
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier: Ekuo0xeI+6A1PIbHSaX9Q9vtfhK4wvpi8yJV5Im/nyI=
Subject key identifier: 81:A3:36:78:9F:9F:3D:DA:68:20:8B:35:E7:4C:B9:7B:12:8C:20:05
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019E1EA2D749701B472F2F119624173D697F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number: 18B8
Signing time: Wed 13 May 2026 00:00:48 +0000
Manifest this update: Wed 13 May 2026 00:00:48 +0000
Manifest next update: Thu 14 May 2026 00:00:48 +0000
Files and hashes: 1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=)
2: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
3: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
5: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=)
6: 9oxDkWaa5sd9iAaz0WBp0gnuTC0.roa (hash: rpYh/dQFEe2pkMtp7oDMBL7MOw9jhToAYfZxRi3wQ+I=)
7: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=)
8: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: Ux1EjaD+SR7lhaR1P5YJjng4SQAG4GXVaMYyv1YGZDE=)
10: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
11: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
12: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=)
13: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=)
14: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
15: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
16: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
17: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=)
18: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
19: oiFnJz8OW03WCWtsMHubcwWCEnU.roa (hash: NGNeywVT/9a30EqHXW3cwLcQm7wpXQ63rm74pTj5fag=)
20: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
21: uwQyjvjxI-r1rh-v9UxtJU1WLMY.roa (hash: eAP3wsnG37lrMEGtMd91lAMUBneagoCuBENjELRk9X8=)
22: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
23: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d7:49:70:1b:47:2f:2f:11:96:24:17:3d:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 13 00:00:48 2026 GMT
Not After : May 14 00:00:48 2026 GMT
Subject: CN=81a336789f9f3dda68208b35e74cb97b128c2005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:04:14:b6:b9:d1:ef:b8:ae:ad:b6:f4:70:
ed:cd:22:e1:6e:ab:47:be:46:9a:e6:a7:a1:6c:0d:
31:44:a6:48:d8:4f:a7:fb:1b:27:dd:db:6a:97:73:
2c:39:53:3c:4f:1a:7f:01:ba:73:9f:8e:2b:4f:bb:
0f:6d:26:71:b9:18:8a:a3:bd:63:92:82:ba:0a:98:
2c:0a:69:d7:ae:30:06:d1:62:39:d9:50:77:32:e9:
27:5d:8c:1a:af:60:41:4a:95:e1:b7:1b:a6:4a:83:
a2:ab:08:66:b6:15:20:e0:69:d7:87:2d:68:99:19:
04:aa:d0:9e:f5:73:57:bb:5f:4f:b3:0b:63:57:df:
ea:32:6f:88:b8:14:0a:1a:c2:23:45:50:b5:ff:68:
ec:db:f7:a7:5c:40:30:48:b7:d2:ed:43:bf:eb:ad:
8e:3f:65:b9:e3:14:22:c4:a8:bc:3a:b8:df:ba:30:
95:c6:77:ad:b8:9b:15:21:e5:76:28:d2:6e:88:5e:
ab:ec:98:5c:08:2f:82:1a:51:40:f3:f8:af:14:69:
12:38:8a:bf:a9:20:a8:a6:e2:56:e8:1f:33:3d:90:
72:c0:9c:bd:bc:d8:66:54:f4:0b:33:1a:6f:33:e4:
b2:1c:fd:b9:e5:ef:fd:12:c8:65:09:5f:6d:60:f0:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:36:78:9F:9F:3D:DA:68:20:8B:35:E7:4C:B9:7B:12:8C:20:05
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:54:e4:ba:ab:d2:19:bc:2f:1a:f8:8e:a3:0d:49:68:70:
0a:fb:84:ec:ff:bd:91:e6:9d:4e:84:c6:18:3c:de:da:22:0b:
6d:2a:d4:93:e8:82:1f:da:cd:31:9b:60:24:15:0b:3d:ea:b5:
51:61:04:f4:80:a7:79:eb:bb:df:82:6f:11:80:96:1f:da:81:
6b:d8:42:66:4a:32:ff:17:48:44:e2:1f:da:ac:2b:17:0a:da:
f8:26:e3:c8:b5:c0:29:50:f8:dc:a9:67:42:6d:de:e1:89:06:
ff:31:84:df:ed:2d:42:7f:fd:18:52:15:92:bc:6c:30:9f:a3:
20:ad:9b:18:bd:f7:93:b1:2d:c9:75:e9:85:d0:d5:9b:57:52:
ea:5c:4f:9f:f5:ac:4d:84:1b:e9:83:1f:db:25:e3:cd:5b:65:
65:f0:64:0c:0c:c3:16:88:3d:35:70:b1:46:0e:fe:46:4b:c6:
bc:63:93:43:d6:08:59:6f:e0:18:73:1a:a1:49:6a:0d:ff:73:
20:bf:c0:cb:f3:ba:c4:71:c6:f8:3d:0c:06:cf:1a:32:ae:53:
aa:d3:65:d7:e4:a9:e9:f4:f0:48:d0:11:d1:0e:87:d5:af:82:
8b:ec:40:e7:a3:14:55:cc:19:3a:13:da:83:44:ce:0b:13:84:
d5:ff:7f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eotdJcBtHLy8RliQXPWl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwNTEzMDAwMDQ4WhcNMjYwNTE0MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg4MWEzMzY3ODlmOWYzZGRhNjgyMDhiMzVlNzRjYjk3YjEyOGMyMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIEFLa50e+4rq229HDtzSLhbqtH
vkaa5qehbA0xRKZI2E+n+xsn3dtql3MsOVM8Txp/Abpzn44rT7sPbSZxuRiKo71j
koK6CpgsCmnXrjAG0WI52VB3MuknXYwar2BBSpXhtxumSoOiqwhmthUg4GnXhy1o
mRkEqtCe9XNXu19PswtjV9/qMm+IuBQKGsIjRVC1/2js2/enXEAwSLfS7UO/662O
P2W54xQixKi8OrjfujCVxnetuJsVIeV2KNJuiF6r7JhcCC+CGlFA8/ivFGkSOIq/
qSCopuJW6B8zPZBywJy9vNhmVPQLMxpvM+SyHP255e/9EshlCV9tYPA1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGjNnifnz3aaCCLNedMuXsSjCAFMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7xU5Lqr
0hm8Lxr4jqMNSWhwCvuE7P+9keadToTGGDze2iILbSrUk+iCH9rNMZtgJBULPeq1
UWEE9ICneeu734JvEYCWH9qBa9hCZkoy/xdIROIf2qwrFwra+CbjyLXAKVD43Kln
Qm3e4YkG/zGE3+0tQn/9GFIVkrxsMJ+jIK2bGL33k7EtyXXphdDVm1dS6lxPn/Ws
TYQb6YMf2yXjzVtlZfBkDAzDFog9NXCxRg7+RkvGvGOTQ9YIWW/gGHMaoUlqDf9z
IL/Ay/O6xHHG+D0MBs8aMq5TqtNl1+Sp6fTwSNAR0Q6H1a+Ci+xA56MUVcwZOhPa
g0TOCxOE1f9/Mw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:39 2026 by rpki-client