$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: qYVtakUG0KP5VG0ryOmx2hyTZQHJZNgS/Rw+Dwfb8Zo= Subject key identifier: 29:43:6B:C8:57:FA:23:CC:DB:84:40:CD:6B:C8:D0:51:DC:F1:3C:00 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019D0E572C92BEC6BF1FE849CB3146F88C8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 15B0 Signing time: Sat 21 Mar 2026 03:01:27 +0000 Manifest this update: Sat 21 Mar 2026 03:01:27 +0000 Manifest next update: Sun 22 Mar 2026 03:01:27 +0000 Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=) 2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=) 3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=) 4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=) 5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=) 6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=) 7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=) 8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: TqW9tdHUdoPT/IIMPghPWIkenoPp1f8/cSQ/JcYlp28=) 9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=) 10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=) 11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=) 12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=) 13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0e:57:2c:92:be:c6:bf:1f:e8:49:cb:31:46:f8:8c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Mar 21 03:01:27 2026 GMT Not After : Mar 22 03:01:27 2026 GMT Subject: CN=29436bc857fa23ccdb8440cd6bc8d051dcf13c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:43:89:21:b0:be:78:39:90:ea:04:9d:83: e9:06:02:68:84:91:4c:46:3d:16:31:77:dc:05:1e: 2a:6e:e0:2f:eb:d8:91:01:23:ea:a1:c0:e8:ff:64: bc:45:9a:6b:28:3b:b7:72:4b:4a:60:86:0a:c7:59: e3:fa:cb:70:fc:d6:bf:b2:a3:29:92:2a:1f:1b:f6: 49:90:45:70:0c:2b:50:c0:cf:25:50:cd:88:78:d3: 46:97:cb:90:9b:b3:0f:78:b7:46:ae:67:3d:09:e6: 48:78:b1:87:c8:b6:a0:50:7d:04:1b:22:cf:1a:51: 41:6f:e2:28:b0:e1:60:0a:1e:89:8c:64:74:c4:b4: 31:a1:f6:a9:d5:f9:8c:58:2d:fc:74:30:a0:8d:a1: 0c:aa:4c:9e:c6:31:83:08:f1:e4:5d:61:f1:f1:64: cd:d0:3b:74:5b:e0:eb:44:4b:b3:fe:d1:31:1f:c4: a1:36:69:e8:00:ce:dd:bb:cd:df:40:98:04:89:f8: 80:26:3a:62:81:03:83:b6:5e:61:4a:f4:19:91:f6: 9c:64:8e:ff:29:ce:0c:6e:6e:8d:b7:d0:8d:c2:c6: f3:1c:23:b4:de:8c:ea:72:25:3e:cd:9c:9d:1d:0c: 8f:5b:5f:7d:09:bb:dd:9a:f5:0b:01:f9:7d:3a:0f: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:6B:C8:57:FA:23:CC:DB:84:40:CD:6B:C8:D0:51:DC:F1:3C:00 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cd:67:db:5f:0c:7f:86:d7:64:cd:10:6a:09:82:12:4d:72: 64:a4:c4:c4:93:fc:89:ed:59:31:ec:56:40:be:aa:ee:47:b9: 6b:bd:55:2f:da:70:ad:22:64:4c:6a:01:82:b2:15:5c:16:cc: 64:6e:18:80:0c:ac:8f:b0:6d:fa:6a:87:b2:4d:f9:62:c1:18: 76:21:4d:e7:dd:a3:0d:a3:59:57:b7:c8:c3:0e:cc:3a:55:1c: e8:4f:a2:aa:1e:40:22:ca:fe:e8:6e:12:03:67:d9:fa:ed:99: 2d:e4:5d:c7:0f:e6:25:a8:30:8c:83:14:3f:5f:b0:bc:27:76: 1a:ea:b8:15:d1:2a:a6:9a:ff:40:65:a7:99:00:b2:40:5c:a9: ba:a1:96:c3:1f:4d:ce:a9:f1:30:19:38:4e:f6:32:c2:d5:7a: bd:c7:9a:45:c9:59:cf:7d:7a:eb:41:a4:71:49:24:53:e8:e0: 9b:e4:95:dc:59:71:60:59:8a:e6:54:ba:2f:1f:33:51:e7:b9: 1c:1f:60:72:75:3e:76:d2:52:d1:9c:b9:92:b3:c9:a4:e6:c3: e3:1b:fc:42:f3:bc:9f:8a:a9:8b:be:d4:e3:c5:44:66:19:f3: 3e:6f:f9:1c:7e:8f:e4:3a:c8:91:02:33:d7:25:77:8c:be:f2: 7e:1f:63:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0OVyySvsa/H+hJyzFG+IyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjYwMzIxMDMwMTI3WhcNMjYwMzIyMDMwMTI3WjAzMTEwLwYDVQQD EygyOTQzNmJjODU3ZmEyM2NjZGI4NDQwY2Q2YmM4ZDA1MWRjZjEzYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJDiSGwvng5kOoEnYPpBgJohJFM Rj0WMXfcBR4qbuAv69iRASPqocDo/2S8RZprKDu3cktKYIYKx1nj+stw/Na/sqMp kiofG/ZJkEVwDCtQwM8lUM2IeNNGl8uQm7MPeLdGrmc9CeZIeLGHyLagUH0EGyLP GlFBb+IosOFgCh6JjGR0xLQxofap1fmMWC38dDCgjaEMqkyexjGDCPHkXWHx8WTN 0Dt0W+DrREuz/tExH8ShNmnoAM7du83fQJgEifiAJjpigQODtl5hSvQZkfacZI7/ Kc4Mbm6Nt9CNwsbzHCO03ozqciU+zZydHQyPW199CbvdmvULAfl9Og/vvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClDa8hX+iPM24RAzWvI0FHc8TwAMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArM1n218M f4bXZM0QagmCEk1yZKTExJP8ie1ZMexWQL6q7ke5a71VL9pwrSJkTGoBgrIVXBbM ZG4YgAysj7Bt+mqHsk35YsEYdiFN592jDaNZV7fIww7MOlUc6E+iqh5AIsr+6G4S A2fZ+u2ZLeRdxw/mJagwjIMUP1+wvCd2Guq4FdEqppr/QGWnmQCyQFypuqGWwx9N zqnxMBk4TvYywtV6vceaRclZz31660GkcUkkU+jgm+SV3FlxYFmK5lS6Lx8zUee5 HB9gcnU+dtJS0Zy5krPJpObD4xv8QvO8n4qpi77U48VEZhnzPm/5HH6P5DrIkQIz 1yV3jL7yfh9jsw== -----END CERTIFICATE-----Generated at Sat Mar 21 13:18:17 2026 by rpki-client