$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json) Hash identifier: lf5w0nhMWncOEwrjs82hEHmKshsuRGk26TvHjwKdxT8= Subject key identifier: 38:4C:22:53:C7:56:D4:2F:E1:A9:29:92:00:7B:82:F3:28:87:32:99 Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019DD12CE6CB478369890FC7EBE7F89A6F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft Manifest number: 0E21 Signing time: Mon 27 Apr 2026 23:01:13 +0000 Manifest this update: Mon 27 Apr 2026 23:01:13 +0000 Manifest next update: Tue 28 Apr 2026 23:01:13 +0000 Files and hashes: 1: 6r51rXoAPdmeC4K_yqp03Vb9g2s.roa (hash: RjWH0Hn9t48ZQGZWWRbFWYn9A7hmaM+wOLDLBMuGRRM=) 2: 8FOWFEWcx16C0mva1ErD1ehkFBU.roa (hash: rn3EeCGq/aMeCBtKEwzF9PyWQiRVYlCrTF4jKTOnpKM=) 3: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (hash: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE=) 4: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (hash: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ=) 5: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: 3U3IdK6JTKEF1Nzjvbw+bMMUXTEKU2nWZrR4YD12ZBE=) 6: YGVozKeT_bwzfEiwwQRKa2fjDt4.roa (hash: uLfRMkK7zfI8iMFNVyYCqQLQn1y3LaBbbtnaH/2sb7M=) 7: b31NEv9Es8XVDEj8beb9fT9naRs.roa (hash: 3veQsyx85NL4O7dRRCNwd65jcAMA+8SLngv7KreI9GQ=) 8: ezdEdcWRJCsgcDn_h_vHY5ql2OA.roa (hash: 62UG+xnKYTXQWzqTXe9v4fS1uJsLYXFYJa2n8Hu7umU=) 9: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (hash: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA=) 10: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (hash: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI=) 11: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (hash: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4=) 12: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (hash: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d1:2c:e6:cb:47:83:69:89:0f:c7:eb:e7:f8:9a:6f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Apr 27 23:01:13 2026 GMT Not After : Apr 28 23:01:13 2026 GMT Subject: CN=384c2253c756d42fe1a92992007b82f328873299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:88:fb:a4:9d:81:51:26:ce:a2:ab:83:76: 9a:7d:45:d7:1d:9c:8e:57:a4:f0:d2:6e:e7:43:a6: 2f:d0:64:ae:11:89:a5:92:d7:bd:ca:7a:8d:57:61: 42:51:78:e3:61:63:86:f9:83:17:9a:2c:a2:07:d8: dc:dc:c0:49:3e:72:94:a9:41:3d:8d:b0:d9:d3:85: 59:08:90:c2:2e:5e:4b:c0:37:f0:6d:63:07:f9:b7: ed:9c:d4:a4:74:dc:0f:ea:22:32:6e:2e:dc:25:4b: cc:d8:37:ad:00:72:a7:a9:83:98:40:7b:8f:aa:20: 4e:87:60:6e:7d:57:0e:2c:3d:17:b5:2a:b2:47:9c: 7e:5a:bb:a8:f5:48:2b:6c:b9:5d:d2:57:71:03:75: 81:60:8b:1a:fa:12:64:31:87:c2:e5:f9:a6:8e:dd: 90:10:4a:fe:3e:54:8a:73:8e:67:0a:c1:0e:a8:6d: 3d:4e:56:91:35:74:3f:36:6c:6d:af:bb:a5:f2:5c: b9:aa:4d:ed:c9:25:9b:5e:17:24:aa:e7:25:6c:9e: 55:e4:8a:c6:63:a1:d4:76:0c:fb:9d:17:6d:ef:b0: 22:a8:58:ff:f5:e3:bf:91:b0:78:b0:a1:24:1f:d6: a3:d6:97:27:eb:2f:2a:ef:8e:2c:59:07:8e:08:1b: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4C:22:53:C7:56:D4:2F:E1:A9:29:92:00:7B:82:F3:28:87:32:99 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a3:77:a4:c7:7c:93:f3:92:bf:3b:a7:e4:38:59:93:50:53: 0f:20:6a:c2:57:48:95:d1:1b:a8:48:1c:59:8f:7f:47:d5:b4: f1:f5:95:f2:67:a6:80:7a:cd:e1:6c:6f:b3:72:db:57:5d:61: f8:1e:00:00:72:a7:a0:6a:93:8f:b7:44:45:3a:a5:83:64:e2: c9:8d:31:8a:65:c0:f5:e5:0a:74:3d:05:c7:b4:77:82:e2:84: 93:75:fc:30:78:0e:92:c0:9f:74:6b:8d:c8:1f:8d:ca:13:01: 28:a5:8e:df:3d:34:8b:24:ef:3c:25:e1:16:fc:71:02:a6:be: 8d:80:38:0a:e6:cb:b0:74:01:22:56:a8:7f:82:d1:21:d1:af: d5:67:8b:51:f6:ae:30:76:8d:08:7b:30:26:19:48:5f:df:4b: b0:5b:81:ba:7d:67:b9:3c:9b:49:71:55:f5:90:cf:40:04:47: fe:59:21:c9:70:ee:d5:f7:5e:d6:ec:f9:88:af:b7:31:f7:84: 3b:5c:82:95:ca:21:fe:cd:ab:b5:72:44:f6:a1:1b:fe:14:41: de:6a:dd:b3:96:85:12:c9:2d:36:0c:88:01:a2:e2:5d:23:6f: 0d:5d:40:bb:0b:0b:c0:79:de:6c:c3:a7:fc:5a:f3:d5:d4:9b: 3b:42:30:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3RLObLR4NpiQ/H6+f4mm8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwNDI3MjMwMTEzWhcNMjYwNDI4MjMwMTEzWjAzMTEwLwYDVQQD EygzODRjMjI1M2M3NTZkNDJmZTFhOTI5OTIwMDdiODJmMzI4ODczMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nWI+6SdgVEmzqKrg3aafUXXHZyO V6Tw0m7nQ6Yv0GSuEYmlkte9ynqNV2FCUXjjYWOG+YMXmiyiB9jc3MBJPnKUqUE9 jbDZ04VZCJDCLl5LwDfwbWMH+bftnNSkdNwP6iIybi7cJUvM2DetAHKnqYOYQHuP qiBOh2BufVcOLD0XtSqyR5x+Wruo9UgrbLld0ldxA3WBYIsa+hJkMYfC5fmmjt2Q EEr+PlSKc45nCsEOqG09TlaRNXQ/Nmxtr7ul8ly5qk3tySWbXhckquclbJ5V5IrG Y6HUdgz7nRdt77AiqFj/9eO/kbB4sKEkH9aj1pcn6y8q744sWQeOCBsFGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhMIlPHVtQv4akpkgB7gvMohzKZMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6N3pMd8 k/OSvzun5DhZk1BTDyBqwldIldEbqEgcWY9/R9W08fWV8memgHrN4Wxvs3LbV11h +B4AAHKnoGqTj7dERTqlg2TiyY0ximXA9eUKdD0Fx7R3guKEk3X8MHgOksCfdGuN yB+NyhMBKKWO3z00iyTvPCXhFvxxAqa+jYA4CubLsHQBIlaof4LRIdGv1WeLUfau MHaNCHswJhlIX99LsFuBun1nuTybSXFV9ZDPQARH/lkhyXDu1fde1uz5iK+3MfeE O1yClcoh/s2rtXJE9qEb/hRB3mrds5aFEsktNgyIAaLiXSNvDV1AuwsLwHnebMOn /Frz1dSbO0Iw/w== -----END CERTIFICATE-----Generated at Tue Apr 28 00:53:00 2026 by rpki-client