$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json) Hash identifier: zmufCEeSYznDRJp/RvQMutNgqhBxJ1ISIzbNnVGUj/M= Subject key identifier: 09:DD:DC:7C:E0:9E:9C:B8:45:91:74:BA:FF:67:96:50:85:70:6A:16 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019DA6F7F4062821320373C90ED6BD6CFE56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft Manifest number: 0ABC Signing time: Sun 19 Apr 2026 18:19:20 +0000 Manifest this update: Sun 19 Apr 2026 18:19:20 +0000 Manifest next update: Mon 20 Apr 2026 18:19:20 +0000 Files and hashes: 1: 3O7puYCGeaoochmZgK1F4Zova0c.roa (hash: 8cczSVzGE4DlrK+JwupGLwa2lh+V3J3LsQk0x1uHZOY=) 2: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=) 3: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=) 4: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=) 5: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=) 6: L-RSq6IUGYToiYDM4n67WQx8VOg.roa (hash: u8ekJ9cjVtYNkxSCsY2smL67ORogBBulUQlW9I6fLOk=) 7: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=) 8: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=) 9: P88LnN5x-3K_L5Fhq6iwwdNQg8E.roa (hash: 61YEGdCjCwNO9W5cpMFdELcW5q/oe/4xbaWjcimhT9U=) 10: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=) 11: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=) 12: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=) 13: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: lyUmJUNVWLd64ZbVAPf8GDAJUgbMiLPQyEYWLG13y0g=) 14: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=) 15: ZM_Db70zaMAAsMqTcRja0tNbmiI.roa (hash: 6BgZtKevp10uUlEQ9l3EIZp+h5IVHGhESBdJPwuEZIs=) 16: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=) 17: huzRRdVqCPg8Fnb-gO89NUhOd8s.roa (hash: kTmMBo7ynuyXV7K1e28S/Iv7hnEZXH2WxQ2xB2XUlxc=) 18: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=) 19: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=) 20: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=) 21: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=) 22: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=) 23: wxlYctZvX4QOXi5lbwNY--wlp4I.roa (hash: +oRo5rEHFhlE/qTZ+gRij39heJpaeFdmoaEB4dUhwaU=) 24: x9kqyHnmkJ25CQE1N5384OaUk1I.roa (hash: YL8POHupulVHn075fwE7OWeKnx0mBQBMzJcWNAFq2jE=) 25: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=) 26: yeaSVOY_2RKwqxHlxekdt46XnfA.roa (hash: IUmDaJ+QQrXKsNeMI6OsxvyPlW0V65tj0hhIVHsFQrs=) 27: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 18:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a6:f7:f4:06:28:21:32:03:73:c9:0e:d6:bd:6c:fe:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Apr 19 18:19:20 2026 GMT Not After : Apr 20 18:19:20 2026 GMT Subject: CN=09dddc7ce09e9cb8459174baff67965085706a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:c9:8c:5d:89:8d:fe:22:f5:0f:68:f4:5c: 9d:ad:1c:e7:5d:83:51:0c:bf:9d:bb:ca:18:a7:7e: c2:b0:13:f2:e5:7a:ec:37:4d:ce:bf:70:5d:52:37: 77:6d:ec:93:d0:08:ea:e2:cb:21:14:1f:a5:69:93: 71:ae:63:83:44:c6:9c:20:a4:f4:8a:89:8c:c9:01: ec:9a:8d:3b:40:4f:e5:a5:4a:f3:a9:a6:df:3e:e3: 31:35:aa:98:15:00:86:1c:cb:af:ec:4f:3d:dc:49: 54:c0:8a:97:f8:d7:7e:b6:72:4a:26:7e:08:cf:16: 09:e1:43:0b:34:e4:85:2f:1a:0b:73:32:62:6e:0a: cb:05:a6:54:f7:5b:76:dd:d2:af:17:89:a1:02:06: ff:5d:dc:6c:b3:2f:a7:db:24:b7:b3:a6:90:94:56: 59:8c:26:59:f1:0d:5e:9d:4f:52:83:fa:10:43:1b: cb:f7:20:42:7c:8a:2d:c6:5e:98:33:14:eb:4b:bb: c6:65:6a:30:a1:bd:e5:e4:b2:db:c4:28:64:ec:d2: 31:c2:37:24:d0:ef:0e:3f:fd:6a:6e:d9:21:ea:1b: 8a:80:29:f0:c4:93:dd:69:4f:b9:80:2f:bc:aa:f7: 7c:47:a0:48:51:8b:6e:29:4f:49:84:58:a4:98:81: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DD:DC:7C:E0:9E:9C:B8:45:91:74:BA:FF:67:96:50:85:70:6A:16 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e4:3b:be:c8:74:0d:59:c9:3b:1a:a7:0f:41:a9:c2:5e:fe: ce:39:f3:40:37:27:99:33:2c:ef:fb:9b:4f:14:7e:77:d9:98: fd:01:ca:1f:06:ad:64:c8:11:6c:10:42:1b:80:80:8f:de:54: 22:d9:7f:f9:d6:15:4c:6d:07:b6:a7:33:a1:a9:39:82:a5:99: 21:c4:35:35:25:04:bf:d6:00:de:d4:a6:db:94:98:bd:3f:1b: 29:ed:ce:c4:fb:ad:eb:41:a2:c1:e8:54:ec:a3:0d:bc:ab:a4: 09:aa:73:74:ef:45:bb:16:07:77:a3:22:82:4f:d8:46:02:a9: bd:d9:9a:14:64:41:8b:cb:8b:c9:0e:dd:4d:00:88:d9:4b:6b: 88:5c:ce:a7:97:b2:a1:2e:6e:ee:a8:22:43:2d:47:eb:bd:dc: 24:2f:97:51:9b:49:3a:1e:c0:5c:da:16:97:42:60:0b:5d:50: a8:63:f6:30:2f:73:1f:1a:c6:8a:a0:c8:c5:f7:3d:45:48:71: 89:c5:4b:8d:f7:96:59:25:60:0f:64:78:5b:fe:63:3c:02:dd: 64:33:9a:da:07:7e:7d:f8:56:ef:4d:5d:35:a1:70:73:03:56: 42:1e:ce:a8:4f:63:83:21:d7:f1:21:f9:a2:d3:dc:28:9e:0c: 08:27:42:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2m9/QGKCEyA3PJDta9bP5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwNDE5MTgxOTIwWhcNMjYwNDIwMTgxOTIwWjAzMTEwLwYDVQQD EygwOWRkZGM3Y2UwOWU5Y2I4NDU5MTc0YmFmZjY3OTY1MDg1NzA2YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY3JjF2Jjf4i9Q9o9FydrRznXYNR DL+du8oYp37CsBPy5XrsN03Ov3BdUjd3beyT0Ajq4sshFB+laZNxrmODRMacIKT0 iomMyQHsmo07QE/lpUrzqabfPuMxNaqYFQCGHMuv7E893ElUwIqX+Nd+tnJKJn4I zxYJ4UMLNOSFLxoLczJibgrLBaZU91t23dKvF4mhAgb/Xdxssy+n2yS3s6aQlFZZ jCZZ8Q1enU9Sg/oQQxvL9yBCfIotxl6YMxTrS7vGZWowob3l5LLbxChk7NIxwjck 0O8OP/1qbtkh6huKgCnwxJPdaU+5gC+8qvd8R6BIUYtuKU9JhFikmIFpgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnd3Hzgnpy4RZF0uv9nllCFcGoWMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+Q7vsh0 DVnJOxqnD0Gpwl7+zjnzQDcnmTMs7/ubTxR+d9mY/QHKHwatZMgRbBBCG4CAj95U Itl/+dYVTG0Htqczoak5gqWZIcQ1NSUEv9YA3tSm25SYvT8bKe3OxPut60GiwehU 7KMNvKukCapzdO9FuxYHd6Migk/YRgKpvdmaFGRBi8uLyQ7dTQCI2UtriFzOp5ey oS5u7qgiQy1H673cJC+XUZtJOh7AXNoWl0JgC11QqGP2MC9zHxrGiqDIxfc9RUhx icVLjfeWWSVgD2R4W/5jPALdZDOa2gd+ffhW701dNaFwcwNWQh7OqE9jgyHX8SH5 otPcKJ4MCCdCQw== -----END CERTIFICATE-----Generated at Mon Apr 20 03:27:00 2026 by rpki-client