$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: SxgvPDZX+FhxV2U9Be+5q6Ml/g4luqx+5bFreOL4+xs= Subject key identifier: 99:DA:5F:4D:91:89:B9:95:96:A9:66:41:08:47:9E:06:6C:32:5B:88 Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019E1D901BC9963B87E4B7E8A625D9EB8514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 1121 Signing time: Tue 12 May 2026 19:00:43 +0000 Manifest this update: Tue 12 May 2026 19:00:43 +0000 Manifest next update: Wed 13 May 2026 19:00:43 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: 4VUMB4eNqxCh6QAJlqfFP96FBzM.roa (hash: jItvJxY9TNKdGDTOhv6bg4Ex137MBeodiD35XiWfcq8=) 3: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=) 4: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: DwRfZfWxYz0y4l3NVk5te0F0jqPbEn+j1w4cpZkmP+w=) 5: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 6: ehxVaEtRSgmtXWibehJFSg2UxQg.roa (hash: t9f5OTDkYl9rwnvOFT12TZ8YPdY0wwMwMgp6Xvr9xCo=) 7: f2CUBwukbS4Jl9DUVNEKEFyrD0Q.roa (hash: L6OXByGU2WQtLD8gRQiiCN4AJSkVRktzmevEzCGDIRA=) 8: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 9: uqa1tyxWj6cFaANZUIcESG1vArI.roa (hash: vTGoqUA5XDYJlnJpWHgE1fB7R+WNNBHqxw/ULLm7ImA=) 10: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:1b:c9:96:3b:87:e4:b7:e8:a6:25:d9:eb:85:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: May 12 19:00:43 2026 GMT Not After : May 13 19:00:43 2026 GMT Subject: CN=99da5f4d9189b99596a9664108479e066c325b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:59:e2:7b:84:07:92:13:c1:f8:52:11:ef: 56:42:16:df:84:97:44:38:7b:a4:d1:b0:a5:f4:67: e7:7e:b6:f7:69:b9:8a:97:f2:dd:05:70:3b:e1:7b: 81:de:24:4b:8f:2d:10:f8:35:64:44:e2:60:02:01: 22:72:7f:26:4f:3e:7b:6b:b8:c9:ea:2d:78:80:eb: 59:ef:ad:ca:15:d9:9e:d7:6a:ef:b2:98:c4:a7:f3: 16:47:e5:7a:ba:08:8f:26:b1:d7:44:a7:92:10:93: 6a:09:b2:94:21:82:26:9b:ae:34:84:55:84:07:a2: 80:d3:06:7a:fd:69:a9:8f:dc:f2:0a:0e:04:2d:4d: f4:8b:93:11:8b:f0:e5:42:43:ec:72:96:d0:9b:1d: 9f:b3:1b:02:f6:d4:45:aa:89:de:57:84:c8:11:ff: d4:00:95:8b:cf:71:38:ad:f1:f1:c2:31:c2:74:d6: a6:00:2c:97:0f:71:82:67:4f:86:8d:08:48:36:c0: e2:ad:f1:70:e0:d1:a1:a8:e2:78:2e:4b:64:b7:72: 75:2e:6f:5d:9c:d5:9b:b0:ad:66:fa:e1:41:63:c2: 29:9c:6f:6e:42:8d:3e:a9:6d:c9:ae:90:e7:1f:65: c1:ff:d8:89:2d:27:68:3a:67:b0:63:8b:5b:4b:4f: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DA:5F:4D:91:89:B9:95:96:A9:66:41:08:47:9E:06:6C:32:5B:88 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:49:34:fe:97:ee:a6:12:55:db:91:f5:94:7b:c4:e3:8a:0a: 01:b0:53:bf:47:92:48:99:95:dd:77:8d:23:ed:bb:c2:af:65: 82:4a:01:ae:d6:b5:69:de:ff:4c:73:7c:f9:c2:bc:66:9d:88: dc:b1:57:a1:95:7f:02:71:61:86:56:37:8b:fc:8d:87:81:8f: 9d:08:c4:2a:a1:db:11:6a:87:a5:b8:b9:30:53:34:3a:e5:ff: 46:fb:48:6b:25:cf:34:16:fa:2f:97:04:ab:76:4a:af:24:90: bd:70:73:49:09:d4:a9:0d:1d:7a:e9:cb:79:65:9b:0a:c5:2c: b3:63:14:1f:10:3c:f7:f5:70:fd:14:b5:44:6d:c9:cb:e7:f4: 47:06:be:2f:c3:f8:7e:0b:27:56:4b:e1:25:0a:15:d1:bb:f7: 05:7d:70:3d:e6:23:ea:f6:5e:3f:b9:0e:09:68:bd:7f:b6:a0: 07:1e:1d:de:0f:99:41:0f:1a:a4:4c:0a:2a:aa:7b:a4:90:ac: 81:25:0c:f8:60:fc:c9:aa:42:4b:b6:9a:dd:a5:b3:98:f2:3e: 88:bc:2b:fc:72:49:5c:85:4b:bd:8e:2a:a7:38:63:c7:4e:ef: 78:eb:53:63:6e:8b:22:d1:53:57:7d:54:87:f1:ea:1f:0a:8f: 9c:71:48:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkBvJljuH5LfopiXZ64UUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwNTEyMTkwMDQzWhcNMjYwNTEzMTkwMDQzWjAzMTEwLwYDVQQD Eyg5OWRhNWY0ZDkxODliOTk1OTZhOTY2NDEwODQ3OWUwNjZjMzI1Yjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mxZ4nuEB5ITwfhSEe9WQhbfhJdE OHuk0bCl9Gfnfrb3abmKl/LdBXA74XuB3iRLjy0Q+DVkROJgAgEicn8mTz57a7jJ 6i14gOtZ763KFdme12rvspjEp/MWR+V6ugiPJrHXRKeSEJNqCbKUIYImm640hFWE B6KA0wZ6/Wmpj9zyCg4ELU30i5MRi/DlQkPscpbQmx2fsxsC9tRFqoneV4TIEf/U AJWLz3E4rfHxwjHCdNamACyXD3GCZ0+GjQhINsDirfFw4NGhqOJ4Lktkt3J1Lm9d nNWbsK1m+uFBY8IpnG9uQo0+qW3JrpDnH2XB/9iJLSdoOmewY4tbS09MFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnaX02RibmVlqlmQQhHngZsMluIMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUk0/pfu phJV25H1lHvE44oKAbBTv0eSSJmV3XeNI+27wq9lgkoBrta1ad7/THN8+cK8Zp2I 3LFXoZV/AnFhhlY3i/yNh4GPnQjEKqHbEWqHpbi5MFM0OuX/RvtIayXPNBb6L5cE q3ZKrySQvXBzSQnUqQ0deunLeWWbCsUss2MUHxA89/Vw/RS1RG3Jy+f0Rwa+L8P4 fgsnVkvhJQoV0bv3BX1wPeYj6vZeP7kOCWi9f7agBx4d3g+ZQQ8apEwKKqp7pJCs gSUM+GD8yapCS7aa3aWzmPI+iLwr/HJJXIVLvY4qpzhjx07veOtTY26LItFTV31U h/HqHwqPnHFI2w== -----END CERTIFICATE-----Generated at Tue May 12 21:30:36 2026 by rpki-client