$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: nHDCRjC+UyC7uFfmRS1/fYLhjHs6LPQ2LrCRPF2vIdE= Subject key identifier: BD:E5:4F:D8:4F:A9:08:99:D5:57:1F:04:E5:3A:26:F6:17:72:0C:FC Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019CE66DA7ABAAC969BEC6729005AE2B0A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 17D0 Signing time: Fri 13 Mar 2026 09:01:11 +0000 Manifest this update: Fri 13 Mar 2026 09:01:11 +0000 Manifest next update: Sat 14 Mar 2026 09:01:11 +0000 Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=) 2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=) 3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=) 4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: zQQOpLg/9TxZtx8on1o9N1cnzqY0MMgW2eoF4z9NmS8=) 6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=) 7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=) 8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=) 9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=) 10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=) 11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e6:6d:a7:ab:aa:c9:69:be:c6:72:90:05:ae:2b:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Mar 13 09:01:11 2026 GMT Not After : Mar 14 09:01:11 2026 GMT Subject: CN=bde54fd84fa90899d5571f04e53a26f617720cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:65:a6:8b:fc:71:83:5d:b1:47:86:52:3b: 24:62:fc:b5:19:19:1a:82:75:80:58:92:83:29:94: 1c:1e:eb:55:1a:91:63:69:97:e5:1a:a1:f6:8d:ab: 6b:ee:17:fc:63:d6:1c:a5:53:f8:85:8e:35:13:44: f6:ea:0a:b5:28:d1:72:6f:8e:c1:46:59:eb:20:7b: 3d:f9:c6:fb:3f:00:2a:e2:34:19:75:68:aa:6a:b4: cf:eb:a8:89:5c:10:0d:1d:44:c3:48:b6:c0:9b:4b: ab:e4:43:cf:a3:75:cc:5f:a6:22:30:56:e2:ed:09: 79:77:3e:40:17:50:a8:ca:19:62:21:68:6b:1d:17: 34:61:8c:37:28:fd:6b:a9:cd:6c:f1:a1:0b:49:82: 87:62:5e:f9:5f:89:53:38:52:96:0b:e3:ad:31:3a: fc:04:63:69:d1:77:b3:17:84:99:73:f2:1e:11:c4: 86:f6:11:9e:eb:2f:c0:44:56:e3:b8:8b:36:d6:35: fd:03:b7:67:a3:75:e1:53:16:d0:12:06:0d:d1:50: 79:4c:f7:f5:9c:ca:42:23:ab:b2:ad:0d:de:23:10: d3:2f:c4:60:26:93:46:01:9e:51:ca:95:2e:4c:02: de:ad:25:bd:22:cb:dd:1a:c4:a9:42:9b:e5:c8:62: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:4F:D8:4F:A9:08:99:D5:57:1F:04:E5:3A:26:F6:17:72:0C:FC X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:70:4f:2d:29:ca:d9:98:ed:cc:9b:4e:12:40:6f:7c:12:66: cf:aa:c6:0c:a3:cc:aa:ee:d9:3a:a7:7a:a6:0b:56:66:c6:bc: 15:6a:7c:4e:2d:ed:3e:b4:31:1c:82:1e:7f:b0:49:ae:a0:4a: bb:00:e5:71:ed:d4:e3:00:3d:4e:13:26:53:05:3f:62:f3:f6: e3:1a:b3:c0:86:0e:e4:ac:9f:2c:a8:7e:79:65:1e:1a:71:9c: d8:59:6b:40:6f:68:88:30:cc:78:d4:46:1e:1c:9f:dd:34:ef: 5e:8e:2e:de:7e:52:a1:e5:7f:85:c8:ef:3a:85:6d:e8:80:74: b1:d5:36:2f:09:55:82:ee:c4:94:f9:7e:a0:48:94:5c:f1:9d: 35:da:bf:2a:9d:5c:61:74:af:51:7b:f1:7f:20:08:56:62:ba: 41:6f:e1:43:f6:50:c2:26:61:ed:af:48:e1:2e:af:b2:03:fa: 16:cc:c0:a7:b3:38:21:f9:e4:09:c9:ac:e4:93:a2:5f:7e:72: 95:be:6b:bc:af:2b:bc:3b:06:6a:e1:c0:66:4e:25:b2:19:c2: 3f:d6:9d:9e:89:b1:e6:6a:f8:af:77:ce:6e:40:da:fb:4f:a3: c0:1c:9d:74:4d:f9:ad:86:68:dd:c4:00:ae:68:f1:45:72:40: ac:c3:47:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzmbaerqslpvsZykAWuKwogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwMzEzMDkwMTExWhcNMjYwMzE0MDkwMTExWjAzMTEwLwYDVQQD EyhiZGU1NGZkODRmYTkwODk5ZDU1NzFmMDRlNTNhMjZmNjE3NzIwY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcNlpov8cYNdsUeGUjskYvy1GRka gnWAWJKDKZQcHutVGpFjaZflGqH2jatr7hf8Y9YcpVP4hY41E0T26gq1KNFyb47B RlnrIHs9+cb7PwAq4jQZdWiqarTP66iJXBANHUTDSLbAm0ur5EPPo3XMX6YiMFbi 7Ql5dz5AF1CoyhliIWhrHRc0YYw3KP1rqc1s8aELSYKHYl75X4lTOFKWC+OtMTr8 BGNp0XezF4SZc/IeEcSG9hGe6y/ARFbjuIs21jX9A7dno3XhUxbQEgYN0VB5TPf1 nMpCI6uyrQ3eIxDTL8RgJpNGAZ5RypUuTALerSW9IsvdGsSpQpvlyGIP0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3lT9hPqQiZ1VcfBOU6JvYXcgz8MB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHBPLSnK 2ZjtzJtOEkBvfBJmz6rGDKPMqu7ZOqd6pgtWZsa8FWp8Ti3tPrQxHIIef7BJrqBK uwDlce3U4wA9ThMmUwU/YvP24xqzwIYO5KyfLKh+eWUeGnGc2FlrQG9oiDDMeNRG Hhyf3TTvXo4u3n5SoeV/hcjvOoVt6IB0sdU2LwlVgu7ElPl+oEiUXPGdNdq/Kp1c YXSvUXvxfyAIVmK6QW/hQ/ZQwiZh7a9I4S6vsgP6FszAp7M4IfnkCcms5JOiX35y lb5rvK8rvDsGauHAZk4lshnCP9adnomx5mr4r3fObkDa+0+jwByddE35rYZo3cQA rmjxRXJArMNHwg== -----END CERTIFICATE-----Generated at Fri Mar 13 12:14:14 2026 by rpki-client