$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: 00HiCZ41a1ET7cx8NEdB6VbQ1Cp8ieJEGJwyo0nbkDw= Subject key identifier: E3:B2:CD:7E:07:2C:E7:1F:5A:B1:37:A2:6E:07:38:94:11:FE:15:74 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019DCC748E5B0446C10E3448CDE527A08A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1907 Signing time: Mon 27 Apr 2026 01:01:23 +0000 Manifest this update: Mon 27 Apr 2026 01:01:23 +0000 Manifest next update: Tue 28 Apr 2026 01:01:23 +0000 Files and hashes: 1: 1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa (hash: DghtjqwzV9SP1cuZUpSR5xMtmbQ0rFZw8ehQ3/eY7W0=) 2: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 3: 5AijEti-HcNXwniWHsbH152C1Z4.roa (hash: ibGOFvLxanS5CIErygh1i82Hb9gI9oZVrjZKEjZmGRg=) 4: HbOjPbv5QjdLQhQdTvtkCXnt7nc.roa (hash: KR5O2ujcW7+YDAn9ZT3+iWV89KxEtRFeqHSPp1JTNPs=) 5: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 6: Mt1skFWcWKz8vOgiig4w0Mi-M48.roa (hash: hRwnjk+rD9eBJBMsuX5eOFh0auZEQfukDtfefVWTRGQ=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: _WVNvfXM_WmbIQ3ay4Lcmk4pizY.roa (hash: MtzyyOIkCIQB72iHqyTrVDkrHZWIjw23QbOh9+6OxNs=) 9: awMrblVcKEMHhOxSuC24vtYngkk.roa (hash: 04ORlz9p15mB2l8YyRPH4E2/hzlpfmbbHrNJqGimeC4=) 10: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 11: g84rFLtWrM7i33dQKaxZSOCxStM.roa (hash: YdAbvWEApSB2fxay40qHYT4n18C0xy7Th956g6YA6cc=) 12: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 13: hcZodqy8X-H5WC_Lqd2mr-PLkDs.roa (hash: jpRi/gBPWw3omm1CGYO0omi2PHSUnZ7b7VkghvKyBcA=) 14: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 15: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: eN+u04Kv4Zr/V/gh7BA+ohVEgWtg6FZNM1pDmm2HAYQ=) 16: yrM0soQqx_j0-1MHLmyxRBwRLbM.roa (hash: W92AJMwPEMvy6l2A/2J7r66vBSLFPMTIh8GEtzvHHq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:74:8e:5b:04:46:c1:0e:34:48:cd:e5:27:a0:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Apr 27 01:01:23 2026 GMT Not After : Apr 28 01:01:23 2026 GMT Subject: CN=e3b2cd7e072ce71f5ab137a26e07389411fe1574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:29:2c:17:d7:9b:7f:3f:ab:e5:f3:53:e0: 13:a7:f7:84:ef:0e:15:bc:8a:ba:ac:60:9a:b5:91: ec:e1:63:b2:db:11:21:02:19:6a:85:b3:01:92:8b: 16:e0:2e:ea:cc:5a:13:1a:44:c1:bc:d2:ea:ec:eb: 36:1b:39:04:b7:87:5e:e8:48:a4:00:26:be:62:bd: 9b:0b:01:d7:39:e4:94:d3:f9:a8:2c:ad:db:21:94: b4:38:d8:5b:42:d2:aa:d2:cd:bd:a0:09:80:08:f1: 07:a8:7d:ef:75:7b:a9:a9:6f:7b:0f:43:73:51:bc: 05:34:5f:29:d6:21:94:7f:f7:a3:51:af:7d:bc:48: af:7e:43:01:12:de:0b:24:98:df:27:94:46:85:57: f7:a1:c2:9a:4d:b2:5c:12:bf:f6:2b:ab:b9:91:e2: 86:b1:ac:b0:01:61:0a:8e:3b:06:90:81:b5:da:5f: 55:22:44:e9:32:b3:9d:c4:b2:7c:ce:69:ba:68:37: 09:f0:21:08:a9:7b:a7:d8:f0:67:3c:46:97:cb:23: 8c:66:e0:06:f1:1e:58:0f:21:31:0b:33:f8:47:22: 6f:33:7f:36:7e:3a:bd:6e:56:fc:a7:c8:e6:a0:72: 87:b2:0d:64:be:6a:e3:f8:cf:84:a9:7b:1b:55:78: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:CD:7E:07:2C:E7:1F:5A:B1:37:A2:6E:07:38:94:11:FE:15:74 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b3:03:ea:d0:15:43:b1:1a:e5:a5:5d:b7:0b:8b:4f:a1:74: 3a:66:6c:59:a3:b2:b0:55:4c:7f:6f:94:e5:68:dd:f8:37:08: 67:f6:9b:02:16:c6:e2:c9:dc:8d:5f:6b:0e:42:28:bd:71:d4: 4e:9f:57:f8:86:e1:7d:89:42:ff:d0:0f:b0:c6:7c:d5:4b:c5: 73:6c:e7:5d:c7:f3:04:bf:82:38:4b:21:88:3b:46:ae:04:1e: 58:3d:97:73:df:6c:2c:c6:50:29:ac:3d:a3:97:4d:92:b3:6f: 50:93:a4:48:8f:3a:60:04:75:ff:2c:95:de:55:62:95:0b:be: 61:15:29:27:0a:3b:28:70:93:f2:86:25:e7:54:a3:33:42:78: 97:ad:99:49:ce:ce:18:33:4d:80:f9:6e:fa:8c:99:eb:e4:49: e8:66:b8:ff:20:ac:3d:fe:43:a0:b9:1b:8d:d4:00:9e:3c:b5: 50:81:4a:93:3d:84:bd:65:8d:36:73:b8:61:d3:01:5e:0e:d4: 44:aa:50:ac:64:58:93:17:71:3f:17:57:ad:86:e3:a2:9f:b0: 65:09:26:e2:11:57:07:8c:a4:57:86:fc:2d:06:ac:b2:8a:0e: b6:0c:d2:61:6c:9f:16:63:82:d9:cf:97:cc:b8:ec:cd:28:c9: 12:5c:50:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MdI5bBEbBDjRIzeUnoIoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwNDI3MDEwMTIzWhcNMjYwNDI4MDEwMTIzWjAzMTEwLwYDVQQD EyhlM2IyY2Q3ZTA3MmNlNzFmNWFiMTM3YTI2ZTA3Mzg5NDExZmUxNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7kpLBfXm38/q+XzU+ATp/eE7w4V vIq6rGCatZHs4WOy2xEhAhlqhbMBkosW4C7qzFoTGkTBvNLq7Os2GzkEt4de6Eik ACa+Yr2bCwHXOeSU0/moLK3bIZS0ONhbQtKq0s29oAmACPEHqH3vdXupqW97D0Nz UbwFNF8p1iGUf/ejUa99vEivfkMBEt4LJJjfJ5RGhVf3ocKaTbJcEr/2K6u5keKG saywAWEKjjsGkIG12l9VIkTpMrOdxLJ8zmm6aDcJ8CEIqXun2PBnPEaXyyOMZuAG 8R5YDyExCzP4RyJvM382fjq9blb8p8jmoHKHsg1kvmrj+M+EqXsbVXhqUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOyzX4HLOcfWrE3om4HOJQR/hV0MB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7MD6tAV Q7Ea5aVdtwuLT6F0OmZsWaOysFVMf2+U5Wjd+DcIZ/abAhbG4sncjV9rDkIovXHU Tp9X+IbhfYlC/9APsMZ81UvFc2znXcfzBL+COEshiDtGrgQeWD2Xc99sLMZQKaw9 o5dNkrNvUJOkSI86YAR1/yyV3lVilQu+YRUpJwo7KHCT8oYl51SjM0J4l62ZSc7O GDNNgPlu+oyZ6+RJ6Ga4/yCsPf5DoLkbjdQAnjy1UIFKkz2EvWWNNnO4YdMBXg7U RKpQrGRYkxdxPxdXrYbjop+wZQkm4hFXB4ykV4b8LQassooOtgzSYWyfFmOC2c+X zLjszSjJElxQSQ== -----END CERTIFICATE-----Generated at Mon Apr 27 07:16:01 2026 by rpki-client