$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: wdKLzejmbJv0vs3SXPhoKWmuZmbb0a0qFUhhjT2EsMw= Subject key identifier: 8B:C8:2A:26:A2:BF:2A:3F:13:1D:0C:3D:07:F3:2C:BA:AC:FC:C1:1F Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019D25F1D375C8835E2B48382D992A94F4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 09FA Signing time: Wed 25 Mar 2026 17:01:38 +0000 Manifest this update: Wed 25 Mar 2026 17:01:38 +0000 Manifest next update: Thu 26 Mar 2026 17:01:38 +0000 Files and hashes: 1: EJUfJ6nXJxIlLWpFH5xkuj0oTj0.roa (hash: td45xoqPpbc6Gcv+omp/fWPWBTYjdFq1Rce3dc0yMFE=) 2: GFld6khnEFpi6gQW0hMwMmLlwl0.roa (hash: I//YiN+Se4j9l8lgpKjzKKrJJsrwrv0cFrGyIWJUOJM=) 3: Wn0l-oo4EvJ32y-A9Te_3Bo22rE.roa (hash: EJSmVb0JmOGritsgWS3ZtbKYPG2hsEELjPpmAJHyJCw=) 4: cUAPfDvh9ctdBxtYWpRtEO8lG-g.roa (hash: b7MFeinCWo8o8FGB9kNt+44ggK2LvY6c1Zj//B8xVDY=) 5: eQN4Vnnkm9ILLr1CQqtdqk8i4Cc.roa (hash: a793akF/TsnRIOMvjjqGG7ES5VGanrP8pXq6vUrCFVg=) 6: ix3G7JJ__thdkqzxBKhHSgEyUHQ.roa (hash: tqrv+mk7OqdSNSDsJu86ikaVD3U+743I3Wq1BdDs+CY=) 7: j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (hash: gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=) 8: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: JAwevwU8cHHPbpglza4Va6TkpvH2j6P67D9c9PgVHy8=) 9: tsos8eFPeooULoppkyeNfVcA8Jk.roa (hash: P1kvV9Q/5XqDoLtfOjAVY+r8AgKwUeqcSTXWYXo6SZk=) 10: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (hash: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY=) 11: wLzBl1TIo7EO7s1obxvC0i1YAfw.roa (hash: e/MgA8dzgW4G4QsjGyKgevc8bH2s9NTc1MsFkFjalAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:d3:75:c8:83:5e:2b:48:38:2d:99:2a:94:f4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Mar 25 17:01:38 2026 GMT Not After : Mar 26 17:01:38 2026 GMT Subject: CN=8bc82a26a2bf2a3f131d0c3d07f32cbaacfcc11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:98:5b:f4:6d:5d:86:d2:bb:50:e6:d4:62: 33:70:9c:5a:b3:ad:4b:4c:f8:8f:4c:2a:16:78:63: 05:dc:a2:a4:6f:1f:67:b6:e8:b6:24:16:ce:cd:04: e1:79:ce:c3:b4:67:07:2a:9d:fe:53:52:d5:9a:81: e3:4c:d5:b1:d8:2a:87:b2:99:4b:d4:ba:94:00:95: e1:01:2b:d4:62:01:c0:35:d8:47:a4:a3:57:16:fa: e9:c6:10:18:36:6d:d2:38:9a:76:68:aa:fa:16:92: e3:f6:f5:ef:e8:83:a7:ed:aa:42:98:ac:a0:1d:60: ad:66:22:75:f2:8b:2b:1b:ea:81:3b:de:72:2a:6c: 8b:10:3e:39:e3:53:15:ca:6c:87:23:fe:e3:c2:28: 04:69:74:76:63:04:02:63:4d:06:50:ba:59:8f:13: c3:30:ab:70:ea:6a:12:b8:61:58:55:45:c2:2b:38: 15:19:36:60:5d:77:22:54:b1:4c:2c:2c:e8:3a:60: a7:35:fa:33:ca:a9:c8:f1:f5:7c:ca:e2:49:2d:55: b1:0d:7c:b4:fe:d4:29:72:2f:17:c6:7d:b2:37:66: 25:36:52:ef:43:57:06:7c:0b:0e:cd:af:63:53:6e: 47:52:6f:22:3b:8e:48:70:ac:6f:f8:62:d3:92:7d: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:2A:26:A2:BF:2A:3F:13:1D:0C:3D:07:F3:2C:BA:AC:FC:C1:1F X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:de:c2:65:f6:7b:fa:5d:92:cb:93:9d:45:e7:c5:57:cc:5f: c4:14:aa:8e:0a:87:2c:cf:bf:eb:39:6b:b9:98:2a:06:64:fc: e4:5a:2a:07:43:d8:67:b4:0b:57:52:c7:d3:db:54:50:d5:f1: 02:a4:41:19:91:c4:8f:fd:ac:ef:36:69:16:4d:22:de:75:5f: 6b:c0:f5:78:a1:10:e1:89:77:dc:4b:69:f3:94:9d:fd:87:1d: f2:70:79:b7:2f:51:ae:68:8e:8f:37:6c:4a:41:00:07:09:d1: cf:8f:ac:d5:c8:0e:c5:5e:6f:b9:12:42:d5:9e:ce:f6:ee:60: cd:3b:fe:aa:4f:1d:c3:76:9d:bc:45:ee:e5:af:b9:6f:4f:65: 38:f1:cb:1e:35:74:f8:86:c2:8b:d4:f9:87:26:bd:0e:ea:00: 1a:a4:c1:f2:50:ae:6a:fc:c3:70:37:ec:54:16:a4:5b:8e:ca: 3f:bc:d1:dd:2c:66:18:20:77:cc:31:92:de:cc:1f:ed:0e:aa: 37:06:de:cd:21:3b:3a:69:a2:e3:9b:bb:a9:b9:e7:42:be:69: e5:f3:c6:16:b3:91:5c:91:00:e8:a6:18:2b:a0:6b:c9:00:67: d0:54:ac:0e:d9:2f:c9:ff:d7:3a:84:90:0c:7e:d2:62:31:3b: 83:aa:28:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8dN1yINeK0g4LZkqlPTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMzI1MTcwMTM4WhcNMjYwMzI2MTcwMTM4WjAzMTEwLwYDVQQD Eyg4YmM4MmEyNmEyYmYyYTNmMTMxZDBjM2QwN2YzMmNiYWFjZmNjMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAqYW/RtXYbSu1Dm1GIzcJxas61L TPiPTCoWeGMF3KKkbx9ntui2JBbOzQThec7DtGcHKp3+U1LVmoHjTNWx2CqHsplL 1LqUAJXhASvUYgHANdhHpKNXFvrpxhAYNm3SOJp2aKr6FpLj9vXv6IOn7apCmKyg HWCtZiJ18osrG+qBO95yKmyLED4541MVymyHI/7jwigEaXR2YwQCY00GULpZjxPD MKtw6moSuGFYVUXCKzgVGTZgXXciVLFMLCzoOmCnNfozyqnI8fV8yuJJLVWxDXy0 /tQpci8Xxn2yN2YlNlLvQ1cGfAsOza9jU25HUm8iO45IcKxv+GLTkn3yAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvIKiaivyo/Ex0MPQfzLLqs/MEfMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt7CZfZ7 +l2Sy5OdRefFV8xfxBSqjgqHLM+/6zlruZgqBmT85FoqB0PYZ7QLV1LH09tUUNXx AqRBGZHEj/2s7zZpFk0i3nVfa8D1eKEQ4Yl33Etp85Sd/Ycd8nB5ty9RrmiOjzds SkEABwnRz4+s1cgOxV5vuRJC1Z7O9u5gzTv+qk8dw3advEXu5a+5b09lOPHLHjV0 +IbCi9T5hya9DuoAGqTB8lCuavzDcDfsVBakW47KP7zR3SxmGCB3zDGS3swf7Q6q NwbezSE7Ommi45u7qbnnQr5p5fPGFrORXJEA6KYYK6BryQBn0FSsDtkvyf/XOoSQ DH7SYjE7g6ookA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:07:04 2026 by rpki-client