$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: Ickp8rpqvd4OJstj59CKmJ0bEQRXawxcZsgIfalakQQ= Subject key identifier: 53:11:27:79:C3:5E:7E:D1:E3:03:1D:CF:A4:96:17:7D:A0:44:16:6C Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019FA03B38D65E357323A39A1CC549D2873E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1A03 Signing time: Sun 26 Jul 2026 21:01:03 +0000 Manifest this update: Sun 26 Jul 2026 21:01:03 +0000 Manifest next update: Mon 27 Jul 2026 21:01:03 +0000 Files and hashes: 1: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 2: 5_O_-Ts_PXr2shf_BK27FxmRb0E.roa (hash: HdNtBk6r6/g/NGu66avK4wtW2O6fVyALFYw/tzivy2w=) 3: 6y-secnE2lDQKI1GGrirpaJzUYs.roa (hash: 1ZBZRlQJYd1XGb21+sdUz77pf1q1nzuib9QtD1g4f7E=) 4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 5: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (hash: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=) 6: Q2lWhlnKZ6G7eyDXOunv3m467VA.roa (hash: ixUhZUmTO8/j2Eee8CMz97Hq3qnYKzXvs7vLViv2jf0=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: aatid15nJg_ZHnTqc9bbhStxui8.roa (hash: uyHxYZyZlMGakqXvepDoIH+z7/maRvFeBVXUuB8kJyE=) 9: awMrblVcKEMHhOxSuC24vtYngkk.roa (hash: 04ORlz9p15mB2l8YyRPH4E2/hzlpfmbbHrNJqGimeC4=) 10: dQaTjbpdJpL1XP1v01EKXqRYC-w.roa (hash: ULOoetRX5qMtgr34Ew/wFPFv5aHflUOVtLIXDSuv5Hw=) 11: egISSsj_emXqIzTgWR5rt0OsUxI.roa (hash: PGCg7xxw/0+DVy2qN0rYw5NAol7r6pcd4sImkT4t1IQ=) 12: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 13: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 14: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 15: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: gGOx6bZwl2mpjDAGxi/4gs+IvOpFNi9uuA1ZAomGxTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:3b:38:d6:5e:35:73:23:a3:9a:1c:c5:49:d2:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jul 26 21:01:03 2026 GMT Not After : Jul 27 21:01:03 2026 GMT Subject: CN=53112779c35e7ed1e3031dcfa496177da044166c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:e2:d8:12:98:c4:45:3c:b9:29:6b:cf:4e: b0:94:c1:e3:2f:98:b5:4d:ad:c1:d0:51:2a:d1:31: 40:14:9b:ce:39:b9:2c:69:df:7d:67:89:92:15:2c: cd:28:19:fb:c4:09:16:a1:c8:33:da:99:94:87:18: 32:83:18:4d:e2:32:c3:5c:39:d2:bd:2a:3c:36:f9: d4:78:cb:2e:db:bb:82:0a:35:a8:84:4d:11:36:ae: 0b:bf:97:b1:70:f1:2c:70:5d:24:88:75:50:0a:10: 88:b7:7f:c8:e0:09:55:61:96:26:94:b9:84:91:34: 90:fc:1a:cd:81:5f:28:f2:02:b5:15:c6:d8:55:05: cc:be:ad:06:22:a6:22:a1:7b:72:c0:f1:cd:1a:25: 85:77:18:7d:ac:7f:33:45:c8:7e:f8:96:97:ad:42: 7d:52:4b:4c:11:74:a2:6f:b9:5e:77:ed:39:99:94: 45:cf:22:75:8e:f6:2c:21:d1:d8:da:55:46:4c:67: 92:4c:5b:c6:d2:b0:66:d6:58:a8:4f:77:cd:b6:a6: a0:08:53:3c:7b:54:66:06:9d:68:f9:81:a9:d6:9f: 78:18:59:6b:d1:4c:bf:46:10:ce:de:a0:1f:57:e4: d0:ab:4c:6f:2e:a9:44:74:b8:96:89:6e:19:37:5b: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:11:27:79:C3:5E:7E:D1:E3:03:1D:CF:A4:96:17:7D:A0:44:16:6C X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f5:6c:5a:bd:3e:1a:13:ef:4d:5f:71:a7:1d:14:17:69:7c: 71:d2:19:80:60:91:bc:52:c6:6e:fa:55:79:bc:b8:8f:2e:72: d2:2d:1e:18:73:1b:cc:0a:fc:ef:36:64:80:c2:f8:2d:88:66: 3b:1c:18:f1:91:96:a2:85:eb:2c:59:87:c3:da:5e:33:b0:a5: f7:0a:09:b5:90:c4:78:b6:4a:1a:11:e2:09:17:61:a0:c0:a7: 25:89:ec:82:87:44:97:a9:7e:f0:9c:0b:f2:5a:41:a5:2c:01: 61:c8:09:4f:09:f7:51:1c:7a:74:ce:2f:32:8f:76:37:dd:ea: 43:f4:40:1b:95:60:97:71:57:bd:69:c2:3a:e0:04:89:93:56: 1a:0a:f3:d6:7c:e9:6d:ef:5f:41:2e:37:a6:1c:0c:15:25:90: 09:7c:35:01:3b:ec:ce:51:82:c5:55:52:f5:3f:11:b6:57:f9: b8:43:05:fb:fa:2c:19:77:f4:c8:27:32:51:d6:a9:10:9e:db: ef:9d:bd:18:33:8e:60:3b:8d:d9:a1:d3:98:d7:c5:89:d0:6e: 36:b7:7c:5b:51:97:11:a4:23:90:ef:4d:50:7e:33:39:2a:97: 01:2a:f6:24:8b:c6:15:70:f0:54:80:c7:14:54:76:9d:14:40: 32:5f:c8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gOzjWXjVzI6OaHMVJ0oc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwNzI2MjEwMTAzWhcNMjYwNzI3MjEwMTAzWjAzMTEwLwYDVQQD Eyg1MzExMjc3OWMzNWU3ZWQxZTMwMzFkY2ZhNDk2MTc3ZGEwNDQxNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZTi2BKYxEU8uSlrz06wlMHjL5i1 Ta3B0FEq0TFAFJvOObksad99Z4mSFSzNKBn7xAkWocgz2pmUhxgygxhN4jLDXDnS vSo8NvnUeMsu27uCCjWohE0RNq4Lv5excPEscF0kiHVQChCIt3/I4AlVYZYmlLmE kTSQ/BrNgV8o8gK1FcbYVQXMvq0GIqYioXtywPHNGiWFdxh9rH8zRch++JaXrUJ9 UktMEXSib7led+05mZRFzyJ1jvYsIdHY2lVGTGeSTFvG0rBm1lioT3fNtqagCFM8 e1RmBp1o+YGp1p94GFlr0Uy/RhDO3qAfV+TQq0xvLqlEdLiWiW4ZN1ujdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMRJ3nDXn7R4wMdz6SWF32gRBZsMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfVsWr0+ GhPvTV9xpx0UF2l8cdIZgGCRvFLGbvpVeby4jy5y0i0eGHMbzAr87zZkgML4LYhm OxwY8ZGWooXrLFmHw9peM7Cl9woJtZDEeLZKGhHiCRdhoMCnJYnsgodEl6l+8JwL 8lpBpSwBYcgJTwn3URx6dM4vMo92N93qQ/RAG5Vgl3FXvWnCOuAEiZNWGgrz1nzp be9fQS43phwMFSWQCXw1ATvszlGCxVVS9T8Rtlf5uEMF+/osGXf0yCcyUdapEJ7b 7529GDOOYDuN2aHTmNfFidBuNrd8W1GXEaQjkO9NUH4zOSqXASr2JIvGFXDwVIDH FFR2nRRAMl/IRQ== -----END CERTIFICATE-----Generated at Mon Jul 27 02:03:33 2026 by rpki-client