$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: M+7a5Z4Hj068VStYnvMib+25fgIEvPGaO6Ta3S9cwxo= Subject key identifier: 32:C5:2E:14:A7:78:8E:DC:C2:5E:B2:AF:38:12:18:0A:C7:77:BF:91 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019D27729DEC52D3CA1C433F1735518C73FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 097F Signing time: Thu 26 Mar 2026 00:01:56 +0000 Manifest this update: Thu 26 Mar 2026 00:01:56 +0000 Manifest next update: Fri 27 Mar 2026 00:01:56 +0000 Files and hashes: 1: 1ZCW-3XyV7UUdWvnZS34ZxS-vyg.roa (hash: AsfQqdl/xsaW9IYhySqScr2PgyTmm64VZ6eM34CvYX8=) 2: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (hash: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=) 3: 41UDb8PFLYomt2031aTgiY3AQ40.roa (hash: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY=) 4: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (hash: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM=) 5: 74dVetNZGPedHsy6k1SIou3NmMo.roa (hash: Woz3F+ox6mEqDp03ff/JGxa3SAWWwJ/8Aov9dLFYxoE=) 6: 7p6dd7n2c_iahQHtUgZQiIIJrtQ.roa (hash: XRHiyUNGvTwvAeaPPS/YuesfKfNsucxDCcsj9pUMxso=) 7: Do7W5qGfDMAJEMN6BzBVspjXxYU.roa (hash: SRYxQrkADeDmRh/1IPI3QXOB27eJYEqHNj2TfVv7whg=) 8: NJpLyq2ti9mgv7XrR8IcC5lB92k.roa (hash: X6oNrTIzLpsjoLrgrTl+vU7DqhTACh+EHu5pKkzZfC4=) 9: YzVa-BUJnuWH4diErgPUKokymQ0.roa (hash: QcBSZdMSRm/lWv+szi2oRyb+M3WP6bg67A4t9dEA1tc=) 10: bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa (hash: oXiEsLmzNMIEZvn6zcV/UwZ/24olqpUKpuRIwHp2tTQ=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: Mc5qduyY6MjkbuIJjlZg8hR2WfjzngLM1PuLNQw4V/8=) 12: yvu8AxQYxM3ws7oGYgq0UFdLwY4.roa (hash: 87fEDzcHgs5DE+7kqQ5/TAh2kzd7q9M1YgTV/N72Otc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:9d:ec:52:d3:ca:1c:43:3f:17:35:51:8c:73:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Mar 26 00:01:56 2026 GMT Not After : Mar 27 00:01:56 2026 GMT Subject: CN=32c52e14a7788edcc25eb2af3812180ac777bf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:b7:13:6e:1d:73:d3:ee:4d:07:bb:17:76: 31:4c:44:2f:ab:b0:ea:7b:5f:b8:96:15:83:d2:29: 03:5e:92:1f:6b:6a:46:ff:02:51:a5:93:cb:46:cd: bf:c9:5e:2a:5a:15:37:4c:5d:2e:f9:bc:c7:95:00: a8:64:98:d7:a5:32:d0:fd:82:2f:35:02:b9:b3:70: 2a:4e:31:a6:22:08:48:17:c9:9f:a9:51:ab:40:2f: 0b:c0:a7:39:9a:41:20:bf:9c:e3:af:c5:40:e0:1b: af:c3:95:95:f0:66:5b:74:67:6a:62:29:d4:34:fc: 1a:d5:c2:76:39:d0:60:9c:96:6d:5e:f9:11:e7:56: 7f:d0:d9:d0:fc:78:93:a9:b4:c4:21:e0:21:bc:f9: 2a:f9:36:fd:9b:d1:e3:05:56:e4:f3:45:5e:d7:45: e6:c6:86:30:79:a6:03:20:e2:0a:47:4b:db:ad:27: 56:6d:31:95:58:a2:8e:83:9e:4e:07:87:98:34:b0: d0:2d:d2:3d:49:0e:44:e8:d3:d8:2c:29:ff:43:b0: a8:8a:0f:d1:1a:8a:4c:ed:3d:0a:9e:c2:9f:27:9e: ac:11:47:3b:71:fa:bc:6b:6b:42:c2:3f:8e:97:9f: e9:df:14:b6:76:9d:5e:ef:f5:e4:e6:f7:6f:bb:67: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C5:2E:14:A7:78:8E:DC:C2:5E:B2:AF:38:12:18:0A:C7:77:BF:91 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:65:f5:7d:34:e7:3b:d2:17:9d:4e:15:59:6f:6e:52:ca: 6b:42:44:0d:92:fd:af:33:cc:3a:81:4f:85:ab:61:5c:66:66: 76:d8:7c:e4:d1:76:2d:e9:28:19:cd:d8:0c:e9:61:53:0b:0d: 1f:14:b1:72:76:f3:cd:e1:09:a2:b7:eb:74:66:f7:c9:ff:45: 64:ba:12:ef:0e:a5:a5:a5:40:16:59:8e:92:82:e3:c4:32:d1: 36:6d:1c:05:5f:75:53:04:d4:13:d3:d2:60:f1:9b:4a:af:c2: 26:73:25:97:f3:cc:ab:a3:71:b2:32:e1:0c:7e:b9:c8:eb:c6: aa:84:00:a7:3a:d9:2a:01:de:7c:c1:a7:19:e6:5e:c1:2d:e7: f1:28:f0:d6:68:46:9f:66:61:9f:f4:f8:51:e5:40:fa:46:95: 22:97:38:b8:7e:f0:8e:13:f7:e5:b2:8a:2e:81:5c:c8:84:80: ed:fb:bc:0e:bc:5b:10:75:b3:01:ae:17:30:8d:be:91:7a:59: e4:f4:d5:18:76:5e:84:cf:41:d9:f4:19:a7:ee:a7:e0:52:36: 5d:e0:5a:9a:0a:a0:56:f1:fe:01:18:fa:bd:ca:9c:9f:fb:57: 1a:40:fc:5b:58:ee:43:bd:f6:c8:72:0c:28:fd:67:bc:c5:88: f9:a7:11:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncp3sUtPKHEM/FzVRjHP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMzI2MDAwMTU2WhcNMjYwMzI3MDAwMTU2WjAzMTEwLwYDVQQD EygzMmM1MmUxNGE3Nzg4ZWRjYzI1ZWIyYWYzODEyMTgwYWM3NzdiZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41O3E24dc9PuTQe7F3YxTEQvq7Dq e1+4lhWD0ikDXpIfa2pG/wJRpZPLRs2/yV4qWhU3TF0u+bzHlQCoZJjXpTLQ/YIv NQK5s3AqTjGmIghIF8mfqVGrQC8LwKc5mkEgv5zjr8VA4Buvw5WV8GZbdGdqYinU NPwa1cJ2OdBgnJZtXvkR51Z/0NnQ/HiTqbTEIeAhvPkq+Tb9m9HjBVbk80Ve10Xm xoYweaYDIOIKR0vbrSdWbTGVWKKOg55OB4eYNLDQLdI9SQ5E6NPYLCn/Q7Coig/R GopM7T0KnsKfJ56sEUc7cfq8a2tCwj+Ol5/p3xS2dp1e7/Xk5vdvu2d9fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLFLhSneI7cwl6yrzgSGArHd7+RMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAVl9X00 5zvSF51OFVlvblLKa0JEDZL9rzPMOoFPhathXGZmdth85NF2LekoGc3YDOlhUwsN HxSxcnbzzeEJorfrdGb3yf9FZLoS7w6lpaVAFlmOkoLjxDLRNm0cBV91UwTUE9PS YPGbSq/CJnMll/PMq6NxsjLhDH65yOvGqoQApzrZKgHefMGnGeZewS3n8Sjw1mhG n2Zhn/T4UeVA+kaVIpc4uH7wjhP35bKKLoFcyISA7fu8DrxbEHWzAa4XMI2+kXpZ 5PTVGHZehM9B2fQZp+6n4FI2XeBamgqgVvH+ARj6vcqcn/tXGkD8W1juQ732yHIM KP1nvMWI+acRrw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:28:08 2026 by rpki-client