$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: BNgZqCRKpoab/5UuERn3rn1TuU+xSzs0hoDzh3vqMc0= Subject key identifier: 56:47:82:46:DE:84:5F:81:3F:B1:4C:08:C7:90:1C:F6:1F:39:66:D0 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019DB1A18D86CA10178D2CA79F01E4261530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 18F2 Signing time: Tue 21 Apr 2026 20:00:47 +0000 Manifest this update: Tue 21 Apr 2026 20:00:47 +0000 Manifest next update: Wed 22 Apr 2026 20:00:47 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: hum/GrDvdbOmqW/H6fwLw54LjJDbvHgddsDvBDIzPeM=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b1:a1:8d:86:ca:10:17:8d:2c:a7:9f:01:e4:26:15:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Apr 21 20:00:47 2026 GMT Not After : Apr 22 20:00:47 2026 GMT Subject: CN=56478246de845f813fb14c08c7901cf61f3966d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:db:23:99:eb:b1:af:0f:29:20:a2:d5:1d: fb:13:cd:aa:a7:0d:68:7e:79:86:61:c8:fa:e4:b4: 3f:9c:1d:d0:02:0b:ce:96:cd:9d:ce:b0:4c:c9:9b: dd:9a:ec:4d:48:6f:81:6b:2a:43:ee:73:9b:13:34: 5e:12:12:3b:e0:b9:e9:f5:03:80:b9:03:5f:99:eb: 95:99:d5:4f:93:b7:cd:04:43:b3:60:27:81:80:8b: 34:85:2d:38:b3:fd:30:36:fc:37:2f:ec:bf:c4:98: 8a:42:08:46:f4:1b:ac:0d:c2:19:fa:f7:65:4e:b1: fe:c1:36:02:49:95:c1:e6:8d:54:6f:49:b4:e2:81: dd:9a:9e:ab:30:55:d4:b0:19:55:50:0c:e1:19:34: 9a:52:5a:5a:1d:d9:21:90:36:2d:fa:4b:59:c4:44: 19:1f:5a:f0:2a:27:bc:43:4c:d6:98:5b:9a:93:06: 09:f4:a0:18:79:7e:ef:07:ff:0a:3a:ba:c8:8f:8f: a2:31:cd:15:cc:11:6a:30:f6:2b:51:93:a1:f7:e5: a9:3f:bf:93:fa:a9:ac:69:4f:e1:55:54:c3:8c:c2: c4:3b:7c:28:4b:8a:d4:b7:9f:76:80:67:e4:5e:70: c7:25:e9:ff:00:a7:6a:fd:22:13:c2:40:12:cc:22: bc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:47:82:46:DE:84:5F:81:3F:B1:4C:08:C7:90:1C:F6:1F:39:66:D0 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:19:ae:10:72:f6:33:06:b7:8e:92:fb:dd:2b:fa:04:02:c0: 29:7c:9c:9a:6b:6f:2b:fd:3e:b0:96:c1:2f:1a:a9:09:e6:7b: a9:b4:09:da:5b:63:5d:cc:47:fe:36:39:c1:c2:6e:79:69:ea: 06:2c:01:e1:80:59:88:44:45:92:b4:f2:f5:2e:49:9b:9d:bc: 10:9f:0a:2f:b2:10:dc:7d:b1:24:55:38:35:38:4a:71:81:d6: 28:2d:89:b8:e6:ec:0d:6c:57:7c:5d:be:d3:b1:03:79:1b:76: 59:f9:d8:11:e6:84:5f:8b:eb:76:b9:8d:67:c2:d1:49:5e:25: 0f:0f:64:12:e6:61:51:00:1d:af:25:04:2c:ad:e5:9d:17:d1: d9:97:a5:dd:eb:c4:c4:a5:c4:f4:39:1a:13:5d:a4:8e:cb:ab: 46:db:06:37:28:77:46:4b:21:e1:0d:17:d3:5b:7c:a1:69:af: fc:22:27:ce:94:7d:48:c3:c1:02:df:ff:a8:b8:7f:2d:71:c9: 0a:bc:ac:aa:72:03:05:0c:25:85:ab:77:c9:50:e8:0b:56:1c: a0:3d:0f:50:72:b2:ff:bb:9d:4a:fb:c0:8e:b4:ca:d9:0b:7e: 1d:f6:55:ad:93:8b:3e:cf:c4:98:a2:3f:e9:32:96:2a:ad:ca: 33:f1:97:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2xoY2GyhAXjSynnwHkJhUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNDIxMjAwMDQ3WhcNMjYwNDIyMjAwMDQ3WjAzMTEwLwYDVQQD Eyg1NjQ3ODI0NmRlODQ1ZjgxM2ZiMTRjMDhjNzkwMWNmNjFmMzk2NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlfbI5nrsa8PKSCi1R37E82qpw1o fnmGYcj65LQ/nB3QAgvOls2dzrBMyZvdmuxNSG+BaypD7nObEzReEhI74Lnp9QOA uQNfmeuVmdVPk7fNBEOzYCeBgIs0hS04s/0wNvw3L+y/xJiKQghG9BusDcIZ+vdl TrH+wTYCSZXB5o1Ub0m04oHdmp6rMFXUsBlVUAzhGTSaUlpaHdkhkDYt+ktZxEQZ H1rwKie8Q0zWmFuakwYJ9KAYeX7vB/8KOrrIj4+iMc0VzBFqMPYrUZOh9+WpP7+T +qmsaU/hVVTDjMLEO3woS4rUt592gGfkXnDHJen/AKdq/SITwkASzCK84QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZHgkbehF+BP7FMCMeQHPYfOWbQMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRmuEHL2 Mwa3jpL73Sv6BALAKXycmmtvK/0+sJbBLxqpCeZ7qbQJ2ltjXcxH/jY5wcJueWnq BiwB4YBZiERFkrTy9S5Jm528EJ8KL7IQ3H2xJFU4NThKcYHWKC2JuObsDWxXfF2+ 07EDeRt2WfnYEeaEX4vrdrmNZ8LRSV4lDw9kEuZhUQAdryUELK3lnRfR2Zel3evE xKXE9DkaE12kjsurRtsGNyh3Rksh4Q0X01t8oWmv/CInzpR9SMPBAt//qLh/LXHJ CrysqnIDBQwlhat3yVDoC1YcoD0PUHKy/7udSvvAjrTK2Qt+HfZVrZOLPs/EmKI/ 6TKWKq3KM/GX0w== -----END CERTIFICATE-----Generated at Wed Apr 22 05:26:04 2026 by rpki-client