$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: 7WpEG0TR1oPx6bvAQllndV1SKQVN5T4o7Ksxh16tT3Y= Subject key identifier: 85:C1:C6:FD:01:F6:21:3E:3A:B7:BE:C0:DC:A5:08:15:23:90:B8:58 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01A0CDB68B2373DCBE650A8D453608687B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0BE1 Signing time: Wed 23 Sep 2026 10:01:27 +0000 Manifest this update: Wed 23 Sep 2026 10:01:27 +0000 Manifest next update: Thu 24 Sep 2026 10:01:27 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: NIlWiQEY3RuqoaUyaoDMEQwOomA.roa (hash: 2SReN7GjSlbbBzqYc2FsbGOus9FoN+9Ni58tpYY9o5I=) 4: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 5: bGDcrsy1uQ5Mie-xzDZjQZVH5Bc.roa (hash: BiNEWFnYGjmRdfcF3Lt+gPgQZVk5kMfGR526Ub/jeCI=) 6: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 7: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 8: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 9: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: P5SRyNlHtRAlMB32L1pEXIGoKwYvXPuQgsZprxxj6w8=) 11: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 12: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 13: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:b6:8b:23:73:dc:be:65:0a:8d:45:36:08:68:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Sep 23 10:01:27 2026 GMT Not After : Sep 24 10:01:27 2026 GMT Subject: CN=85c1c6fd01f6213e3ab7bec0dca508152390b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:5c:22:be:57:a7:9a:bf:25:2e:16:02:fb: 8f:0b:d7:cd:cd:5b:a6:ae:75:d6:cf:07:01:3f:66: 9c:0b:ae:2d:7d:6a:a6:ff:6d:5f:5c:0c:a8:11:2a: 8f:80:f6:5f:77:de:2f:4a:40:2d:0a:32:a8:05:ed: b9:77:b4:bf:ec:ea:29:c5:97:8a:53:ed:df:d1:de: ac:b6:aa:a2:82:4b:33:90:53:b0:f0:37:3f:97:b5: 2b:6b:d1:79:5a:ad:a4:4f:9b:07:a2:48:b2:e3:85: 5a:f0:9a:3c:16:6f:87:9a:d4:07:77:45:41:73:12: da:15:71:89:51:64:12:d1:64:4e:bb:15:78:94:69: fe:7b:ef:11:f9:1e:bb:d6:c6:12:e7:3b:4d:e4:50: b5:1e:53:d8:4e:09:28:35:10:4a:52:a9:5d:f1:9a: 20:ba:fb:f5:bc:4b:5b:39:e2:3b:89:48:61:36:e4: 27:40:4d:e6:2f:3c:b4:c3:65:8f:e8:e8:fd:22:f8: 9e:70:84:36:e3:bf:b2:69:95:57:8b:ea:39:c1:c3: a5:41:fb:27:9d:1b:c4:7f:1b:4f:97:c6:2f:c6:7a: 64:20:db:48:9c:3e:e4:4c:26:43:62:e9:3e:c6:47: ae:42:ba:ff:9d:39:1a:32:b1:67:79:0e:2a:18:5b: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C1:C6:FD:01:F6:21:3E:3A:B7:BE:C0:DC:A5:08:15:23:90:B8:58 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f4:91:97:54:f4:d2:01:fc:f5:b5:37:c1:40:cb:00:91:d7: 0a:a5:e4:9b:7b:7e:22:8d:58:ce:6e:43:d0:48:c8:25:cc:4d: 2b:76:d7:8d:0f:ee:36:4b:9c:16:dc:de:a5:e4:10:a0:8d:e1: ba:b0:69:34:c0:c1:2f:16:25:c9:19:82:1b:e2:d5:e4:7b:fb: 5e:e9:0a:4d:c2:01:d5:34:51:fb:7d:e7:40:ed:24:d9:52:b8: ee:d0:bc:4a:f7:ba:cb:19:30:df:17:d1:fc:67:fc:c0:37:8f: 8f:61:a0:d2:6b:30:e6:23:c9:26:1a:c2:fd:c0:d3:f8:28:69: 96:ca:f7:a1:8e:25:2a:e8:bc:94:74:02:fd:ed:76:44:db:f3: 72:17:48:22:26:07:39:be:db:77:46:40:f1:e2:dc:78:91:4f: b3:44:3d:da:88:19:28:db:65:53:de:fb:34:87:75:55:92:22: fb:39:e4:2e:dc:57:48:49:78:56:7f:c3:eb:f2:58:82:85:69: 8d:ab:de:0b:9f:3d:1b:d4:0f:e8:44:30:af:50:c9:a9:30:72: 71:e1:2a:c6:14:fd:c2:5d:e0:46:9d:d8:a9:9d:1f:b3:a9:45: ef:11:7c:64:58:c2:be:1c:da:f4:36:4b:f6:07:60:9f:19:8e: 27:74:4d:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNtosjc9y+ZQqNRTYIaHsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwOTIzMTAwMTI3WhcNMjYwOTI0MTAwMTI3WjAzMTEwLwYDVQQD Eyg4NWMxYzZmZDAxZjYyMTNlM2FiN2JlYzBkY2E1MDgxNTIzOTBiODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RRcIr5Xp5q/JS4WAvuPC9fNzVum rnXWzwcBP2acC64tfWqm/21fXAyoESqPgPZfd94vSkAtCjKoBe25d7S/7OopxZeK U+3f0d6stqqigkszkFOw8Dc/l7Ura9F5Wq2kT5sHokiy44Va8Jo8Fm+HmtQHd0VB cxLaFXGJUWQS0WROuxV4lGn+e+8R+R671sYS5ztN5FC1HlPYTgkoNRBKUqld8Zog uvv1vEtbOeI7iUhhNuQnQE3mLzy0w2WP6Oj9IviecIQ247+yaZVXi+o5wcOlQfsn nRvEfxtPl8YvxnpkINtInD7kTCZDYuk+xkeuQrr/nTkaMrFneQ4qGFumbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXBxv0B9iE+Ore+wNylCBUjkLhYMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvSRl1T0 0gH89bU3wUDLAJHXCqXkm3t+Io1Yzm5D0EjIJcxNK3bXjQ/uNkucFtzepeQQoI3h urBpNMDBLxYlyRmCG+LV5Hv7XukKTcIB1TRR+33nQO0k2VK47tC8Sve6yxkw3xfR /Gf8wDePj2Gg0msw5iPJJhrC/cDT+Chplsr3oY4lKui8lHQC/e12RNvzchdIIiYH Ob7bd0ZA8eLceJFPs0Q92ogZKNtlU977NId1VZIi+znkLtxXSEl4Vn/D6/JYgoVp javeC589G9QP6EQwr1DJqTByceEqxhT9wl3gRp3YqZ0fs6lF7xF8ZFjCvhza9DZL 9gdgnxmOJ3RNxQ== -----END CERTIFICATE-----Generated at Wed Sep 23 20:57:43 2026 by rpki-client