$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json) Hash identifier: 7nRzzUpDzxRazgULmK7tl4PZg8Wfp1MigM9MzaTj6SQ= Subject key identifier: 09:F2:FB:6A:F2:5A:6B:10:5B:20:33:C6:DC:61:A3:F9:56:00:FA:71 Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Certificate serial: 01A17E85CB7BA3CE7D3937AA32C60706694E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft Manifest number: 1AD5 Signing time: Tue 27 Oct 2026 18:00:59 +0000 Manifest this update: Tue 27 Oct 2026 18:00:59 +0000 Manifest next update: Wed 28 Oct 2026 18:00:59 +0000 Files and hashes: 1: 1-LUU4VhlFrR5CgNLExqkgedMVto.roa (hash: pvcrd5yvfwxcXIiMFnqQbB/N6236xrQdUjUSB0U70o4=) 2: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=) 3: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=) 4: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=) 5: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: 1tmAbQWq73tdOQJ6gUiVMRqDc37t5ESE2vOlBkC9VSE=) 6: lZEX5TKEx5hCkasDPbRjOyHPXGI.roa (hash: tjb5iXKbv01rpTz7gJYnJJIH0J2+gq3FvhNX1/NC5Xs=) 7: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=) 8: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=) 9: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=) 10: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=) 11: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=) 12: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:85:cb:7b:a3:ce:7d:39:37:aa:32:c6:07:06:69:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Validity Not Before: Oct 27 18:00:59 2026 GMT Not After : Oct 28 18:00:59 2026 GMT Subject: CN=09f2fb6af25a6b105b2033c6dc61a3f95600fa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:29:14:fd:61:fe:59:ec:22:68:36:4d:0f: f0:47:8c:35:8d:52:7f:22:e3:ad:12:ba:22:52:1f: 44:8b:1e:b7:f3:e1:21:8f:a8:a2:19:0b:90:f4:6d: 4a:b8:49:32:b1:0c:a9:01:a3:de:e0:df:76:88:2b: 9c:25:43:56:c8:27:29:38:34:af:c7:fc:a4:be:93: c5:2a:41:f1:82:ab:6b:80:a0:d5:91:d5:2d:ec:13: 66:bb:86:3b:1d:24:28:f8:3e:5c:19:5a:c4:26:54: 3e:eb:cd:ca:a4:41:dc:27:ad:a1:ca:e6:42:61:49: 6a:81:9b:3b:38:ac:32:09:30:f5:2d:56:d3:b5:c4: 15:97:3a:3e:e4:69:6b:f3:be:1a:6e:27:fe:08:1c: 20:51:bc:a5:33:07:6a:a3:a6:7a:fe:2f:ec:05:f0: 80:29:13:0a:5d:ff:f3:d9:1e:48:f4:e9:0f:42:17: 6e:00:cc:ef:31:7d:d9:64:6a:ba:86:0b:0e:44:97: 28:df:76:02:0c:48:8b:32:0e:03:37:81:c2:da:e6: 62:b9:e8:0d:43:11:59:4a:64:9d:0a:cb:c9:87:35: f1:0f:6c:5d:77:df:b9:8c:c2:df:e5:91:c3:51:b7: 1b:2d:5d:9c:48:42:bb:e5:01:50:1c:69:ca:06:16: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:FB:6A:F2:5A:6B:10:5B:20:33:C6:DC:61:A3:F9:56:00:FA:71 X509v3 Authority Key Identifier: keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a9:53:0b:2f:20:03:3d:c8:22:ef:60:08:cf:42:e8:4f:b9: 45:a4:70:70:1e:b3:f5:13:b4:a7:73:b3:d4:37:3f:aa:7e:7e: c3:0c:05:d4:9a:db:72:e6:75:c7:b0:35:c7:ff:69:c3:70:4d: fe:e4:99:a4:0e:a6:cc:3e:56:1c:27:21:55:17:ef:8d:3c:89: 65:54:d6:e1:48:78:19:38:62:58:e0:89:90:e1:36:2a:f6:03: e1:8c:10:dd:1c:40:f2:62:92:24:59:bd:3b:45:5a:68:63:73: 40:01:60:ee:62:6c:dd:dd:ef:19:a4:ca:aa:a0:2a:59:00:b0: 0a:63:f8:dc:3c:a5:64:51:9a:c4:ba:9e:16:14:f6:1a:79:31: e2:68:a3:ee:5a:b7:35:5a:d0:d7:5a:1d:4f:c0:08:7e:55:ab: ad:2b:cf:64:85:b6:3d:f4:7d:ee:07:08:79:db:09:ae:0f:a5: 4c:3b:6c:2c:a8:9f:52:83:84:b6:09:4a:5b:e0:9e:33:62:ff: 55:70:86:b3:6f:94:83:5b:70:b8:79:68:c3:f7:64:61:56:dd: 1e:36:cd:b6:40:c3:97:ae:e3:96:ee:9a:30:21:56:e7:d0:2d: 51:80:ad:73:a2:1a:38:95:88:60:40:7b:04:23:d7:df:d3:ea: 40:85:60:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+hct7o859OTeqMsYHBmlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx MDZkOTcwHhcNMjYxMDI3MTgwMDU5WhcNMjYxMDI4MTgwMDU5WjAzMTEwLwYDVQQD EygwOWYyZmI2YWYyNWE2YjEwNWIyMDMzYzZkYzYxYTNmOTU2MDBmYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0pFP1h/lnsImg2TQ/wR4w1jVJ/ IuOtEroiUh9Eix638+Ehj6iiGQuQ9G1KuEkysQypAaPe4N92iCucJUNWyCcpODSv x/ykvpPFKkHxgqtrgKDVkdUt7BNmu4Y7HSQo+D5cGVrEJlQ+683KpEHcJ62hyuZC YUlqgZs7OKwyCTD1LVbTtcQVlzo+5Glr874abif+CBwgUbylMwdqo6Z6/i/sBfCA KRMKXf/z2R5I9OkPQhduAMzvMX3ZZGq6hgsORJco33YCDEiLMg4DN4HC2uZiuegN QxFZSmSdCsvJhzXxD2xdd9+5jMLf5ZHDUbcbLV2cSEK75QFQHGnKBhZS1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAny+2ryWmsQWyAzxtxho/lWAPpxMB8GA1UdIwQY MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1 LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKlTCy8g Az3IIu9gCM9C6E+5RaRwcB6z9RO0p3Oz1Dc/qn5+wwwF1JrbcuZ1x7A1x/9pw3BN /uSZpA6mzD5WHCchVRfvjTyJZVTW4Uh4GThiWOCJkOE2KvYD4YwQ3RxA8mKSJFm9 O0VaaGNzQAFg7mJs3d3vGaTKqqAqWQCwCmP43DylZFGaxLqeFhT2Gnkx4mij7lq3 NVrQ11odT8AIflWrrSvPZIW2PfR97gcIedsJrg+lTDtsLKifUoOEtglKW+CeM2L/ VXCGs2+Ug1twuHlow/dkYVbdHjbNtkDDl67jlu6aMCFW59AtUYCtc6IaOJWIYEB7 BCPX39PqQIVgsA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:59:55 2026 by rpki-client