$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: WpeRQA30UaybJIg6+hIGduYE4kwZa4wxQRpqh9DxSSs= Subject key identifier: 2D:49:14:81:1E:75:F4:50:AB:DD:0C:D9:81:AB:C7:F3:8D:A9:51:35 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019CE47EA1184CA4479F1C180CAE6DAD6906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 18A0 Signing time: Fri 13 Mar 2026 00:00:29 +0000 Manifest this update: Fri 13 Mar 2026 00:00:29 +0000 Manifest next update: Sat 14 Mar 2026 00:00:29 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: J7rQibY3a8-MeIzjHxJ_un-Q56k.roa (hash: KfYp7j0f60mC69NVOXIfMLH4hMu/T36lhK6azRv6oDs=) 6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: kvfNf3LN9uvqA1NAwQPqcGM2C6lGx+7xltN8fnj0K5o=) 11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:7e:a1:18:4c:a4:47:9f:1c:18:0c:ae:6d:ad:69:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Mar 13 00:00:29 2026 GMT Not After : Mar 14 00:00:29 2026 GMT Subject: CN=2d4914811e75f450abdd0cd981abc7f38da95135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:06:4d:85:a8:a7:c1:fa:f0:44:e5:48:5a: 37:86:ba:ae:e5:5f:f3:36:5a:f5:e2:5c:3c:74:c3: a7:43:5f:cb:ac:88:62:32:38:e1:8c:fd:9d:b1:f2: db:23:db:10:cf:39:90:4e:90:a7:9f:28:47:ea:34: f9:f3:e2:ca:57:dc:36:f2:28:67:bc:41:8f:3a:28: 53:ed:0d:1c:12:3a:68:eb:19:14:7b:45:c0:b6:e7: cb:e0:d4:9d:1e:71:3e:da:76:58:04:3d:a1:df:ee: 86:f5:41:c6:98:a9:40:77:a2:75:07:4d:10:c6:b7: 95:b9:77:b6:f2:27:2d:a3:bd:79:28:09:57:ea:b5: c6:ac:9e:2f:e8:12:62:53:81:b9:70:e9:47:1c:ee: c9:7f:db:68:43:86:1c:d9:21:03:8e:34:25:6e:72: dc:60:a1:09:a9:e2:a9:15:4f:1d:4b:8a:8d:7b:3b: b4:22:58:a3:c0:d0:87:fc:00:ca:89:f5:0c:47:12: d4:3f:3c:09:73:f8:36:7c:78:de:f0:59:42:78:d4: ff:33:07:09:ba:43:e1:94:e9:ef:00:35:00:fe:48: 6c:c6:5d:36:92:9e:c3:a9:f0:96:e0:1f:6d:b7:18: 7d:bf:1e:3e:4b:99:32:41:63:2d:79:81:e1:d4:b0: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:49:14:81:1E:75:F4:50:AB:DD:0C:D9:81:AB:C7:F3:8D:A9:51:35 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:22:d1:bb:18:3b:c3:96:36:b9:bc:6c:a1:b9:6c:f9:28:72: 0c:08:85:68:bc:38:d0:b8:c2:21:c3:dc:8f:65:25:49:0f:64: e3:2e:46:88:d6:20:ca:8b:21:1c:45:35:c0:67:27:c8:a0:60: 70:8a:10:46:6d:0d:52:9e:02:07:ea:3b:9d:a8:fd:88:be:54: c0:3b:e6:bb:42:c1:5c:99:ca:5e:c4:9e:06:5e:f6:da:22:1d: 50:9d:fc:a8:87:0a:1f:fd:ae:7e:4d:a4:b5:c3:23:67:f5:32: c8:ad:5b:c9:54:09:25:db:7d:e3:22:f1:6d:a9:63:43:4f:b9: e6:f7:82:92:85:66:d4:c4:fc:4f:dc:ae:ef:8d:49:2b:15:ba: 38:d4:87:14:20:e7:5f:71:3c:51:66:49:f9:b9:3c:87:29:06: 7b:b7:f4:4b:63:9a:84:52:ca:9e:7b:f6:18:24:4e:63:8a:a3: a5:a3:f5:0a:77:97:99:9c:a7:6e:fe:7a:e4:ac:ae:b7:e4:af: 05:74:ee:b8:ca:67:96:07:69:c5:39:dc:24:f0:ba:eb:3a:07: c3:51:d1:2e:a1:5d:f7:29:16:b6:ab:06:d3:91:48:7f:74:1b: ca:f4:ca:97:0b:6c:d0:e6:b7:04:59:95:0a:cf:d0:1c:2e:26: bf:b2:e3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkfqEYTKRHnxwYDK5trWkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMzEzMDAwMDI5WhcNMjYwMzE0MDAwMDI5WjAzMTEwLwYDVQQD EygyZDQ5MTQ4MTFlNzVmNDUwYWJkZDBjZDk4MWFiYzdmMzhkYTk1MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkEGTYWop8H68ETlSFo3hrqu5V/z Nlr14lw8dMOnQ1/LrIhiMjjhjP2dsfLbI9sQzzmQTpCnnyhH6jT58+LKV9w28ihn vEGPOihT7Q0cEjpo6xkUe0XAtufL4NSdHnE+2nZYBD2h3+6G9UHGmKlAd6J1B00Q xreVuXe28icto715KAlX6rXGrJ4v6BJiU4G5cOlHHO7Jf9toQ4Yc2SEDjjQlbnLc YKEJqeKpFU8dS4qNezu0IlijwNCH/ADKifUMRxLUPzwJc/g2fHje8FlCeNT/MwcJ ukPhlOnvADUA/khsxl02kp7DqfCW4B9ttxh9vx4+S5kyQWMteYHh1LACWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1JFIEedfRQq90M2YGrx/ONqVE1MB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICLRuxg7 w5Y2ubxsobls+ShyDAiFaLw40LjCIcPcj2UlSQ9k4y5GiNYgyoshHEU1wGcnyKBg cIoQRm0NUp4CB+o7naj9iL5UwDvmu0LBXJnKXsSeBl722iIdUJ38qIcKH/2ufk2k tcMjZ/UyyK1byVQJJdt94yLxbaljQ0+55veCkoVm1MT8T9yu741JKxW6ONSHFCDn X3E8UWZJ+bk8hykGe7f0S2OahFLKnnv2GCROY4qjpaP1CneXmZynbv565Kyut+Sv BXTuuMpnlgdpxTncJPC66zoHw1HRLqFd9ykWtqsG05FIf3QbyvTKlwts0Oa3BFmV Cs/QHC4mv7LjMg== -----END CERTIFICATE-----Generated at Fri Mar 13 05:21:13 2026 by rpki-client