$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: L0KMuVYlLvuR4ATkYSeuFbJHesxRy5nqHeqLp68kGIw= Subject key identifier: 55:72:71:1D:B2:1F:50:10:96:90:EA:EE:C5:F1:31:08:47:41:45:D8 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01A0CE91199EA499EF8CCF840964C3F88422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0B75 Signing time: Wed 23 Sep 2026 14:00:10 +0000 Manifest this update: Wed 23 Sep 2026 14:00:10 +0000 Manifest next update: Thu 24 Sep 2026 14:00:10 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (hash: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 6: QVnjWF9wgJA5M4MFDyVAP5psvxY.roa (hash: vV2/z+y3NP1o0zHFV50djtlKYwkLxxVOvNRRHnw/fUU=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: S49hhmy4bOwqac16yOch8OZII60.roa (hash: Ip97DJR3nHAcsv9fMWbRUjBAkqDWdFOwd8aUSJDdJzM=) 9: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 10: Ww6I0-bFMkAzL3dUq8GFJz1Z4Xw.roa (hash: 7LXBch1nig/wJh6q/kWtYhq7i9O1hCn1Qc6Ofmdk2UQ=) 11: hJ67YINCOCNF7W6k24Xr2IHAh0M.roa (hash: Res6I9Apl5kT3tcbQh0grTsY7aCbi1+hDrSC4ffz3Yc=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: 3uqJoOA3I8dwLzoPm7nTn1h2HFIp9zG0SpU6BnwXv5Y=) 13: oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa (hash: CYKz7T4s6quVEcy44p9N3rA7vn+Am2lY+a9Hz6zcmtg=) 14: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (hash: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=) 15: s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa (hash: PX3/dss6fVnR1sM4prrLM9KGqiRqjaUHFQOQkts9Vkk=) 16: vGrraeOLPWbNUXMZ0-uMQ0ZFghk.roa (hash: lyyTQyUvfpVllBb+2yRmdAtUMHJ2bYtVjYxUF7Z8MNU=) 17: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 18: zdaO5pCjso7r8z8pVgSdFnBWBo8.roa (hash: g2bAlZpTBSFrnbDmE9GZ/X1CRpYTu/NW/NRQm0UK8VQ=) 19: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:91:19:9e:a4:99:ef:8c:cf:84:09:64:c3:f8:84:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Sep 23 14:00:10 2026 GMT Not After : Sep 24 14:00:10 2026 GMT Subject: CN=5572711db21f50109690eaeec5f13108474145d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:f6:29:06:a1:94:79:e5:0b:62:f0:5d:2a: c8:1d:e2:6d:6e:e7:ea:af:b3:b9:b3:64:1a:98:96: 1a:57:18:3e:c1:61:61:82:f8:bf:d9:f9:4e:a1:2b: 47:a7:a0:7f:67:9f:3c:b0:26:16:54:b7:c8:5b:e2: ff:01:08:a8:ad:a0:d0:8e:1e:c5:0a:52:35:be:50: f1:64:61:01:0e:6a:19:2e:51:23:1a:a0:f9:ec:2a: 62:de:36:30:6d:3e:93:c1:be:ef:0e:fc:68:1c:31: 85:85:51:bf:89:00:e2:ea:f1:81:d1:bd:6c:25:e9: ea:c8:75:ea:25:03:1d:b7:94:04:58:50:5a:0d:9c: 37:b1:da:bd:d2:8a:8c:8a:7d:16:e6:31:8e:4f:02: 38:d9:41:32:75:fa:40:50:9c:10:87:66:9c:e1:d6: c9:a8:1b:49:a5:4c:ec:16:9b:22:59:9f:57:42:0b: fe:97:29:19:c8:6e:d9:43:23:43:c1:1c:ca:de:70: 7a:af:e1:8c:0b:31:10:aa:93:05:dd:d6:b3:71:a9: f5:5c:fe:ac:88:91:e9:cd:c0:54:36:a5:5f:a2:ed: 49:f1:89:1d:56:e8:1e:58:db:1e:ce:73:d2:cf:85: 2d:57:26:84:49:8f:9d:ab:d8:dc:f1:f7:91:f9:2b: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:72:71:1D:B2:1F:50:10:96:90:EA:EE:C5:F1:31:08:47:41:45:D8 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:96:b4:02:cb:81:1c:ff:1d:95:0e:21:22:d5:4f:05:1a:9a: 27:37:88:18:d0:5e:ab:39:15:d0:51:b8:33:3f:14:44:00:f6: 19:7d:0d:ca:ae:fa:de:f5:27:ca:0c:96:8e:ca:fc:24:05:52: f4:0e:e0:63:e0:d0:4f:25:26:87:de:29:03:74:a2:03:41:03: 34:4d:10:6c:c2:ab:fe:9e:e2:8a:84:3a:38:4c:9d:c4:79:3d: 54:62:bd:61:6b:a6:85:e8:32:2f:f8:47:d3:0f:18:b3:c7:62: 35:75:92:cd:84:fe:cc:db:8c:b1:2a:00:f1:61:88:f7:79:23: 37:05:50:41:d1:c1:a8:97:4a:94:64:6a:90:28:05:cc:ef:bf: 43:1f:c5:fc:d4:83:87:46:f1:dd:15:de:51:d7:b1:4b:43:c9: 58:cd:f1:fd:e3:28:88:05:52:c5:a2:bd:98:29:a5:ef:e5:e2: 04:9a:a9:f0:c1:ae:50:e3:9f:9f:ef:45:4d:f2:3f:c5:bd:97: d6:05:b6:59:9b:ee:4c:00:fc:31:92:c0:4d:c9:49:9a:b0:cc: f6:f2:59:b6:78:02:c8:0c:18:cf:90:3e:63:62:86:4b:12:c8: 11:44:b1:f4:a1:bb:79:8b:62:39:e7:3f:3b:f9:ee:f8:d1:3d: 02:4b:63:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOkRmepJnvjM+ECWTD+IQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwOTIzMTQwMDEwWhcNMjYwOTI0MTQwMDEwWjAzMTEwLwYDVQQD Eyg1NTcyNzExZGIyMWY1MDEwOTY5MGVhZWVjNWYxMzEwODQ3NDE0NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7b2KQahlHnlC2LwXSrIHeJtbufq r7O5s2QamJYaVxg+wWFhgvi/2flOoStHp6B/Z588sCYWVLfIW+L/AQioraDQjh7F ClI1vlDxZGEBDmoZLlEjGqD57Cpi3jYwbT6Twb7vDvxoHDGFhVG/iQDi6vGB0b1s JenqyHXqJQMdt5QEWFBaDZw3sdq90oqMin0W5jGOTwI42UEydfpAUJwQh2ac4dbJ qBtJpUzsFpsiWZ9XQgv+lykZyG7ZQyNDwRzK3nB6r+GMCzEQqpMF3dazcan1XP6s iJHpzcBUNqVfou1J8YkdVugeWNseznPSz4UtVyaESY+dq9jc8feR+SvVxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVycR2yH1AQlpDq7sXxMQhHQUXYMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipa0AsuB HP8dlQ4hItVPBRqaJzeIGNBeqzkV0FG4Mz8URAD2GX0Nyq763vUnygyWjsr8JAVS 9A7gY+DQTyUmh94pA3SiA0EDNE0QbMKr/p7iioQ6OEydxHk9VGK9YWumhegyL/hH 0w8Ys8diNXWSzYT+zNuMsSoA8WGI93kjNwVQQdHBqJdKlGRqkCgFzO+/Qx/F/NSD h0bx3RXeUdexS0PJWM3x/eMoiAVSxaK9mCml7+XiBJqp8MGuUOOfn+9FTfI/xb2X 1gW2WZvuTAD8MZLATclJmrDM9vJZtngCyAwYz5A+Y2KGSxLIEUSx9KG7eYtiOec/ O/nu+NE9Aktjyg== -----END CERTIFICATE-----Generated at Wed Sep 23 19:40:33 2026 by rpki-client