6: 7a:86:61:f3:9a:b0:c2:ad:ed:7b:25:7e:68:c5:67: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DB:77:50:19:A3:6C:37:8F:96:1F:0A:52:C5:82:7C:1B:61:1D:C9 X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3d:72:ea:b2:93:fe:f8:99:a3:4a:c3:18:28:ff:39:4d:32: 62:0d:e2:78:5d:12:7b:94:2f:a7:aa:b3:c7:e7:98:58:a0:3c: 12:dc:c5:c8:34:77:1a:73:23:27:9d:f8:d8:09:02:5d:b2:1f: 5b:74:71:9e:07:c2:94:17:21:0e:7b:2d:de:12:54:11:90:e1: d6:bf:fc:bf:70:3a:da:43:fd:6b:97:50:68:f1:c2:96:78:b8: 0e:26:40:f3:4c:3c:b2:16:56:12:83:25:30:cc:28:01:84:f1: 6f:c2:2b:29:a9:51:53:08:91:06:66:72:b4:96:a5:b9:5a:98: 63:58:03:1d:d3:e5:66:ab:97:69:c5:15:d5:11:6b:ad:51:a4: 80:3d:24:dc:40:8d:d5:7e:29:4d:9c:d6:75:fb:a4:83:2e:4a: 3e:98:35:0f:cc:66:a0:78:34:15:cc:cd:1e:2b:c5:6f:59:dc: cb:eb:30:6f:59:ab:c4:bd:0b:4b:43:4f:db:fd:44:02:4c:a4: f7:83:97:be:95:f8:fd:2c:a5:00:3d:2e:9e:23:8d:59:dd:0b: a8:33:87:2e:5f:c9:06:36:43:00:09:17:7c:18:cf:1b:37:8a: c8:5e:3f:55:f3:61:6e:68:6a:28:55:04:96:e3:2e:b5:35:2f: 12:0e:e0:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctI8zUbIqLym1aTRsRBgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwNTEyMTUwMDU1WhcNMjYwNTEzMTUwMDU1WjAzMTEwLwYDVQQD EyhlZmRiNzc1MDE5YTM2YzM3OGY5NjFmMGE1MmM1ODI3YzFiNjExZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosExnO6gIuIrstGYYvqSXpnfuyLM Qr/8aXzan4LDUT57CpQhYRhhfzoxJ7UlSINieHKdBCjeGmYvT4J6eWJajH/lG/xf PPtxtE+KHOmGv44nNZDXnwJoV9wJlu8Fos1GbciuXhXS4IJilzGj1lpaMK1SFPqS c4vWJ0V2N+AAekqkCn6tHcLqxVl/mMU2mSzCdZjMu3+itTY+9J2dp9a62qN1hPoP P5ToG24xHqb2v3dvNN3VYhGAm6Xc460MQvVvd28KXc/ljPw67FSnl2W80QRZKIe4 HQMd8bksv0EdowJFDQWIlkUssHkO+9BLpeZ6hmHzmrDCre17JX5oxWdGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/bd1AZo2w3j5YfClLFgnwbYR3JMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD1y6rKT /viZo0rDGCj/OU0yYg3ieF0Se5Qvp6qzx+eYWKA8EtzFyDR3GnMjJ5342AkCXbIf W3RxngfClBchDnst3hJUEZDh1r/8v3A62kP9a5dQaPHClni4DiZA80w8shZWEoMl MMwoAYTxb8IrKalRUwiRBmZytJaluVqYY1gDHdPlZquXacUV1RFrrVGkgD0k3ECN 1X4pTZzWdfukgy5KPpg1D8xmoHg0FczNHivFb1ncy+swb1mrxL0LS0NP2/1EAkyk 94OXvpX4/SylAD0uniONWd0LqDOHLl/JBjZDAAkXfBjPGzeKyF4/VfNhbmhqKFUE luMutTUvEg7gCg== -----END CERTIFICATE-----Generated at Wed May 13 00:56:54 2026 by rpki-client