$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: GEsGV38IjC7PlBZd5y0YcPOl7kAY1a6kfXYM2GVXzOg= Subject key identifier: 89:F3:EC:C9:56:1F:1F:AA:17:DA:F3:88:03:00:6D:16:FF:66:7A:3E Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019CDDD80277F42710F0DCE63111938825C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1889 Signing time: Wed 11 Mar 2026 17:00:46 +0000 Manifest this update: Wed 11 Mar 2026 17:00:46 +0000 Manifest next update: Thu 12 Mar 2026 17:00:46 +0000 Files and hashes: 1: 1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa (hash: DghtjqwzV9SP1cuZUpSR5xMtmbQ0rFZw8ehQ3/eY7W0=) 2: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 3: 5AijEti-HcNXwniWHsbH152C1Z4.roa (hash: ibGOFvLxanS5CIErygh1i82Hb9gI9oZVrjZKEjZmGRg=) 4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 5: Mt1skFWcWKz8vOgiig4w0Mi-M48.roa (hash: hRwnjk+rD9eBJBMsuX5eOFh0auZEQfukDtfefVWTRGQ=) 6: NF-BQhzzUTXiylJC1JLfyL2IYa0.roa (hash: RWg1VoStDZQpV4Z/AFU+xbdXjMAvA+sGAZu7kpEePOE=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: awMrblVcKEMHhOxSuC24vtYngkk.roa (hash: 04ORlz9p15mB2l8YyRPH4E2/hzlpfmbbHrNJqGimeC4=) 9: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 10: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 11: hcZodqy8X-H5WC_Lqd2mr-PLkDs.roa (hash: jpRi/gBPWw3omm1CGYO0omi2PHSUnZ7b7VkghvKyBcA=) 12: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 13: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: hynj0vaDNBkZPf9HkDWTUHuQOQo4T1a0JtN6UodiwMo=) 14: yrM0soQqx_j0-1MHLmyxRBwRLbM.roa (hash: W92AJMwPEMvy6l2A/2J7r66vBSLFPMTIh8GEtzvHHq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 15:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:dd:d8:02:77:f4:27:10:f0:dc:e6:31:11:93:88:25:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Mar 11 17:00:46 2026 GMT Not After : Mar 12 17:00:46 2026 GMT Subject: CN=89f3ecc9561f1faa17daf38803006d16ff667a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:ab:dd:ee:7b:6e:4f:59:07:e9:37:a2:02: 05:da:80:ea:39:5f:7e:5b:d5:5f:da:8f:82:0d:08: f6:32:41:3b:70:62:97:b5:83:08:fb:77:0c:5a:98: de:6b:29:e4:d1:4a:9c:51:e6:6b:2f:6e:eb:89:1f: 13:18:2d:59:1b:d5:5d:0a:b2:57:3e:aa:d8:ad:51: 7e:d7:2f:a9:2e:61:75:97:f6:30:02:08:61:ae:b2: 29:68:3e:7f:d1:1b:96:c0:5d:aa:cc:73:55:b1:e0: b1:7e:21:55:94:41:9c:a7:b4:4c:14:08:8d:ff:d8: b4:25:37:f9:f6:58:b5:9c:bd:05:72:d8:c7:d4:7b: 55:f6:d6:05:ec:f3:0b:25:80:12:67:c4:a7:83:96: e5:f4:eb:9f:d7:e7:23:ed:a9:54:b3:d3:b9:11:4a: 8c:b2:4b:9a:53:4e:0f:d6:47:f7:3c:63:3c:b9:9d: 3f:dd:c3:13:b6:22:71:37:f0:93:e4:96:d2:98:e0: f2:cb:15:f9:70:6c:66:1b:9c:5f:78:dd:d2:2d:cf: 34:a7:f4:34:97:cd:c9:40:40:04:ef:d6:2e:e5:c6: a3:10:bc:0e:6d:78:12:82:41:a3:3e:24:b6:0b:f2: 83:06:06:d7:f5:46:e7:66:37:4f:48:89:c9:7c:bf: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F3:EC:C9:56:1F:1F:AA:17:DA:F3:88:03:00:6D:16:FF:66:7A:3E X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b4:42:b3:c0:03:db:7b:36:1a:55:48:d5:7a:e6:9d:02:d8: 6e:16:38:63:3e:c1:9a:7a:2b:bb:97:ed:2a:be:9c:c5:9e:69: 77:bc:3d:68:fc:50:fe:57:26:75:e2:3d:6a:95:a5:50:8d:66: 78:d2:98:7d:77:cb:93:ce:e1:97:82:e8:b1:8e:97:68:54:e8: 9b:f6:19:25:7a:f9:70:38:ac:ce:38:fa:05:40:e6:1a:af:b4: a2:80:e7:cf:73:f4:92:67:ea:fa:e0:b7:8c:76:41:ba:ce:63: 49:fc:d7:fe:3b:05:2c:55:57:f1:f7:f9:26:5e:4d:d9:19:62: 8a:8d:05:3f:5a:e1:90:d8:ef:67:be:d0:7d:b7:ac:01:c9:10: 2f:44:27:b8:73:11:6c:a5:f5:96:c5:c7:ac:e7:3a:fe:1c:1f: 45:39:16:74:d0:5a:e9:62:3f:b5:a8:b4:ae:78:f3:a7:39:70: 3b:ff:4c:0f:62:fe:6b:f2:22:e3:3e:af:08:cc:1f:f8:02:42: 14:ca:8c:6b:b2:e6:63:0c:00:67:2e:ad:1c:4b:09:51:6a:13: 1f:3c:9a:d9:87:e8:56:5a:03:b6:a8:1a:98:52:ac:2b:c4:9f: 13:5f:a9:c6:42:4a:b6:ab:c2:86:4f:7b:12:59:c5:78:98:6b: d0:7c:50:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzd2AJ39CcQ8NzmMRGTiCXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMzExMTcwMDQ2WhcNMjYwMzEyMTcwMDQ2WjAzMTEwLwYDVQQD Eyg4OWYzZWNjOTU2MWYxZmFhMTdkYWYzODgwMzAwNmQxNmZmNjY3YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ar3e57bk9ZB+k3ogIF2oDqOV9+ W9Vf2o+CDQj2MkE7cGKXtYMI+3cMWpjeaynk0UqcUeZrL27riR8TGC1ZG9VdCrJX PqrYrVF+1y+pLmF1l/YwAghhrrIpaD5/0RuWwF2qzHNVseCxfiFVlEGcp7RMFAiN /9i0JTf59li1nL0FctjH1HtV9tYF7PMLJYASZ8Sng5bl9Ouf1+cj7alUs9O5EUqM skuaU04P1kf3PGM8uZ0/3cMTtiJxN/CT5JbSmODyyxX5cGxmG5xfeN3SLc80p/Q0 l83JQEAE79Yu5cajELwObXgSgkGjPiS2C/KDBgbX9UbnZjdPSInJfL/B6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInz7MlWHx+qF9rziAMAbRb/Zno+MB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7RCs8AD 23s2GlVI1XrmnQLYbhY4Yz7Bmnoru5ftKr6cxZ5pd7w9aPxQ/lcmdeI9apWlUI1m eNKYfXfLk87hl4LosY6XaFTom/YZJXr5cDiszjj6BUDmGq+0ooDnz3P0kmfq+uC3 jHZBus5jSfzX/jsFLFVX8ff5Jl5N2Rliio0FP1rhkNjvZ77QfbesAckQL0QnuHMR bKX1lsXHrOc6/hwfRTkWdNBa6WI/tai0rnjzpzlwO/9MD2L+a/Ii4z6vCMwf+AJC FMqMa7LmYwwAZy6tHEsJUWoTHzya2YfoVloDtqgamFKsK8SfE1+pxkJKtqvChk97 ElnFeJhr0HxQyg== -----END CERTIFICATE-----Generated at Wed Mar 11 21:25:22 2026 by rpki-client