$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json) Hash identifier: kFTKTfXjCf2yIoM9ip+CReYU6jx21/hfHCjIYtgvEIc= Subject key identifier: CC:BA:7A:6E:AA:6D:50:23:CA:63:87:A6:1A:D6:6A:2B:7F:B8:D4:CE Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 01A15EFABFD1F856A407A298DD67C6986F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft Manifest number: 1AD7 Signing time: Wed 21 Oct 2026 15:00:53 +0000 Manifest this update: Wed 21 Oct 2026 15:00:53 +0000 Manifest next update: Thu 22 Oct 2026 15:00:53 +0000 Files and hashes: 1: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (hash: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg=) 2: CkKLYj92galNREO338sWbNXvtys.roa (hash: GswGrCpFRGcvwQ2BBbOurYuHd/8bVtTdmHhmb10JZX0=) 3: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (hash: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY=) 4: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (hash: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o=) 5: T6WYRwpE69f1_segiofKG18EyPU.roa (hash: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw=) 6: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (hash: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc=) 7: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (hash: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4=) 8: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (hash: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY=) 9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: I5ZiMnJPKKiv5UVajTaVzg9LRDxppsqLhOR3Se397tE=) 10: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (hash: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:fa:bf:d1:f8:56:a4:07:a2:98:dd:67:c6:98:6f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Oct 21 15:00:53 2026 GMT Not After : Oct 22 15:00:53 2026 GMT Subject: CN=ccba7a6eaa6d5023ca6387a61ad66a2b7fb8d4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4f:5b:a8:8b:b2:07:30:e4:bc:cc:c8:01:c1: 36:63:13:37:b9:69:99:e2:a6:52:cc:ad:aa:20:00: 06:81:cc:ea:0c:a8:57:00:bd:d6:8f:ca:55:58:9b: 93:ca:8a:16:78:54:bb:b6:fa:94:e4:bc:98:b8:5b: 9d:93:54:b9:ed:b2:9c:2d:93:ad:40:b0:40:5d:6b: e7:fd:3d:e0:f0:94:c6:db:d8:d2:b8:0f:d7:42:3f: 78:f7:61:a6:57:8b:0f:31:9f:38:a1:ef:68:ef:ea: 7a:45:21:e7:5f:20:2d:94:f2:1f:23:52:ef:92:7f: 65:05:91:98:c5:12:ba:cb:07:09:33:87:5a:e4:ee: 44:3e:e7:61:9a:29:21:13:c4:51:c0:ff:7c:97:04: 14:2f:4c:80:1a:ad:76:25:7d:c0:48:33:57:ad:6a: 87:ad:38:ee:40:53:23:f4:fe:8e:59:18:2b:9e:55: 43:f9:40:f3:61:85:01:49:c3:9c:49:57:ee:ea:23: 18:f4:9d:27:9c:4d:95:ff:67:7e:dc:39:cb:16:c3: df:cb:86:9f:16:99:e2:d0:64:cf:f5:16:3e:df:1c: 0e:22:10:0c:a7:54:f2:ca:a7:15:b8:b6:67:8f:ce: 74:35:57:b8:f9:18:c8:e0:e8:e2:15:73:66:f5:7f: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:7A:6E:AA:6D:50:23:CA:63:87:A6:1A:D6:6A:2B:7F:B8:D4:CE X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:31:b7:f3:a4:40:4d:dc:a3:22:9e:94:62:55:c3:a8:8b:85: c3:b4:ab:1c:8b:c4:1a:78:ef:55:09:81:40:a9:4f:23:46:c9: 41:7a:4c:83:ba:5f:19:f1:de:15:c2:0e:b7:86:cd:e9:91:0d: 21:ce:f2:80:33:bd:eb:67:e1:24:f0:32:45:69:fd:7b:c8:26: 87:ec:aa:63:db:67:bb:0f:61:f2:cc:e2:0e:e6:29:c7:3c:aa: 81:07:fa:06:43:55:3f:ba:6f:bf:00:ee:ab:11:d9:71:75:ab: 1d:93:35:f3:26:fe:8d:6e:77:fc:e8:b6:a6:11:97:2a:67:b5: 79:eb:38:34:9b:72:59:22:71:cc:46:77:f5:77:42:a3:e9:c8: 1b:ee:29:c1:61:4d:c3:a1:fd:f5:37:69:38:33:89:1e:de:c9: 98:0a:d8:ad:eb:85:b2:7c:0d:14:39:5a:7f:0e:35:d5:bc:c7: 6d:46:cf:80:f4:57:a6:bb:9a:44:ac:4d:41:f4:08:24:45:2d: a3:34:fc:85:7d:f4:3a:05:c5:c0:8f:4b:5e:2b:a7:f8:9d:89: 2e:bf:3f:39:08:1f:88:b6:09:b6:b7:b9:55:17:d4:71:48:29: 8d:5d:b4:92:ed:d4:78:a8:22:5d:88:68:ef:d3:7a:01:b7:3c: 06:b9:8d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFe+r/R+FakB6KY3WfGmG8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYxMDIxMTUwMDUzWhcNMjYxMDIyMTUwMDUzWjAzMTEwLwYDVQQD EyhjY2JhN2E2ZWFhNmQ1MDIzY2E2Mzg3YTYxYWQ2NmEyYjdmYjhkNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E9bqIuyBzDkvMzIAcE2YxM3uWmZ 4qZSzK2qIAAGgczqDKhXAL3Wj8pVWJuTyooWeFS7tvqU5LyYuFudk1S57bKcLZOt QLBAXWvn/T3g8JTG29jSuA/XQj9492GmV4sPMZ84oe9o7+p6RSHnXyAtlPIfI1Lv kn9lBZGYxRK6ywcJM4da5O5EPudhmikhE8RRwP98lwQUL0yAGq12JX3ASDNXrWqH rTjuQFMj9P6OWRgrnlVD+UDzYYUBScOcSVfu6iMY9J0nnE2V/2d+3DnLFsPfy4af Fpni0GTP9RY+3xwOIhAMp1TyyqcVuLZnj850NVe4+RjI4OjiFXNm9X/BtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy6em6qbVAjymOHphrWait/uNTOMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDG386RA TdyjIp6UYlXDqIuFw7SrHIvEGnjvVQmBQKlPI0bJQXpMg7pfGfHeFcIOt4bN6ZEN Ic7ygDO962fhJPAyRWn9e8gmh+yqY9tnuw9h8sziDuYpxzyqgQf6BkNVP7pvvwDu qxHZcXWrHZM18yb+jW53/Oi2phGXKme1ees4NJtyWSJxzEZ39XdCo+nIG+4pwWFN w6H99TdpODOJHt7JmArYreuFsnwNFDlafw411bzHbUbPgPRXpruaRKxNQfQIJEUt ozT8hX30OgXFwI9LXiun+J2JLr8/OQgfiLYJtre5VRfUcUgpjV20ku3UeKgiXYho 79N6Abc8BrmN5Q== -----END CERTIFICATE-----Generated at Thu Oct 22 03:22:03 2026 by rpki-client