$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: k3OGEXa5zhTk52dl/wpYZkM4Kl+Kvxsix0Z/sLS7vCc= Subject key identifier: 08:E8:BA:66:34:98:D7:DC:16:02:1C:83:65:EE:E7:B2:A8:4F:BD:8A Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019F905A369F969539C86A13E458C9D964F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 1255 Signing time: Thu 23 Jul 2026 19:00:59 +0000 Manifest this update: Thu 23 Jul 2026 19:00:59 +0000 Manifest next update: Fri 24 Jul 2026 19:00:59 +0000 Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=) 6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: 5cqz1qLgQlU7BJCcvD5gGidsztqsNtn0sBpWdVAQdgw=) 7: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 8: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 9: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=) 10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 14: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 15: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) 16: nynFadiKhVTTAb1VPU3Cmie2xF0.roa (hash: 3QJ9XmE3XhfqpSOZbO8CGD3RHkFQ2Ty7eUnID8LQjBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:36:9f:96:95:39:c8:6a:13:e4:58:c9:d9:64:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jul 23 19:00:59 2026 GMT Not After : Jul 24 19:00:59 2026 GMT Subject: CN=08e8ba663498d7dc16021c8365eee7b2a84fbd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:3c:c2:ca:d8:e0:29:21:c6:4d:5e:61:a3: 9d:e5:6d:df:c2:53:2d:1e:d7:d0:ad:88:68:7b:aa: 51:4a:cc:b9:4c:be:82:8d:aa:6f:fb:43:2f:2f:91: 7b:15:55:a0:6e:e3:2c:74:63:7c:8e:12:d3:88:21: 26:11:f5:cd:0b:41:e9:f9:8e:73:18:fc:a6:2c:05: e2:65:c2:2d:90:2b:4c:c0:cb:8c:7c:a6:bb:ce:c6: a1:a7:b2:48:fd:cd:5a:40:12:2c:39:b6:c1:eb:63: e6:b5:9b:a5:38:6b:9f:00:b2:0f:a6:be:ab:f0:35: 88:7f:e8:37:06:6d:b5:d6:8c:a3:86:6a:9d:4b:ed: 5b:5d:d4:28:ab:10:a8:18:21:4e:9c:53:96:7e:3e: 71:26:96:61:e2:60:f2:88:b0:4a:7b:0d:17:a5:60: 08:19:d5:3e:9e:95:f2:63:55:ae:e9:16:9e:93:a4: 61:1d:b0:63:e5:4e:aa:02:7b:42:99:04:3e:ad:dd: a9:16:48:29:46:f7:35:86:0c:31:e3:e7:c2:e0:17: be:3c:0a:a8:df:54:fa:72:69:f6:fe:ff:af:bf:b3: a0:6f:a7:8f:c3:ea:38:c8:b3:6a:fd:11:b6:1a:30: f4:85:68:18:25:f8:19:f5:6e:9d:f1:c4:d7:0d:b2: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E8:BA:66:34:98:D7:DC:16:02:1C:83:65:EE:E7:B2:A8:4F:BD:8A X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:71:28:53:33:0e:5d:96:5d:c1:d3:7f:ed:41:a0:9f:a9:ea: 2f:1d:c2:d3:81:3b:3d:02:03:0f:49:96:e1:c5:d6:7b:82:b9: ad:40:45:57:c9:f6:36:7f:44:9f:53:49:5c:97:81:3b:09:57: 0b:70:14:bb:cd:7b:ad:37:94:3b:29:42:fa:57:e1:39:b1:84: e5:13:ad:02:d0:83:86:e7:f2:ac:34:9e:79:87:88:c4:73:d7: 72:be:e2:9e:59:03:79:c2:5b:1a:fe:2e:b3:89:9b:fb:a1:14: 3b:87:11:b3:6c:28:8f:9d:67:47:bd:45:c3:a0:66:e3:7f:68: 6b:cb:90:9a:7c:87:f4:63:32:d6:a8:e2:ec:f0:f9:23:b8:94: 7c:86:c1:c4:51:a0:b5:88:28:92:0a:08:46:5b:68:23:15:5a: f0:33:83:1d:00:bd:93:0f:e8:b9:15:6a:35:60:89:5f:24:be: 89:02:b8:fd:26:11:38:41:61:4e:07:9d:97:3c:f4:c7:a6:7a: 72:2f:36:c7:ee:b9:2d:c6:81:00:f6:91:83:e4:3c:20:61:46: b2:2f:2c:f7:70:a7:0b:e5:93:04:00:a7:78:91:33:6a:b3:e6: f3:42:bb:4b:77:5c:2b:1b:7f:49:b0:6f:b4:dd:26:3a:2b:37: d7:8c:14:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWjaflpU5yGoT5FjJ2WT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwNzIzMTkwMDU5WhcNMjYwNzI0MTkwMDU5WjAzMTEwLwYDVQQD EygwOGU4YmE2NjM0OThkN2RjMTYwMjFjODM2NWVlZTdiMmE4NGZiZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm48wsrY4Ckhxk1eYaOd5W3fwlMt HtfQrYhoe6pRSsy5TL6Cjapv+0MvL5F7FVWgbuMsdGN8jhLTiCEmEfXNC0Hp+Y5z GPymLAXiZcItkCtMwMuMfKa7zsahp7JI/c1aQBIsObbB62PmtZulOGufALIPpr6r 8DWIf+g3Bm211oyjhmqdS+1bXdQoqxCoGCFOnFOWfj5xJpZh4mDyiLBKew0XpWAI GdU+npXyY1Wu6Raek6RhHbBj5U6qAntCmQQ+rd2pFkgpRvc1hgwx4+fC4Be+PAqo 31T6cmn2/v+vv7Ogb6ePw+o4yLNq/RG2GjD0hWgYJfgZ9W6d8cTXDbJ8CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjoumY0mNfcFgIcg2Xu57KoT72KMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnEoUzMO XZZdwdN/7UGgn6nqLx3C04E7PQIDD0mW4cXWe4K5rUBFV8n2Nn9En1NJXJeBOwlX C3AUu817rTeUOylC+lfhObGE5ROtAtCDhufyrDSeeYeIxHPXcr7inlkDecJbGv4u s4mb+6EUO4cRs2woj51nR71Fw6Bm439oa8uQmnyH9GMy1qji7PD5I7iUfIbBxFGg tYgokgoIRltoIxVa8DODHQC9kw/ouRVqNWCJXyS+iQK4/SYROEFhTgedlzz0x6Z6 ci82x+65LcaBAPaRg+Q8IGFGsi8s93CnC+WTBACneJEzarPm80K7S3dcKxt/SbBv tN0mOis314wUtQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:20:41 2026 by rpki-client