$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: PtWAMEMwiIWPbzBXKMs2lmfsnTEVuQ+ifc4Un3TuEus= Subject key identifier: 38:A1:BD:F8:6C:72:43:3B:99:BF:87:46:FF:FB:53:FE:7E:31:0B:83 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 01A0DCBBDBA310AE71B14793FEF6AAFBA17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 1302 Signing time: Sat 26 Sep 2026 08:01:34 +0000 Manifest this update: Sat 26 Sep 2026 08:01:34 +0000 Manifest next update: Sun 27 Sep 2026 08:01:34 +0000 Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=) 2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=) 3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=) 4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=) 5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=) 6: HOSYfejR0x8lG5i09pW5Yg6DVoc.roa (hash: znBdthxkSZxdG7e3CKAjtPuT4Q9QNEHKi3IOf39HX3Q=) 7: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: VuYIX+Fnvvvs+aWfwcS7lf4pC1+mUOOCHyGa+4HdqSM=) 8: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=) 9: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=) 10: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=) 11: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=) 12: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=) 13: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=) 14: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=) 15: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=) 16: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=) 17: nynFadiKhVTTAb1VPU3Cmie2xF0.roa (hash: 3QJ9XmE3XhfqpSOZbO8CGD3RHkFQ2Ty7eUnID8LQjBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:bb:db:a3:10:ae:71:b1:47:93:fe:f6:aa:fb:a1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Sep 26 08:01:34 2026 GMT Not After : Sep 27 08:01:34 2026 GMT Subject: CN=38a1bdf86c72433b99bf8746fffb53fe7e310b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:69:bc:70:8c:b2:8a:0f:59:1a:56:2b:c7: ba:f5:36:49:00:d3:cb:df:69:5a:f8:f1:c5:af:e7: 07:da:52:da:b9:32:90:25:1f:81:5e:b1:ca:7d:43: 3b:f5:80:ee:f6:06:8d:d9:d4:35:38:a2:bf:8d:f1: 77:a3:5e:ab:41:10:ba:f3:76:75:f5:4d:1a:37:55: 8f:59:c0:4a:b9:f5:21:e7:6d:cf:4a:bc:81:38:ee: 41:c8:c9:0b:85:63:1f:e1:33:df:fb:1d:68:3e:98: 59:82:27:63:f6:7c:91:55:71:84:c1:d2:40:55:22: 7e:fa:ce:4c:ce:27:a3:35:68:3a:5f:92:30:d4:01: cc:42:3f:9b:2f:ab:0a:c5:66:a9:dc:d8:38:44:7b: b5:f2:68:5d:1e:a7:02:1d:2d:52:30:16:5e:c4:3d: ad:cb:c5:34:fd:92:f3:62:aa:96:26:63:1f:cf:c6: e4:71:54:9f:57:1a:cb:17:20:81:87:3d:c4:bd:8e: dd:82:01:19:28:7b:7b:a3:51:18:ac:eb:ad:61:0e: da:d3:64:d0:81:b2:ae:3b:ef:a0:de:50:74:8e:ba: 51:c7:af:1e:d8:85:09:63:60:1d:98:3f:2b:0e:2b: 01:56:48:95:3d:ab:a4:a1:ba:8e:cf:e3:86:49:b4: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A1:BD:F8:6C:72:43:3B:99:BF:87:46:FF:FB:53:FE:7E:31:0B:83 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:32:1d:8d:d0:a7:42:e1:eb:03:ab:8b:ac:63:93:4d:81: 48:05:de:21:d3:8e:04:9a:35:e7:2e:57:86:88:55:02:f4:b0: ab:46:bd:99:3b:49:d5:ca:e6:67:f5:f4:d2:03:a9:76:e3:41: 93:82:cb:38:28:50:09:8b:36:a4:75:48:41:e2:06:a9:6f:c6: 5e:40:17:68:c5:f9:da:11:09:4f:a4:13:b3:01:af:80:b4:a4: df:5e:be:32:35:35:3a:97:29:71:e1:7e:c3:54:f6:65:21:93: 22:96:b6:ac:17:40:0e:3d:17:91:db:49:03:7d:ac:27:47:67: 32:1c:31:fc:1f:d2:a9:02:d8:5b:49:09:b1:31:c3:a8:38:a9: 2a:c8:b7:70:9c:fc:17:a5:14:da:55:85:15:f6:06:4b:44:17: a6:fe:39:c3:cd:78:ef:17:79:99:6e:7b:86:4b:94:8b:7e:84: b8:b3:78:8c:fa:7d:55:56:de:90:a3:3a:9d:aa:ae:b4:d2:ab: ba:c0:26:9e:c5:f1:69:7b:fa:a0:3a:f0:5f:4c:0a:db:5c:9f: c1:92:41:6a:8a:38:5a:80:9b:3e:b1:b4:52:0b:e6:ce:14:bc: cf:20:64:bc:b8:74:98:4a:17:af:79:26:cf:d9:e9:b2:b3:b9: 95:e6:03:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcu9ujEK5xsUeT/vaq+6F9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwOTI2MDgwMTM0WhcNMjYwOTI3MDgwMTM0WjAzMTEwLwYDVQQD EygzOGExYmRmODZjNzI0MzNiOTliZjg3NDZmZmZiNTNmZTdlMzEwYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNxpvHCMsooPWRpWK8e69TZJANPL 32la+PHFr+cH2lLauTKQJR+BXrHKfUM79YDu9gaN2dQ1OKK/jfF3o16rQRC683Z1 9U0aN1WPWcBKufUh523PSryBOO5ByMkLhWMf4TPf+x1oPphZgidj9nyRVXGEwdJA VSJ++s5MziejNWg6X5Iw1AHMQj+bL6sKxWap3Ng4RHu18mhdHqcCHS1SMBZexD2t y8U0/ZLzYqqWJmMfz8bkcVSfVxrLFyCBhz3EvY7dggEZKHt7o1EYrOutYQ7a02TQ gbKuO++g3lB0jrpRx68e2IUJY2AdmD8rDisBVkiVPaukobqOz+OGSbR2fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDihvfhsckM7mb+HRv/7U/5+MQuDMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIG0yHY3Q p0Lh6wOri6xjk02BSAXeIdOOBJo15y5XhohVAvSwq0a9mTtJ1crmZ/X00gOpduNB k4LLOChQCYs2pHVIQeIGqW/GXkAXaMX52hEJT6QTswGvgLSk316+MjU1OpcpceF+ w1T2ZSGTIpa2rBdADj0XkdtJA32sJ0dnMhwx/B/SqQLYW0kJsTHDqDipKsi3cJz8 F6UU2lWFFfYGS0QXpv45w8147xd5mW57hkuUi36EuLN4jPp9VVbekKM6naqutNKr usAmnsXxaXv6oDrwX0wK21yfwZJBaoo4WoCbPrG0UgvmzhS8zyBkvLh0mEoXr3km z9npsrO5leYDxA== -----END CERTIFICATE-----Generated at Sat Sep 26 17:11:49 2026 by rpki-client