$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json) Hash identifier: /Gmayp/PUN/SsCpcnW1ROjpETLjZpswJBz0Kit/PC6M= Subject key identifier: 6A:E8:A9:BE:C7:12:64:07:1D:2C:F1:E8:25:6C:97:CD:F4:1D:9E:9E Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019CE7EDF2601670D7D0B1A86E72CAAAA598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft Manifest number: 0DA7 Signing time: Fri 13 Mar 2026 16:00:56 +0000 Manifest this update: Fri 13 Mar 2026 16:00:56 +0000 Manifest next update: Sat 14 Mar 2026 16:00:56 +0000 Files and hashes: 1: 2Z2J5Ju30fTSS6wJ5IKnbRjstx0.roa (hash: ozXlVAQX7heZzyY06prkBteN7ujmsdprMmTU+0njtmQ=) 2: 6r51rXoAPdmeC4K_yqp03Vb9g2s.roa (hash: RjWH0Hn9t48ZQGZWWRbFWYn9A7hmaM+wOLDLBMuGRRM=) 3: 8FOWFEWcx16C0mva1ErD1ehkFBU.roa (hash: rn3EeCGq/aMeCBtKEwzF9PyWQiRVYlCrTF4jKTOnpKM=) 4: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (hash: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE=) 5: Miwu8YXoVp5B89v9kGwcUmqn6QU.roa (hash: k3WOZfSv7shx90Y1dMVj4Nd6ciQTdDSrKwPel6VpQXo=) 6: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (hash: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ=) 7: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: WuJpZV49Sz8NqoqPKJ3mJyzOB93DSO14NGSv6Yo04x8=) 8: YGVozKeT_bwzfEiwwQRKa2fjDt4.roa (hash: uLfRMkK7zfI8iMFNVyYCqQLQn1y3LaBbbtnaH/2sb7M=) 9: b31NEv9Es8XVDEj8beb9fT9naRs.roa (hash: 3veQsyx85NL4O7dRRCNwd65jcAMA+8SLngv7KreI9GQ=) 10: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (hash: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA=) 11: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (hash: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI=) 12: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (hash: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4=) 13: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (hash: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e7:ed:f2:60:16:70:d7:d0:b1:a8:6e:72:ca:aa:a5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Mar 13 16:00:56 2026 GMT Not After : Mar 14 16:00:56 2026 GMT Subject: CN=6ae8a9bec71264071d2cf1e8256c97cdf41d9e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:05:02:bd:15:0c:cf:86:8c:ae:3e:ef:fa: c8:8f:a4:ea:93:3b:b0:c2:bd:28:aa:2e:e8:d8:17: 2e:91:0a:d4:56:dd:d7:56:d0:4b:47:d1:57:8c:5d: d9:5a:96:00:f5:79:c8:55:51:48:9d:71:57:3d:58: 46:11:74:b5:1e:ee:b5:5b:12:5a:43:4b:47:97:2f: 63:7e:e1:c8:98:f5:4b:18:ba:3f:43:90:11:96:9e: 9e:2b:53:e2:bb:40:37:cd:37:f0:63:93:16:52:c2: 1b:24:a8:42:0d:26:f3:56:bf:38:40:34:47:21:ee: bc:e8:18:88:91:09:3c:25:f6:c2:15:e1:37:87:fe: 7c:5f:7d:3c:cc:94:ff:e4:67:ed:f6:b7:d0:e5:1c: db:cf:41:c8:cc:d3:e4:07:19:d4:7f:ed:da:5f:89: 00:89:10:51:51:b7:3e:85:14:a5:91:c7:7c:7b:30: de:5a:1b:cf:ab:6e:a8:3c:41:6d:a1:4c:82:be:78: 52:9a:d6:38:a4:4a:17:ae:28:4d:a4:b9:86:30:b6: 27:f7:11:a7:1d:89:ad:b7:87:21:f1:23:cd:6e:97: 08:38:d5:17:90:76:a9:da:ef:03:f5:93:ac:c0:d9: f9:05:b8:8d:9f:fb:25:29:5e:e0:4c:39:1b:e4:c7: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E8:A9:BE:C7:12:64:07:1D:2C:F1:E8:25:6C:97:CD:F4:1D:9E:9E X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f0:d4:40:60:63:20:35:0e:c3:e6:71:33:45:2b:4f:a9:c1: 23:51:b8:19:ad:db:47:40:e8:88:60:86:fb:2a:24:15:e2:87: 3e:f5:54:b4:21:f5:f6:83:73:59:f8:c5:18:dd:11:6e:06:33: de:59:3c:d6:11:b2:eb:07:0a:9f:03:cf:ac:10:8f:9b:a6:18: 58:68:f3:05:4a:fc:3c:f9:c1:14:64:f9:59:5b:29:fe:ba:19: d4:30:61:f8:3c:e2:46:40:12:d8:d8:08:a4:5c:e6:de:e6:a5: af:56:59:ff:25:e6:84:94:3d:e5:d6:09:d4:7e:90:0f:b4:04: 16:fc:42:b1:38:1b:27:b5:91:db:04:12:b2:32:8a:24:5a:2e: 9c:1d:51:1d:7f:89:06:27:d1:42:72:36:8b:99:02:25:b6:27: 50:83:26:42:88:1a:b5:f1:a3:c9:06:22:a8:c8:0c:12:2b:cd: 1e:50:26:11:0c:0d:66:5c:5c:a6:0e:e2:76:c5:89:08:33:d5: 75:93:fe:27:9e:b1:e3:10:da:93:0d:c2:68:86:57:ef:7c:ad: af:29:70:5b:cd:7c:e9:0b:3a:8f:4b:5c:2b:06:59:60:c4:fe: c1:88:0f:0f:0a:e6:6a:bb:da:f2:3a:42:29:0b:b5:5e:76:ab: 56:2b:83:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzn7fJgFnDX0LGobnLKqqWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMzEzMTYwMDU2WhcNMjYwMzE0MTYwMDU2WjAzMTEwLwYDVQQD Eyg2YWU4YTliZWM3MTI2NDA3MWQyY2YxZTgyNTZjOTdjZGY0MWQ5ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeYFAr0VDM+GjK4+7/rIj6Tqkzuw wr0oqi7o2BcukQrUVt3XVtBLR9FXjF3ZWpYA9XnIVVFInXFXPVhGEXS1Hu61WxJa Q0tHly9jfuHImPVLGLo/Q5ARlp6eK1Piu0A3zTfwY5MWUsIbJKhCDSbzVr84QDRH Ie686BiIkQk8JfbCFeE3h/58X308zJT/5Gft9rfQ5Rzbz0HIzNPkBxnUf+3aX4kA iRBRUbc+hRSlkcd8ezDeWhvPq26oPEFtoUyCvnhSmtY4pEoXrihNpLmGMLYn9xGn HYmtt4ch8SPNbpcIONUXkHap2u8D9ZOswNn5BbiNn/slKV7gTDkb5Me/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGroqb7HEmQHHSzx6CVsl830HZ6eMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/DUQGBj IDUOw+ZxM0UrT6nBI1G4Ga3bR0DoiGCG+yokFeKHPvVUtCH19oNzWfjFGN0RbgYz 3lk81hGy6wcKnwPPrBCPm6YYWGjzBUr8PPnBFGT5WVsp/roZ1DBh+DziRkAS2NgI pFzm3ualr1ZZ/yXmhJQ95dYJ1H6QD7QEFvxCsTgbJ7WR2wQSsjKKJFounB1RHX+J BifRQnI2i5kCJbYnUIMmQogatfGjyQYiqMgMEivNHlAmEQwNZlxcpg7idsWJCDPV dZP+J56x4xDakw3CaIZX73ytrylwW8186Qs6j0tcKwZZYMT+wYgPDwrmarva8jpC KQu1XnarViuDNQ== -----END CERTIFICATE-----Generated at Fri Mar 13 17:56:24 2026 by rpki-client