$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: mI65x9R7SuCnfwf7yA9gNSOmeMPx86oWI/gGH2X/Lro= Subject key identifier: 94:1A:F0:CD:0A:D3:62:0E:7D:13:EF:8E:ED:D8:0C:69:C3:2E:D8:31 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 01A0D91721C6BA770975042C2E7F4B766B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1AA8 Signing time: Fri 25 Sep 2026 15:02:46 +0000 Manifest this update: Fri 25 Sep 2026 15:02:46 +0000 Manifest next update: Sat 26 Sep 2026 15:02:46 +0000 Files and hashes: 1: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 2: 5_O_-Ts_PXr2shf_BK27FxmRb0E.roa (hash: HdNtBk6r6/g/NGu66avK4wtW2O6fVyALFYw/tzivy2w=) 3: 6y-secnE2lDQKI1GGrirpaJzUYs.roa (hash: 1ZBZRlQJYd1XGb21+sdUz77pf1q1nzuib9QtD1g4f7E=) 4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 5: NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa (hash: W3nGwB/5l82VyTMniD79KQw9BOTXPJR7EjkBzNDA5Zw=) 6: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (hash: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: aatid15nJg_ZHnTqc9bbhStxui8.roa (hash: uyHxYZyZlMGakqXvepDoIH+z7/maRvFeBVXUuB8kJyE=) 9: dQaTjbpdJpL1XP1v01EKXqRYC-w.roa (hash: ULOoetRX5qMtgr34Ew/wFPFv5aHflUOVtLIXDSuv5Hw=) 10: egISSsj_emXqIzTgWR5rt0OsUxI.roa (hash: PGCg7xxw/0+DVy2qN0rYw5NAol7r6pcd4sImkT4t1IQ=) 11: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 12: gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa (hash: QBi5IqWkfubZgMUQCUMhG623BzbGTNquHl5ghz5pfQU=) 13: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 14: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 15: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: LhTswQI4/MZTes8xelUmDM8Vu4ILXhVF6SS2g+BiTNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:17:21:c6:ba:77:09:75:04:2c:2e:7f:4b:76:6b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Sep 25 15:02:46 2026 GMT Not After : Sep 26 15:02:46 2026 GMT Subject: CN=941af0cd0ad3620e7d13ef8eedd80c69c32ed831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:20:3e:05:6e:04:dd:d4:20:52:ea:a4:f4: 58:53:b9:22:ec:da:5f:12:1b:47:02:35:7d:00:5e: ea:5b:51:ad:9d:d6:24:22:b3:cb:0f:0c:b6:74:e9: 99:39:97:57:52:1c:4c:47:b0:d4:2f:86:94:4f:08: 66:95:4b:ee:ac:a9:cc:98:9a:95:75:0a:82:69:6d: 5b:d3:f2:e0:8e:55:ee:80:21:d4:ae:d1:db:85:48: 25:29:a3:53:47:ea:d0:85:d4:d3:7b:8f:01:20:af: 13:84:20:7c:10:34:ca:de:74:dd:70:e2:b0:f1:1f: 16:88:a1:92:93:6f:fe:90:df:7d:f1:9c:61:65:9a: 45:77:66:68:ac:41:d7:b6:00:12:19:df:fc:e2:29: a6:03:96:ef:19:c6:10:c2:47:f6:82:4b:91:12:8f: ee:1b:d0:7f:53:16:8a:ce:05:a1:b5:d2:16:8d:a8: 3e:dc:2d:2d:e2:e6:48:78:10:5b:66:b1:fd:f7:b4: 97:20:4e:0e:33:39:1a:b1:1a:c5:cf:3d:ca:f5:da: 6e:21:08:42:f7:97:9a:69:38:08:ca:e5:52:5a:d5: b1:c5:9e:73:6a:39:64:7a:af:14:2a:4e:6d:7f:4c: d4:39:d9:c4:ff:0f:c3:fd:15:0b:b5:89:5a:47:0d: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:F0:CD:0A:D3:62:0E:7D:13:EF:8E:ED:D8:0C:69:C3:2E:D8:31 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:6e:41:e7:c7:03:13:8a:e9:5e:b8:35:27:a0:81:a5:36:4b: 85:f2:cc:bc:d8:c3:ad:bb:4b:d2:4d:d9:0d:a6:9d:7c:91:5b: 2a:fc:57:3b:57:07:51:09:94:a8:a9:5c:96:f8:a3:0d:57:ba: f8:55:ad:11:e3:23:fc:9a:d2:24:0f:ef:3c:2e:e0:a0:d7:81: 22:9a:54:50:dc:f8:fb:d0:1c:01:27:59:58:1b:fd:70:54:2f: 3a:b7:c5:c9:a5:d1:64:ae:ab:22:09:da:bf:af:2e:5a:5d:1a: 33:15:40:69:00:72:55:d5:cb:44:e4:fb:21:c1:bc:c3:2d:f8: be:05:87:c3:7e:f8:a1:58:d7:36:05:78:7e:b6:be:a1:5b:00: 1f:29:a4:2e:ed:c9:c1:ca:c4:d3:e1:cb:a4:01:0c:06:13:cf: 67:b3:25:08:f4:46:6c:25:4d:8e:4b:75:b3:9f:86:53:cf:95: 08:c5:79:6a:61:58:bd:e5:66:0f:34:3b:a9:2d:de:ec:3e:52: 09:3f:48:59:1d:90:e2:05:36:68:89:89:57:94:74:0e:42:26: d7:e5:86:21:cb:cc:d1:a2:ac:ee:ed:6b:19:5d:e9:87:23:c0: 46:84:61:d4:0c:6d:b2:14:fd:3c:11:6a:c5:0b:64:4c:e9:37: 31:ef:ef:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZFyHGuncJdQQsLn9LdmsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwOTI1MTUwMjQ2WhcNMjYwOTI2MTUwMjQ2WjAzMTEwLwYDVQQD Eyg5NDFhZjBjZDBhZDM2MjBlN2QxM2VmOGVlZGQ4MGM2OWMzMmVkODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw8gPgVuBN3UIFLqpPRYU7ki7Npf EhtHAjV9AF7qW1GtndYkIrPLDwy2dOmZOZdXUhxMR7DUL4aUTwhmlUvurKnMmJqV dQqCaW1b0/LgjlXugCHUrtHbhUglKaNTR+rQhdTTe48BIK8ThCB8EDTK3nTdcOKw 8R8WiKGSk2/+kN998ZxhZZpFd2ZorEHXtgASGd/84immA5bvGcYQwkf2gkuREo/u G9B/UxaKzgWhtdIWjag+3C0t4uZIeBBbZrH997SXIE4OMzkasRrFzz3K9dpuIQhC 95eaaTgIyuVSWtWxxZ5zajlkeq8UKk5tf0zUOdnE/w/D/RULtYlaRw0lhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQa8M0K02IOfRPvju3YDGnDLtgxMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzW5B58cD E4rpXrg1J6CBpTZLhfLMvNjDrbtL0k3ZDaadfJFbKvxXO1cHUQmUqKlclvijDVe6 +FWtEeMj/JrSJA/vPC7goNeBIppUUNz4+9AcASdZWBv9cFQvOrfFyaXRZK6rIgna v68uWl0aMxVAaQByVdXLROT7IcG8wy34vgWHw374oVjXNgV4fra+oVsAHymkLu3J wcrE0+HLpAEMBhPPZ7MlCPRGbCVNjkt1s5+GU8+VCMV5amFYveVmDzQ7qS3e7D5S CT9IWR2Q4gU2aImJV5R0DkIm1+WGIcvM0aKs7u1rGV3phyPARoRh1AxtshT9PBFq xQtkTOk3Me/vHg== -----END CERTIFICATE-----Generated at Fri Sep 25 22:35:03 2026 by rpki-client