$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: ML3vraqqS7mFxpY4nhE7/NE2Ca4LFrMHZ7TchlErWA8= Subject key identifier: FF:5A:A3:88:EC:8C:22:3B:11:F4:A4:79:9D:C8:24:B9:3F:C0:9F:6E Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 01A0DA5FCD7403D01FF813DEF16FE6EBB439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 1294 Signing time: Fri 25 Sep 2026 21:01:46 +0000 Manifest this update: Fri 25 Sep 2026 21:01:46 +0000 Manifest next update: Sat 26 Sep 2026 21:01:46 +0000 Files and hashes: 1: 09L29M524JtLa5ZgogkXLXq_qVQ.roa (hash: vbKviP/C/Uh8p10yamrn572MJG8g6MCiVwGfvH2mWcc=) 2: IGOBSd3ZuJbm4C5TrnSQrR-a0jU.roa (hash: gqwFBRnGvAPBp+VnF0Uw0nntvsm6cNUPb90FQlaPVzo=) 3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: qPqgtuEQ61f9IEaG/Me16XVEJ6IZsDcVoGEaef+qzRY=) 4: RC6auerhl88_6riv7dybqchIS5U.roa (hash: SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=) 5: ehxVaEtRSgmtXWibehJFSg2UxQg.roa (hash: t9f5OTDkYl9rwnvOFT12TZ8YPdY0wwMwMgp6Xvr9xCo=) 6: fGPyVoYA7Pc-igsJ8lc6VndKUAI.roa (hash: j4K4to0xa3XNtN0v+W/9xMBmLw/rUsB8qqoxhhwN2Vc=) 7: jMD979_3cOHHNQD7_v5YNZOfnzM.roa (hash: xs9G8MlTBL5Mdp/eDsUtPV46MEU64DiRi1HUSjB7STI=) 8: rI8JWSRZVq0j2LCqcpbojmJ7f80.roa (hash: cERfCgESjvWA5sZDpKF9y4SzFcGtyWbX25sWtXaUQgc=) 9: s2Ypy54WuhCWz54ggPtUGzQB9Y8.roa (hash: Cr4q6do/gJppREcmAQon0odH+YuL+eSFq022BhIG/4E=) 10: v7uNIzxFL7ExToFNBIaww0F5PB8.roa (hash: Dg0Flz2OmF2lqMuFCR5GqvY8tbmnQRwnOND08Misp9Q=) 11: wj6F-GbnlJ5PgQSNTpZExJxm390.roa (hash: YVJH3yfABwb076P/mjMjg3bUoVEsCOXMqF23WBWbaWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:5f:cd:74:03:d0:1f:f8:13:de:f1:6f:e6:eb:b4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Sep 25 21:01:46 2026 GMT Not After : Sep 26 21:01:46 2026 GMT Subject: CN=ff5aa388ec8c223b11f4a4799dc824b93fc09f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:46:62:ce:30:e8:f5:46:dc:f2:6a:8d:a2: 2f:a3:8a:96:0e:a0:5d:83:5d:a5:11:cb:44:b6:bf: 5c:f3:77:24:62:57:9c:3c:9e:66:46:48:6f:71:07: 94:57:72:38:2a:93:03:43:aa:45:6b:7a:03:1a:55: 4f:90:c2:d0:52:c4:97:2a:33:23:b8:a3:05:78:e2: 94:2a:48:f3:0c:de:39:dd:e3:cd:4e:df:b3:c5:6f: bd:af:8a:64:4e:38:24:b7:b2:33:b7:a4:f9:91:22: 01:9e:c2:60:a8:23:03:66:5d:f1:b8:61:90:0a:64: cc:9e:12:84:40:5b:b0:bf:b8:fb:54:ab:29:4b:4d: a4:fa:b3:74:b7:38:0f:0d:36:51:4a:53:0e:7a:a1: 9a:2e:c6:bb:f0:e3:f9:63:3a:60:f1:c1:b6:a5:16: 9b:ad:a4:d2:04:fc:4b:dc:45:5f:62:33:3a:62:b7: 23:80:8c:f4:73:38:ef:65:4a:fc:7d:c9:02:77:e9: d3:d3:32:0f:32:a0:d9:fd:28:d5:b6:0e:54:9d:6f: a6:45:9f:21:62:0b:f9:ad:87:55:e0:9d:42:09:6e: 99:00:a4:a1:55:5e:4f:3a:71:02:c4:90:91:cf:14: d6:a1:c7:ca:27:5c:91:0e:56:96:70:b9:1a:0f:20: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5A:A3:88:EC:8C:22:3B:11:F4:A4:79:9D:C8:24:B9:3F:C0:9F:6E X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:94:60:7c:76:a9:26:13:5a:68:22:85:69:64:e6:73:e6:2c: 2f:58:c9:81:39:cb:e0:8c:00:f1:d8:82:03:93:1e:68:12:00: d2:59:9a:61:6e:9e:e1:4d:b5:0e:e1:14:b5:e8:31:f6:87:7e: f3:0d:c8:49:ce:a6:5a:19:e1:7e:b5:12:7e:50:97:1d:f4:b7: 91:9c:71:25:f5:5f:88:21:53:f8:7f:c1:3c:ef:b7:37:a3:52: 6e:6c:a2:e4:f8:d0:c2:47:a8:c0:ac:a4:c4:c8:2b:3d:4c:5b: ab:c5:97:4f:f4:17:fa:75:46:b0:63:52:6b:13:74:e6:18:59: 85:f3:71:08:fa:b3:bf:48:a7:db:71:61:5a:ec:0c:cb:8f:9a: d5:f6:fb:2e:58:96:aa:84:c2:d6:32:2d:4d:ff:c6:91:72:a6: c7:71:fe:f6:a4:d1:62:b7:97:82:c0:ed:cc:fa:d1:94:a1:d9: 45:66:ec:6d:ab:a9:e3:49:33:f1:c6:46:e2:5e:98:83:ac:31: 9b:a9:71:00:b6:f2:fb:3c:52:b4:a5:90:49:7a:52:1f:ad:ca: 4c:b2:e3:6f:50:7b:4c:84:c0:8f:bd:f3:fd:0d:0c:72:54:f3: b3:e0:11:c2:4e:20:73:39:12:80:04:33:77:61:59:0e:b1:5c: 0d:c9:ec:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDaX810A9Af+BPe8W/m67Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwOTI1MjEwMTQ2WhcNMjYwOTI2MjEwMTQ2WjAzMTEwLwYDVQQD EyhmZjVhYTM4OGVjOGMyMjNiMTFmNGE0Nzk5ZGM4MjRiOTNmYzA5ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMlGYs4w6PVG3PJqjaIvo4qWDqBd g12lEctEtr9c83ckYlecPJ5mRkhvcQeUV3I4KpMDQ6pFa3oDGlVPkMLQUsSXKjMj uKMFeOKUKkjzDN453ePNTt+zxW+9r4pkTjgkt7Izt6T5kSIBnsJgqCMDZl3xuGGQ CmTMnhKEQFuwv7j7VKspS02k+rN0tzgPDTZRSlMOeqGaLsa78OP5Yzpg8cG2pRab raTSBPxL3EVfYjM6YrcjgIz0czjvZUr8fckCd+nT0zIPMqDZ/SjVtg5UnW+mRZ8h Ygv5rYdV4J1CCW6ZAKShVV5POnECxJCRzxTWocfKJ1yRDlaWcLkaDyDckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9ao4jsjCI7EfSkeZ3IJLk/wJ9uMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJRgfHap JhNaaCKFaWTmc+YsL1jJgTnL4IwA8diCA5MeaBIA0lmaYW6e4U21DuEUtegx9od+ 8w3ISc6mWhnhfrUSflCXHfS3kZxxJfVfiCFT+H/BPO+3N6NSbmyi5PjQwkeowKyk xMgrPUxbq8WXT/QX+nVGsGNSaxN05hhZhfNxCPqzv0in23FhWuwMy4+a1fb7LliW qoTC1jItTf/GkXKmx3H+9qTRYreXgsDtzPrRlKHZRWbsbaup40kz8cZG4l6Yg6wx m6lxALby+zxStKWQSXpSH63KTLLjb1B7TITAj73z/Q0MclTzs+ARwk4gczkSgAQz d2FZDrFcDcnsiA== -----END CERTIFICATE-----Generated at Sat Sep 26 04:04:00 2026 by rpki-client