$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: vtB3Be9qaIo1h4WCE0hEFQnjkEkVpdxU0vqVig/8Pvk= Subject key identifier: B4:25:23:E1:8D:D0:B6:B3:E6:29:0C:01:3F:69:CD:0E:66:1A:60:2C Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019FA33C70E47C45A8AAA283C30FCB27387B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1A15 Signing time: Mon 27 Jul 2026 11:01:14 +0000 Manifest this update: Mon 27 Jul 2026 11:01:14 +0000 Manifest next update: Tue 28 Jul 2026 11:01:14 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: 73Wjw3TFcavuMWojsMEtrDvyJ2OMCod30+ty27NRy0w=) 10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 14: jOWVYK7gkC0LkmTchBPKIshY1wg.roa (hash: GtMSCed+k6Ff9NDCC09DG2TdmxdSLzC8T5DFgatfys0=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a3:3c:70:e4:7c:45:a8:aa:a2:83:c3:0f:cb:27:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jul 27 11:01:14 2026 GMT Not After : Jul 28 11:01:14 2026 GMT Subject: CN=b42523e18dd0b6b3e6290c013f69cd0e661a602c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:1e:88:75:30:72:27:02:f5:27:23:bc:e6: dc:3b:ef:1d:d2:cf:03:d8:f0:f8:c7:bb:75:87:8d: 4b:b4:0b:c9:73:e7:1b:d0:8a:0f:e4:dd:3b:6b:bd: e6:b4:e4:c1:84:2c:5f:db:1e:89:44:0f:48:47:49: b3:29:df:12:19:51:ac:0e:83:5f:a9:12:d0:fb:10: a4:5e:02:b8:4f:be:86:ce:01:16:fc:5f:e0:4a:88: 8a:a7:40:c3:02:9b:85:bc:4c:42:15:39:38:75:eb: 91:6d:6c:b8:ce:8c:a9:d8:54:70:98:b7:43:12:cb: ea:85:4b:a5:d7:5c:8e:f1:ee:a0:f0:a2:37:25:eb: 49:6f:9c:9c:90:e4:b7:37:19:bb:ec:d2:ae:ff:80: b5:73:b3:59:ab:c9:9e:bf:6f:9a:3b:23:a9:70:5c: 1c:53:d5:40:0f:7e:6e:31:24:c9:44:b4:33:ec:c3: 31:46:cd:27:f9:98:56:d7:e1:46:01:ef:6a:0c:d1: d4:1c:7b:b7:4e:a1:c1:b1:1f:ff:26:4e:8c:c2:4f: 81:1f:74:30:d9:dd:de:35:aa:23:13:a7:72:8e:bc: 6a:57:f3:fc:ce:e2:c7:19:3b:7e:1b:c1:59:b4:05: 0d:94:c5:79:ac:54:66:d8:0d:36:e6:94:a5:b6:63: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:23:E1:8D:D0:B6:B3:E6:29:0C:01:3F:69:CD:0E:66:1A:60:2C X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:68:a9:c4:de:30:8a:8f:6a:72:24:b2:dd:2d:79:c1:d5:8c: 94:08:16:67:b1:5f:79:4a:70:31:4f:19:49:14:f8:ba:f3:b7: 95:e2:a2:7c:81:3a:cb:79:1f:24:97:04:60:14:0a:33:8d:25: 98:48:a4:88:63:ca:3e:35:56:f3:92:9f:8d:2e:d8:be:c6:4f: e2:8d:a4:93:53:2b:c4:0b:64:52:34:02:aa:fd:f5:a8:25:64: ea:35:7d:5d:3f:a9:bf:69:6f:d9:90:71:e3:83:3e:22:f1:66: 19:d6:07:95:1b:68:a1:56:57:5d:ab:5b:a8:87:ea:10:d3:02: 1a:ce:cb:52:56:45:fc:7d:70:fa:bc:32:f1:e8:8d:ef:e7:78: 13:d5:8f:59:4f:a8:57:fd:9b:6d:11:44:e4:20:57:63:11:7e: d0:31:b0:32:85:a8:36:cb:09:94:32:f2:58:a8:8b:af:c2:37: fc:78:03:5e:fe:2a:17:f0:d8:9d:b5:ef:f5:4f:cf:a4:44:9a: 04:cd:3f:41:42:46:48:3c:dc:75:7b:c7:53:50:9c:de:7b:c3: 2b:86:dc:12:07:77:f5:3f:6b:5a:67:1f:21:05:75:c6:0b:dd: 91:a5:70:37:36:39:a4:35:90:ae:80:ba:d1:09:fb:55:e5:83: 8e:9d:92:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+jPHDkfEWoqqKDww/LJzh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwNzI3MTEwMTE0WhcNMjYwNzI4MTEwMTE0WjAzMTEwLwYDVQQD EyhiNDI1MjNlMThkZDBiNmIzZTYyOTBjMDEzZjY5Y2QwZTY2MWE2MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bQeiHUwcicC9ScjvObcO+8d0s8D 2PD4x7t1h41LtAvJc+cb0IoP5N07a73mtOTBhCxf2x6JRA9IR0mzKd8SGVGsDoNf qRLQ+xCkXgK4T76GzgEW/F/gSoiKp0DDApuFvExCFTk4deuRbWy4zoyp2FRwmLdD EsvqhUul11yO8e6g8KI3JetJb5yckOS3Nxm77NKu/4C1c7NZq8mev2+aOyOpcFwc U9VAD35uMSTJRLQz7MMxRs0n+ZhW1+FGAe9qDNHUHHu3TqHBsR//Jk6Mwk+BH3Qw 2d3eNaojE6dyjrxqV/P8zuLHGTt+G8FZtAUNlMV5rFRm2A025pSltmNcTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQlI+GN0Laz5ikMAT9pzQ5mGmAsMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGipxN4w io9qciSy3S15wdWMlAgWZ7FfeUpwMU8ZSRT4uvO3leKifIE6y3kfJJcEYBQKM40l mEikiGPKPjVW85KfjS7YvsZP4o2kk1MrxAtkUjQCqv31qCVk6jV9XT+pv2lv2ZBx 44M+IvFmGdYHlRtooVZXXatbqIfqENMCGs7LUlZF/H1w+rwy8eiN7+d4E9WPWU+o V/2bbRFE5CBXYxF+0DGwMoWoNssJlDLyWKiLr8I3/HgDXv4qF/DYnbXv9U/PpESa BM0/QUJGSDzcdXvHU1Cc3nvDK4bcEgd39T9rWmcfIQV1xgvdkaVwNzY5pDWQroC6 0Qn7VeWDjp2Stg== -----END CERTIFICATE-----Generated at Mon Jul 27 12:47:00 2026 by rpki-client