$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: c9BQ9+G5YYVXSpHdnPhD2/9WNwKHk6NqVoaVrO08wsA= Subject key identifier: EC:03:0E:56:F5:68:C0:A8:69:7F:F5:39:E3:E6:C3:E9:FA:E1:EB:80 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019F905A2AE6A8B84D7B13180ABDFF9BD98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0AC4 Signing time: Thu 23 Jul 2026 19:00:55 +0000 Manifest this update: Thu 23 Jul 2026 19:00:55 +0000 Manifest next update: Fri 24 Jul 2026 19:00:55 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (hash: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: JP2E_UJFi_eEzACBA8u2c0uDfb8.roa (hash: YGH1JcJafoyWgqhD6Mi4OsdAWnJ/Ak1uDrRgAPydk/s=) 6: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 7: Rj7C9HFWuzFDb2nAa-azSTKfGOQ.roa (hash: vFchV3jK24P/EgvD1iXL5CmPkvqderYcShvnrsGp47Y=) 8: Ty5DpdqPOmydyDg_bQAaBkoGLp8.roa (hash: akNfDUTh82avi6l8pVfNZIbM0Tw4axKISXdVg+zVbtA=) 9: V9T0hlZ73UkhAau7M6ckTYNUkb4.roa (hash: fNCHN8qNcRcJku7ig7PyvdGoUoQirOawzI5B34WnFFM=) 10: WVBHWhF2YnsBiDKywLiLep0rjBY.roa (hash: aN0kcBOQHoBE4eQsK5sIL2kbPPgYYdq34kQ1AVnyC9A=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: p1vo5ywKUomBzojj1ugzSvkIPjo/0tAKYeVRKlPiVik=) 12: rJdWqNwcwvVn2cRQ4wiT19u3H50.roa (hash: fRAYNMu/dMAo2/lNnMW54zrbBgrOIMMSD9fJyPKOW54=) 13: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) 14: zly0HPjprxdyVkXHR1aHuRvdMX0.roa (hash: AhwMXgJ+aAK91jE5Y/Rl3QNmkW9Lhcao2gRRENl3Nek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:2a:e6:a8:b8:4d:7b:13:18:0a:bd:ff:9b:d9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jul 23 19:00:55 2026 GMT Not After : Jul 24 19:00:55 2026 GMT Subject: CN=ec030e56f568c0a8697ff539e3e6c3e9fae1eb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:32:e8:5f:f8:71:cb:d0:10:8e:50:9b:03: 70:10:13:1d:e3:69:0e:79:be:a8:71:dd:f6:9a:29: 47:3f:86:07:a0:6f:73:d8:44:36:27:70:af:c7:05: bb:ac:fe:1f:bb:be:d1:0d:ef:3c:85:b1:a6:0c:d5: c9:79:42:c8:3a:13:85:8b:be:5b:80:a0:e4:04:d5: ea:67:bf:f3:9f:dc:6d:b7:e4:83:b8:f8:e0:2e:b7: 02:e3:f8:5f:6d:91:cf:f6:94:e4:29:3e:5d:51:fd: a7:b8:48:1d:be:9f:5e:79:77:ab:c3:be:88:b7:93: 16:c3:4a:0a:fb:0a:17:db:ac:dc:8f:13:de:e4:b8: c8:a3:b3:24:3e:11:c1:27:cb:26:21:f0:43:b3:11: 8b:f8:54:4b:ac:51:7e:18:d1:93:75:6a:80:b5:6f: f5:53:e2:c3:ab:22:b1:08:e1:c2:bd:95:f7:ad:21: e5:63:65:3c:9b:79:59:f5:86:f5:40:88:a7:b2:eb: b1:74:31:7e:7c:56:b4:95:7a:92:6f:47:07:f0:c6: 16:c2:84:dc:5e:20:99:fb:39:f2:0a:19:6a:36:3e: c0:fb:9c:cf:58:08:7d:d8:ea:68:b5:9a:5a:08:e5: a4:4f:b2:0d:bb:50:0e:54:e4:80:6c:d0:a5:c2:9c: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:03:0E:56:F5:68:C0:A8:69:7F:F5:39:E3:E6:C3:E9:FA:E1:EB:80 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0d:e5:8c:41:9e:e7:20:f5:38:fc:dc:3e:93:cd:f2:10:61: 0a:11:0a:29:a4:31:68:6a:70:b0:78:31:6c:c3:f0:5f:b1:97: 35:d6:6b:b1:89:fd:73:1c:58:e9:c1:b6:54:6c:e0:20:63:c5: cf:64:b8:69:22:04:2c:de:cf:15:79:53:0a:00:44:27:6f:f4: b0:b5:8f:97:2a:8f:d2:98:02:8c:51:65:b4:0d:3f:78:ab:e2: 40:5b:cb:df:eb:7b:78:c4:05:cd:4e:dd:46:28:3f:d2:8f:03: 20:13:3e:e6:e9:d7:08:6e:40:ab:d7:30:a2:9b:e3:fc:82:2a: cd:b8:60:a3:56:54:a4:88:c6:e9:72:b5:ee:ff:fc:b8:6d:f8: 7f:a4:9b:ae:fc:ab:40:58:9a:9f:6f:03:b2:ab:74:92:72:09: ae:4e:7e:49:e2:23:df:bf:3f:19:00:7f:ed:12:fc:b0:80:dd: 78:86:f7:4e:05:34:09:0b:2f:28:af:88:c7:7a:62:91:a9:11: 00:f8:32:73:4b:a6:7e:81:b6:5b:8c:33:06:e1:e6:c7:d4:b0: a2:05:9d:d4:73:7e:b1:b4:1c:24:f5:4b:48:f3:28:59:23:7a: f4:7c:ca:52:08:d7:2c:5b:2b:60:f9:71:43:26:5b:ee:cd:fc: 08:53:f0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWirmqLhNexMYCr3/m9mLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwNzIzMTkwMDU1WhcNMjYwNzI0MTkwMDU1WjAzMTEwLwYDVQQD EyhlYzAzMGU1NmY1NjhjMGE4Njk3ZmY1MzllM2U2YzNlOWZhZTFlYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxYy6F/4ccvQEI5QmwNwEBMd42kO eb6ocd32milHP4YHoG9z2EQ2J3CvxwW7rP4fu77RDe88hbGmDNXJeULIOhOFi75b gKDkBNXqZ7/zn9xtt+SDuPjgLrcC4/hfbZHP9pTkKT5dUf2nuEgdvp9eeXerw76I t5MWw0oK+woX26zcjxPe5LjIo7MkPhHBJ8smIfBDsxGL+FRLrFF+GNGTdWqAtW/1 U+LDqyKxCOHCvZX3rSHlY2U8m3lZ9Yb1QIinsuuxdDF+fFa0lXqSb0cH8MYWwoTc XiCZ+znyChlqNj7A+5zPWAh92OpotZpaCOWkT7INu1AOVOSAbNClwpz+aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwDDlb1aMCoaX/1OePmw+n64euAMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA3ljEGe 5yD1OPzcPpPN8hBhChEKKaQxaGpwsHgxbMPwX7GXNdZrsYn9cxxY6cG2VGzgIGPF z2S4aSIELN7PFXlTCgBEJ2/0sLWPlyqP0pgCjFFltA0/eKviQFvL3+t7eMQFzU7d Rig/0o8DIBM+5unXCG5Aq9cwopvj/IIqzbhgo1ZUpIjG6XK17v/8uG34f6Sbrvyr QFian28Dsqt0knIJrk5+SeIj378/GQB/7RL8sIDdeIb3TgU0CQsvKK+Ix3pikakR APgyc0umfoG2W4wzBuHmx9SwogWd1HN+sbQcJPVLSPMoWSN69HzKUgjXLFsrYPlx QyZb7s38CFPwVg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:11 2026 by rpki-client