$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: eK9YTTfHvyeXo/If8W8kOjsaVYIq+mAqpxZfNt+ddwE= Subject key identifier: A8:54:4C:29:79:7D:E2:B5:98:F3:B9:C9:5D:9B:FA:68:F7:6E:61:86 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019D273B1640842D7C3358098D06F69C0938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 18AF Signing time: Wed 25 Mar 2026 23:01:16 +0000 Manifest this update: Wed 25 Mar 2026 23:01:16 +0000 Manifest next update: Thu 26 Mar 2026 23:01:16 +0000 Files and hashes: 1: 1-uNAZHX6ze0dF7CyKnflQ3BVW2c.roa (hash: DghtjqwzV9SP1cuZUpSR5xMtmbQ0rFZw8ehQ3/eY7W0=) 2: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 3: 5AijEti-HcNXwniWHsbH152C1Z4.roa (hash: ibGOFvLxanS5CIErygh1i82Hb9gI9oZVrjZKEjZmGRg=) 4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 5: Mt1skFWcWKz8vOgiig4w0Mi-M48.roa (hash: hRwnjk+rD9eBJBMsuX5eOFh0auZEQfukDtfefVWTRGQ=) 6: NF-BQhzzUTXiylJC1JLfyL2IYa0.roa (hash: RWg1VoStDZQpV4Z/AFU+xbdXjMAvA+sGAZu7kpEePOE=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: awMrblVcKEMHhOxSuC24vtYngkk.roa (hash: 04ORlz9p15mB2l8YyRPH4E2/hzlpfmbbHrNJqGimeC4=) 9: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 10: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 11: hcZodqy8X-H5WC_Lqd2mr-PLkDs.roa (hash: jpRi/gBPWw3omm1CGYO0omi2PHSUnZ7b7VkghvKyBcA=) 12: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 13: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: zZnCm7J9gCr44aD8AZIzxTOFL6lyCkZmFBLoR5yibmQ=) 14: yrM0soQqx_j0-1MHLmyxRBwRLbM.roa (hash: W92AJMwPEMvy6l2A/2J7r66vBSLFPMTIh8GEtzvHHq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3b:16:40:84:2d:7c:33:58:09:8d:06:f6:9c:09:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Mar 25 23:01:16 2026 GMT Not After : Mar 26 23:01:16 2026 GMT Subject: CN=a8544c29797de2b598f3b9c95d9bfa68f76e6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:78:ff:c9:02:86:97:b4:35:ce:bc:e8:46: 6d:f6:0d:c3:3b:a1:dd:c4:89:a1:58:66:27:0c:53: 1e:a9:44:d0:19:5b:9f:86:d3:4d:2d:66:f1:bc:52: e4:55:50:f8:98:d5:16:c6:2a:66:7f:35:9f:f1:1b: 79:6d:87:a9:e6:62:d4:a7:c3:39:4e:66:19:7d:61: db:68:b9:c1:52:fa:60:38:bd:1f:6d:31:a2:46:fc: 3a:58:02:c9:9b:e4:be:4f:a3:89:47:a5:a7:48:55: e9:c3:89:78:ce:4c:45:46:78:1e:a1:b6:fb:58:70: 9c:98:24:c9:fd:e3:4a:3a:e2:dc:90:b2:9a:97:32: ad:e1:64:82:11:30:b2:f4:e8:04:7d:4e:0e:fd:62: 41:1d:6a:0c:a4:38:cb:3d:6c:77:d2:a3:fc:91:c3: 05:4f:c5:a3:71:fc:aa:20:5e:94:d6:93:21:d1:6a: 6e:91:71:f0:2a:e9:a0:32:a7:eb:0b:03:39:e3:5f: 92:47:35:79:26:09:93:57:4d:e1:cc:61:40:00:24: 15:c5:15:3c:df:5c:49:36:d0:0a:f8:26:c9:85:3d: 82:98:7c:a1:1d:e7:84:f2:66:e0:84:5f:f4:0b:81: 79:8e:88:9e:ae:d6:6d:b2:23:ba:05:75:20:bd:c0: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:4C:29:79:7D:E2:B5:98:F3:B9:C9:5D:9B:FA:68:F7:6E:61:86 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:54:c8:a8:38:35:40:71:23:20:c2:3f:e0:47:91:85:83: 0a:15:48:ac:55:1b:5e:85:25:51:dc:a3:ff:58:4c:82:7c:1b: 46:cb:4c:0a:08:4a:b1:2d:46:f7:af:d5:e5:96:55:0c:cd:e7: dd:9c:3a:ea:fe:f0:1d:a3:9c:88:95:f0:2b:90:91:b9:2f:c4: 93:9e:45:9b:10:0a:56:75:4d:0c:4d:31:70:d2:dc:61:11:38: 6f:ac:da:5f:c2:87:08:de:f1:4a:fe:d8:9f:5a:fb:be:51:43: 88:f3:0f:62:f9:67:a1:9d:12:db:0c:5b:28:4b:5c:ec:90:0a: 60:bb:fe:d2:05:57:c4:72:bf:eb:f4:88:ed:fa:2a:a3:9e:ca: dd:5a:c4:3e:50:97:77:b4:ee:60:8c:fc:75:57:2c:d9:c0:b6: b5:62:db:32:74:ed:b3:c3:ba:a8:f8:a2:20:38:7d:ed:b6:db: f3:bb:ce:41:b9:d7:df:6e:0b:7c:1b:fc:23:fc:ea:cc:bc:a0: 5c:21:88:78:17:d2:04:42:8b:cc:03:6e:72:58:46:6b:a9:ae: 5e:a3:f6:d4:33:73:dc:81:51:8c:c9:51:c9:e6:f8:3e:9e:20: 58:f3:e4:ea:66:b8:42:bd:05:32:57:52:2f:7a:e1:a8:35:f5: ea:b1:9d:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOxZAhC18M1gJjQb2nAk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMzI1MjMwMTE2WhcNMjYwMzI2MjMwMTE2WjAzMTEwLwYDVQQD EyhhODU0NGMyOTc5N2RlMmI1OThmM2I5Yzk1ZDliZmE2OGY3NmU2MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoB4/8kChpe0Nc686EZt9g3DO6Hd xImhWGYnDFMeqUTQGVufhtNNLWbxvFLkVVD4mNUWxipmfzWf8Rt5bYep5mLUp8M5 TmYZfWHbaLnBUvpgOL0fbTGiRvw6WALJm+S+T6OJR6WnSFXpw4l4zkxFRngeobb7 WHCcmCTJ/eNKOuLckLKalzKt4WSCETCy9OgEfU4O/WJBHWoMpDjLPWx30qP8kcMF T8WjcfyqIF6U1pMh0WpukXHwKumgMqfrCwM541+SRzV5JgmTV03hzGFAACQVxRU8 31xJNtAK+CbJhT2CmHyhHeeE8mbghF/0C4F5joiertZtsiO6BXUgvcA3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhUTCl5feK1mPO5yV2b+mj3bmGGMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzJUyKg4 NUBxIyDCP+BHkYWDChVIrFUbXoUlUdyj/1hMgnwbRstMCghKsS1G96/V5ZZVDM3n 3Zw66v7wHaOciJXwK5CRuS/Ek55FmxAKVnVNDE0xcNLcYRE4b6zaX8KHCN7xSv7Y n1r7vlFDiPMPYvlnoZ0S2wxbKEtc7JAKYLv+0gVXxHK/6/SI7foqo57K3VrEPlCX d7TuYIz8dVcs2cC2tWLbMnTts8O6qPiiIDh97bbb87vOQbnX324LfBv8I/zqzLyg XCGIeBfSBEKLzANuclhGa6muXqP21DNz3IFRjMlRyeb4Pp4gWPPk6ma4Qr0FMldS L3rhqDX16rGd8Q== -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:35 2026 by rpki-client