$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: w3mzW2EjDpR37fmpFhkgMnLJwYgof/MygLnd4lS2NnI= Subject key identifier: 03:F9:63:78:1E:4E:A5:0E:92:56:B2:A5:9A:A6:FA:09:8E:0D:A8:58 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01A15E5592C4BE6E74F8AFA462F75827E63B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1ADA Signing time: Wed 21 Oct 2026 12:00:28 +0000 Manifest this update: Wed 21 Oct 2026 12:00:28 +0000 Manifest next update: Thu 22 Oct 2026 12:00:28 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: rEoYkLbZbIzkuiVKhRSR0R8a3Ce09mslGLbeqb9a3ng=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:55:92:c4:be:6e:74:f8:af:a4:62:f7:58:27:e6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Oct 21 12:00:28 2026 GMT Not After : Oct 22 12:00:28 2026 GMT Subject: CN=03f963781e4ea50e9256b2a59aa6fa098e0da858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:91:65:b7:8b:de:d3:bb:87:06:7b:9b:50: 1b:5e:c4:e9:4e:2c:50:b3:49:64:28:c1:ed:68:8d: 72:6f:5f:f2:9d:80:14:a3:fb:b9:93:e6:7a:3e:06: 6a:42:2e:51:cc:ac:bb:d7:94:d0:fb:2d:7e:e6:7a: 34:dd:26:61:53:82:cc:46:a1:44:40:0e:71:03:a2: b7:4b:b0:49:f2:f0:7a:83:fa:a6:ec:c2:f6:fa:d3: 41:0e:42:1e:ba:aa:0e:bc:fa:98:30:2e:a1:de:fc: 19:ba:38:c0:6d:fe:a4:39:63:4f:31:fa:b7:46:70: 61:a1:47:39:1d:ee:4f:73:ce:10:e3:5f:3c:8b:f9: 79:bf:96:51:e7:87:a0:6b:27:f6:97:a3:7b:5f:6d: 2a:e8:09:7c:1f:d9:80:7e:30:f6:11:06:37:72:6a: eb:ea:cb:36:18:21:31:54:df:90:53:8d:07:bf:fa: 97:36:f2:8e:84:0e:b0:06:e7:ea:42:65:29:87:53: 48:2e:32:20:1e:b6:c2:3c:9b:04:f4:f6:90:f3:cc: 0d:39:57:a7:76:f1:70:d2:ec:be:e9:ce:3b:83:9c: 71:61:b9:06:22:2f:92:b6:0f:86:c6:5c:5a:37:fb: ab:38:31:43:bd:58:ca:79:90:49:90:87:40:57:2d: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F9:63:78:1E:4E:A5:0E:92:56:B2:A5:9A:A6:FA:09:8E:0D:A8:58 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d5:10:9f:ef:3a:02:c6:9c:08:a9:58:80:d9:f1:9c:61:5e: 77:f8:77:ef:39:26:17:0b:38:93:2b:2a:cd:7c:b7:5c:95:87: 3a:4f:f1:c3:a8:85:71:a2:2f:68:c0:09:e8:c5:53:d3:7b:eb: 36:48:8a:72:a3:eb:9c:73:59:38:1a:aa:0d:4e:bf:28:c7:06: 4e:c7:c2:2a:4f:2c:0f:b4:73:47:57:b1:ae:bf:43:7d:22:54: 75:54:18:ac:81:4b:7d:80:cd:29:1d:9c:09:87:40:47:7f:40: 3e:df:f1:62:26:34:d0:75:39:94:24:db:69:13:a5:71:98:b1: 78:6e:37:2e:fe:73:61:52:bf:72:f4:b6:80:d9:be:46:b5:4f: bf:8a:68:ef:a2:9e:aa:50:15:b4:00:17:9e:1b:6d:05:1a:c3: 94:78:5b:e8:40:90:97:c2:e4:ad:e5:55:f7:ef:0f:03:af:15: 29:73:ee:25:ea:14:21:22:0b:58:d8:e3:2a:e6:d0:48:06:ef: 85:78:40:14:3c:f6:29:e6:a4:c3:9e:14:0c:7b:b3:7c:4e:83: b6:20:1d:8b:80:89:ec:43:65:ed:4a:52:7a:44:ae:ac:35:6b: 53:08:4a:c7:f6:b8:24:ab:c6:d4:5e:a0:b1:21:5a:e9:ca:5b: a4:32:13:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFeVZLEvm50+K+kYvdYJ+Y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYxMDIxMTIwMDI4WhcNMjYxMDIyMTIwMDI4WjAzMTEwLwYDVQQD EygwM2Y5NjM3ODFlNGVhNTBlOTI1NmIyYTU5YWE2ZmEwOThlMGRhODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbqRZbeL3tO7hwZ7m1AbXsTpTixQ s0lkKMHtaI1yb1/ynYAUo/u5k+Z6PgZqQi5RzKy715TQ+y1+5no03SZhU4LMRqFE QA5xA6K3S7BJ8vB6g/qm7ML2+tNBDkIeuqoOvPqYMC6h3vwZujjAbf6kOWNPMfq3 RnBhoUc5He5Pc84Q4188i/l5v5ZR54egayf2l6N7X20q6Al8H9mAfjD2EQY3cmrr 6ss2GCExVN+QU40Hv/qXNvKOhA6wBufqQmUph1NILjIgHrbCPJsE9PaQ88wNOVen dvFw0uy+6c47g5xxYbkGIi+Stg+GxlxaN/urODFDvVjKeZBJkIdAVy3sEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP5Y3geTqUOklaypZqm+gmODahYMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9UQn+86 AsacCKlYgNnxnGFed/h37zkmFws4kysqzXy3XJWHOk/xw6iFcaIvaMAJ6MVT03vr NkiKcqPrnHNZOBqqDU6/KMcGTsfCKk8sD7RzR1exrr9DfSJUdVQYrIFLfYDNKR2c CYdAR39APt/xYiY00HU5lCTbaROlcZixeG43Lv5zYVK/cvS2gNm+RrVPv4po76Ke qlAVtAAXnhttBRrDlHhb6ECQl8LkreVV9+8PA68VKXPuJeoUISILWNjjKubQSAbv hXhAFDz2Keakw54UDHuzfE6DtiAdi4CJ7ENl7UpSekSurDVrUwhKx/a4JKvG1F6g sSFa6cpbpDIT5w== -----END CERTIFICATE-----Generated at Wed Oct 21 17:04:11 2026 by rpki-client