$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: OW9N7LWmuc3GR4yECRsT1+MSII36qqLoTpGo4UQQs58= Subject key identifier: 99:E1:E3:BB:FB:DE:30:3B:F3:0D:62:96:6E:E9:5B:76:CF:E0:35:A5 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 01A08AC307914CC0DFBA6B5423DC2FF39FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1A8F Signing time: Thu 10 Sep 2026 10:00:32 +0000 Manifest this update: Thu 10 Sep 2026 10:00:32 +0000 Manifest next update: Fri 11 Sep 2026 10:00:32 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: y6o1y4NPHY1iOQOjpqYRV/pJ3X7I/DxAMUFT60BfnGE=) 10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 14: bIT3IKoer-jZOwqexvz80un01Ag.roa (hash: nkHH/tm6q2tYfS61XXMRcKDcBRWbEe3yQxisNF7ABDo=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa (hash: 7N9kbNVvBQfZIqrrEUMiDoe5nVwGSES4cx8TzWr1eCA=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:c3:07:91:4c:c0:df:ba:6b:54:23:dc:2f:f3:9f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Sep 10 10:00:32 2026 GMT Not After : Sep 11 10:00:32 2026 GMT Subject: CN=99e1e3bbfbde303bf30d62966ee95b76cfe035a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:02:b2:cc:c0:1d:a7:89:e2:29:52:51:be: eb:09:dc:c6:90:65:96:f3:3b:75:00:a3:31:6b:ac: 58:84:27:de:da:16:10:f4:8a:cd:72:f5:a6:37:c2: 8f:82:2f:0d:d7:45:af:e4:44:de:de:1e:e5:53:35: fb:2a:85:f4:1a:e0:46:b8:bf:9e:fb:ea:b8:05:75: 37:35:4a:33:51:8b:30:65:44:02:47:88:84:e5:cb: bc:b8:37:ed:f5:ff:49:ee:80:d9:1d:34:d2:f7:b4: e2:7d:34:dc:35:93:dd:b5:d3:e0:66:0e:f9:aa:9f: 74:28:ad:30:98:19:16:af:d6:ce:07:b3:eb:28:b6: 0a:4c:b6:4a:75:33:47:71:e3:4f:67:f1:69:11:36: d5:52:14:bf:74:c7:93:3a:d0:cf:49:57:68:28:d7: ee:06:33:4c:80:9a:6f:64:90:6b:21:79:62:b6:85: 82:b5:45:56:17:a5:16:6c:60:91:72:e1:88:ae:9c: 30:7c:7b:24:8a:d9:23:df:76:0e:73:66:11:de:9d: a0:98:c9:03:11:b1:12:12:ce:1e:c7:2c:e1:81:ac: f1:52:38:60:8f:3a:8b:67:28:8a:1b:2b:c3:94:45: 2d:4d:42:ae:7e:08:d8:ed:3d:b1:ff:9c:94:e9:29: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E1:E3:BB:FB:DE:30:3B:F3:0D:62:96:6E:E9:5B:76:CF:E0:35:A5 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ec:60:1f:67:1a:69:a0:ea:e8:c2:70:f3:5c:b6:1d:cc:b7: cd:69:e0:a8:58:da:af:07:c3:3e:8a:af:8a:24:3e:89:a7:04: 87:29:f3:d2:f4:0a:95:03:41:7c:6c:2b:90:09:5b:80:3a:c1: 85:e9:52:0e:e8:3d:3e:cd:a7:e2:e4:62:13:52:98:5a:e1:56: 21:33:f6:24:6a:1d:33:c0:15:40:5a:1c:3a:a4:66:9e:15:26: 24:6d:97:ea:73:f8:bc:d0:02:0d:c9:94:75:d4:53:66:fa:4f: 71:0a:0b:fa:11:f3:85:c2:26:9d:bd:8c:d7:11:ef:36:eb:2b: fb:fc:04:b8:79:7e:37:ff:34:5b:ad:4b:62:d3:3a:c7:fe:88: 16:82:56:4b:76:26:35:c1:a0:b2:39:38:34:97:d8:c4:af:07: 3d:cf:40:19:cf:aa:6b:8d:9d:f9:7a:0f:5d:18:4e:fd:7b:3f: e1:ba:31:e3:44:90:89:01:8b:2d:c0:ec:66:5f:03:11:61:be: aa:f7:d1:94:c7:e8:8f:aa:93:4c:59:17:35:b5:32:e5:79:b4: 10:3e:13:80:38:48:10:ff:6c:c1:ad:a4:7a:d2:09:e9:55:5d: f0:88:da:ef:1d:56:f9:b3:91:bb:c7:3c:ed:27:8e:42:1b:93: 35:29:89:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKwweRTMDfumtUI9wv85/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwOTEwMTAwMDMyWhcNMjYwOTExMTAwMDMyWjAzMTEwLwYDVQQD Eyg5OWUxZTNiYmZiZGUzMDNiZjMwZDYyOTY2ZWU5NWI3NmNmZTAzNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PoCsszAHaeJ4ilSUb7rCdzGkGWW 8zt1AKMxa6xYhCfe2hYQ9IrNcvWmN8KPgi8N10Wv5ETe3h7lUzX7KoX0GuBGuL+e ++q4BXU3NUozUYswZUQCR4iE5cu8uDft9f9J7oDZHTTS97TifTTcNZPdtdPgZg75 qp90KK0wmBkWr9bOB7PrKLYKTLZKdTNHceNPZ/FpETbVUhS/dMeTOtDPSVdoKNfu BjNMgJpvZJBrIXlitoWCtUVWF6UWbGCRcuGIrpwwfHskitkj33YOc2YR3p2gmMkD EbESEs4exyzhgazxUjhgjzqLZyiKGyvDlEUtTUKufgjY7T2x/5yU6SmtawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnh47v73jA78w1ilm7pW3bP4DWlMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyOxgH2ca aaDq6MJw81y2Hcy3zWngqFjarwfDPoqviiQ+iacEhynz0vQKlQNBfGwrkAlbgDrB helSDug9Ps2n4uRiE1KYWuFWITP2JGodM8AVQFocOqRmnhUmJG2X6nP4vNACDcmU ddRTZvpPcQoL+hHzhcImnb2M1xHvNusr+/wEuHl+N/80W61LYtM6x/6IFoJWS3Ym NcGgsjk4NJfYxK8HPc9AGc+qa42d+XoPXRhO/Xs/4box40SQiQGLLcDsZl8DEWG+ qvfRlMfoj6qTTFkXNbUy5Xm0ED4TgDhIEP9swa2ketIJ6VVd8Ija7x1W+bORu8c8 7SeOQhuTNSmJEA== -----END CERTIFICATE-----Generated at Thu Sep 10 17:23:43 2026 by rpki-client