$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json) Hash identifier: GLa/oStTWY3dQeGD4M6pVuylx18MBSs4RIcQKYbTo+A= Subject key identifier: 80:D4:82:6D:26:42:11:8F:68:C6:8B:87:3D:47:C5:EF:00:BD:85:ED Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019EB921FF38F69DCD2BC25DA4E21E7B43D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft Manifest number: 0E9B Signing time: Fri 12 Jun 2026 00:01:13 +0000 Manifest this update: Fri 12 Jun 2026 00:01:13 +0000 Manifest next update: Sat 13 Jun 2026 00:01:13 +0000 Files and hashes: 1: 6r51rXoAPdmeC4K_yqp03Vb9g2s.roa (hash: RjWH0Hn9t48ZQGZWWRbFWYn9A7hmaM+wOLDLBMuGRRM=) 2: 8FOWFEWcx16C0mva1ErD1ehkFBU.roa (hash: rn3EeCGq/aMeCBtKEwzF9PyWQiRVYlCrTF4jKTOnpKM=) 3: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (hash: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE=) 4: JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa (hash: GY8WDYpP9OTbPtH0RoRmqRWgz/M7p/6mNp2SWNBriZw=) 5: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (hash: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ=) 6: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: EaTr/t+8uW13xnHUQUOz/kBvEezO+l2CjUIFMFeIe9Q=) 7: b31NEv9Es8XVDEj8beb9fT9naRs.roa (hash: 3veQsyx85NL4O7dRRCNwd65jcAMA+8SLngv7KreI9GQ=) 8: ezdEdcWRJCsgcDn_h_vHY5ql2OA.roa (hash: 62UG+xnKYTXQWzqTXe9v4fS1uJsLYXFYJa2n8Hu7umU=) 9: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (hash: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA=) 10: lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa (hash: G3jTm9EGu0sPhX18qNKUm9+l3y1AFX35FfUBguFPA5Q=) 11: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (hash: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI=) 12: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (hash: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4=) 13: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (hash: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b9:21:ff:38:f6:9d:cd:2b:c2:5d:a4:e2:1e:7b:43:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Jun 12 00:01:13 2026 GMT Not After : Jun 13 00:01:13 2026 GMT Subject: CN=80d4826d2642118f68c68b873d47c5ef00bd85ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:68:ee:c5:35:e4:d0:b3:ea:cb:9d:82:a1: 7c:df:9a:2c:c3:3f:3d:9b:f7:03:58:ef:49:44:5e: 40:c2:c5:d8:f6:7a:b1:c1:0d:ff:b8:18:f6:60:40: 35:e1:53:01:46:e8:62:49:71:25:fb:e2:33:05:d0: c4:06:fd:ca:1c:7a:b8:c1:58:78:e5:f3:0e:4f:47: fa:0f:da:e5:cc:b0:ba:ee:77:dc:6f:d6:d5:c0:85: 44:13:61:74:fc:29:a4:0d:bd:77:55:9d:fc:cc:f1: 1b:e0:d1:77:84:df:67:1f:eb:0b:7b:a2:8f:61:aa: ee:1c:37:43:26:c9:9d:a9:ea:89:02:4b:a2:db:8f: ff:53:cc:60:d1:7a:64:32:e6:12:f2:01:29:a0:dc: 47:a7:f6:c1:3e:e3:e4:eb:f7:6e:c9:5f:c9:25:af: 96:43:97:fc:ba:8e:54:2b:a9:6b:ea:5e:1d:67:76: 4c:3f:4a:73:5f:e7:49:59:8f:2c:bd:6c:d1:9e:ac: d5:a9:48:ac:69:3c:91:21:f9:64:f4:a9:e1:9e:0d: d3:9d:b7:6d:f2:33:78:13:3a:b3:96:4e:8a:27:e1: 17:6e:ea:b9:aa:9a:07:56:3b:28:9e:3e:a6:9d:2f: 0f:cd:2a:02:b2:3d:5e:57:5e:05:7f:28:2e:f9:37: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:82:6D:26:42:11:8F:68:C6:8B:87:3D:47:C5:EF:00:BD:85:ED X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2b:6d:8c:1a:c9:9f:40:61:ad:34:de:d8:8b:66:9e:86:8c: e4:27:c6:07:db:b8:68:7e:ee:19:90:c1:f8:26:67:07:fe:cd: fd:d1:9e:0e:a7:42:9d:cb:1e:7f:01:38:2d:36:4e:02:67:15: 9f:b2:bb:73:80:7e:76:bc:aa:d5:d1:04:40:db:4d:38:0b:79: 77:65:e1:0f:68:73:a8:45:4e:5a:30:42:94:95:e7:f5:73:bf: 73:d2:b7:e0:64:cf:78:90:89:53:26:7c:0f:d5:5b:f0:8e:8a: a3:b3:af:57:00:b5:a0:6c:bb:86:fe:ff:29:28:58:5a:a4:1d: c3:65:bb:fe:ae:82:d0:ba:ea:27:5e:67:5f:74:94:ea:3d:14: 60:e0:00:ac:e4:60:08:44:a8:f2:4b:fc:48:fd:f2:a5:d0:6c: b6:ea:c4:18:c5:24:97:65:2d:53:0a:ff:5f:82:45:92:ee:80: a5:1f:f0:0f:bb:81:b6:bf:f5:87:c0:20:b8:80:8b:eb:a0:31: 24:d0:c6:d9:ff:2a:5c:eb:23:b9:c4:3b:db:89:d8:16:37:aa: 28:0a:5d:cd:31:b5:2d:fc:92:35:d0:98:93:11:6a:9b:22:43: 3f:c4:54:4e:3b:21:d9:da:7d:db:44:d2:a9:0a:53:c5:27:02: 5f:06:65:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ65If849p3NK8JdpOIee0PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwNjEyMDAwMTEzWhcNMjYwNjEzMDAwMTEzWjAzMTEwLwYDVQQD Eyg4MGQ0ODI2ZDI2NDIxMThmNjhjNjhiODczZDQ3YzVlZjAwYmQ4NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8lo7sU15NCz6sudgqF835oswz89 m/cDWO9JRF5AwsXY9nqxwQ3/uBj2YEA14VMBRuhiSXEl++IzBdDEBv3KHHq4wVh4 5fMOT0f6D9rlzLC67nfcb9bVwIVEE2F0/CmkDb13VZ38zPEb4NF3hN9nH+sLe6KP YaruHDdDJsmdqeqJAkui24//U8xg0XpkMuYS8gEpoNxHp/bBPuPk6/duyV/JJa+W Q5f8uo5UK6lr6l4dZ3ZMP0pzX+dJWY8svWzRnqzVqUisaTyRIflk9Knhng3Tnbdt 8jN4Ezqzlk6KJ+EXbuq5qpoHVjsonj6mnS8PzSoCsj1eV14Ffygu+TeTJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDUgm0mQhGPaMaLhz1Hxe8AvYXtMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCttjBrJ n0BhrTTe2ItmnoaM5CfGB9u4aH7uGZDB+CZnB/7N/dGeDqdCncsefwE4LTZOAmcV n7K7c4B+dryq1dEEQNtNOAt5d2XhD2hzqEVOWjBClJXn9XO/c9K34GTPeJCJUyZ8 D9Vb8I6Ko7OvVwC1oGy7hv7/KShYWqQdw2W7/q6C0LrqJ15nX3SU6j0UYOAArORg CESo8kv8SP3ypdBsturEGMUkl2UtUwr/X4JFku6ApR/wD7uBtr/1h8AguICL66Ax JNDG2f8qXOsjucQ724nYFjeqKApdzTG1LfySNdCYkxFqmyJDP8RUTjsh2dp920TS qQpTxScCXwZlmQ== -----END CERTIFICATE-----Generated at Fri Jun 12 02:29:42 2026 by rpki-client