$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: Br+FxfR+WrFExxUfJGcM04zgpzOOrgjJXx5MQqiYjzs= Subject key identifier: 1E:EB:F9:0C:05:F6:DF:E2:61:76:F3:15:10:2B:1D:D4:C9:59:24:94 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 01A1DCEFD43C2354B714B4620EE94F37D725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1B2F Signing time: Sun 15 Nov 2026 02:01:07 +0000 Manifest this update: Sun 15 Nov 2026 02:01:07 +0000 Manifest next update: Mon 16 Nov 2026 02:01:07 +0000 Files and hashes: 1: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 2: 5_O_-Ts_PXr2shf_BK27FxmRb0E.roa (hash: HdNtBk6r6/g/NGu66avK4wtW2O6fVyALFYw/tzivy2w=) 3: 6y-secnE2lDQKI1GGrirpaJzUYs.roa (hash: 1ZBZRlQJYd1XGb21+sdUz77pf1q1nzuib9QtD1g4f7E=) 4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 5: NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa (hash: W3nGwB/5l82VyTMniD79KQw9BOTXPJR7EjkBzNDA5Zw=) 6: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (hash: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: aatid15nJg_ZHnTqc9bbhStxui8.roa (hash: uyHxYZyZlMGakqXvepDoIH+z7/maRvFeBVXUuB8kJyE=) 9: dQaTjbpdJpL1XP1v01EKXqRYC-w.roa (hash: ULOoetRX5qMtgr34Ew/wFPFv5aHflUOVtLIXDSuv5Hw=) 10: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 11: gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa (hash: QBi5IqWkfubZgMUQCUMhG623BzbGTNquHl5ghz5pfQU=) 12: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 13: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 14: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: 8HeGnJvVw9CzZ7rPNsjroXM7XwkswzTG7zt8Dgkguag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:ef:d4:3c:23:54:b7:14:b4:62:0e:e9:4f:37:d7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Nov 15 02:01:07 2026 GMT Not After : Nov 16 02:01:07 2026 GMT Subject: CN=1eebf90c05f6dfe26176f315102b1dd4c9592494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:40:55:5e:5c:fc:b0:12:f9:ea:77:38:49: c0:3e:82:61:f8:98:4b:5b:44:d3:db:a5:23:d7:73: 26:85:18:17:bd:88:74:61:40:28:45:6c:83:36:e2: 3f:d5:6c:87:6d:61:fb:bd:a0:62:ad:f7:1a:f0:29: 0b:c9:5b:9c:fa:b6:73:7a:ec:23:47:51:bd:9d:41: 5b:50:bf:d5:1d:11:eb:f7:ae:bc:55:dc:c7:a1:a3: 34:80:ac:77:fa:f9:5f:e7:10:cd:d1:c1:0b:50:9e: 71:f8:b2:8e:27:11:96:e3:c8:59:12:d9:4e:c8:12: 78:9c:92:f5:6b:96:b9:bd:15:f3:57:9b:54:b2:95: dd:54:46:62:de:00:49:41:dc:e8:eb:32:28:f0:2d: 5d:c2:7b:62:ab:7f:ea:ea:ac:6e:ac:36:7d:33:8a: b8:12:96:49:a0:99:cb:44:0b:66:b9:d4:22:41:38: a8:9c:4a:e9:fb:67:a2:13:ab:ad:f7:7d:35:b0:2c: 15:82:cc:f4:5e:7f:03:06:21:3e:31:cd:33:96:53: b5:cd:44:80:8c:6c:8d:b4:d2:40:ff:73:f0:d0:7e: 41:12:6b:f1:0e:f1:a4:fa:65:91:4b:07:1d:34:cc: 4b:5b:33:e6:24:69:9e:81:82:50:d8:4d:52:9e:b7: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EB:F9:0C:05:F6:DF:E2:61:76:F3:15:10:2B:1D:D4:C9:59:24:94 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:13:de:3e:4e:ed:42:63:00:be:f5:28:7e:73:10:d0:29:9f: cb:98:e6:ef:59:03:3b:0b:09:bc:31:03:66:b7:7e:40:a1:64: 10:70:59:17:8b:83:09:3d:e4:79:3f:fd:dd:9e:29:97:83:d0: ad:5e:13:dc:5f:67:5c:2c:d3:ae:ff:56:0a:5b:88:c3:e0:b5: 41:21:ab:c2:c8:9d:56:65:62:0a:83:00:9e:bb:fc:b9:d3:2b: 7e:b9:89:ae:cc:f7:d4:8d:4e:9f:ad:0e:58:7f:1a:eb:4c:5c: 92:78:0d:1e:8c:bd:6d:1d:ba:53:d0:7b:ed:b2:4a:ce:de:12: ef:42:52:c8:54:27:0b:cc:56:50:a7:f7:4f:a7:f3:2d:ac:ad: 0c:70:cc:27:29:7a:bc:89:35:77:32:93:c4:49:5e:ce:55:f5: 15:80:4a:0f:bb:80:c7:6a:00:80:ef:9d:14:62:72:91:c4:7a: 2d:d9:93:8e:48:89:88:1f:06:5b:a0:14:ed:12:5e:3d:01:bb: ff:3c:7c:6b:a3:6d:fa:3f:7c:6b:08:02:61:6e:b6:b9:7f:53: f7:50:23:57:88:b1:ba:cd:67:48:fe:56:6a:77:2b:e4:c1:71: 4c:eb:82:80:7a:27:a4:d5:59:52:aa:48:e6:4f:be:3a:8a:6b: d2:0b:d3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHc79Q8I1S3FLRiDulPN9clMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYxMTE1MDIwMTA3WhcNMjYxMTE2MDIwMTA3WjAzMTEwLwYDVQQD EygxZWViZjkwYzA1ZjZkZmUyNjE3NmYzMTUxMDJiMWRkNGM5NTkyNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB1AVV5c/LAS+ep3OEnAPoJh+JhL W0TT26Uj13MmhRgXvYh0YUAoRWyDNuI/1WyHbWH7vaBirfca8CkLyVuc+rZzeuwj R1G9nUFbUL/VHRHr9668VdzHoaM0gKx3+vlf5xDN0cELUJ5x+LKOJxGW48hZEtlO yBJ4nJL1a5a5vRXzV5tUspXdVEZi3gBJQdzo6zIo8C1dwntiq3/q6qxurDZ9M4q4 EpZJoJnLRAtmudQiQTionErp+2eiE6ut9301sCwVgsz0Xn8DBiE+Mc0zllO1zUSA jGyNtNJA/3Pw0H5BEmvxDvGk+mWRSwcdNMxLWzPmJGmegYJQ2E1SnrfwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7r+QwF9t/iYXbzFRArHdTJWSSUMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBPePk7t QmMAvvUofnMQ0Cmfy5jm71kDOwsJvDEDZrd+QKFkEHBZF4uDCT3keT/93Z4pl4PQ rV4T3F9nXCzTrv9WCluIw+C1QSGrwsidVmViCoMAnrv8udMrfrmJrsz31I1On60O WH8a60xckngNHoy9bR26U9B77bJKzt4S70JSyFQnC8xWUKf3T6fzLaytDHDMJyl6 vIk1dzKTxElezlX1FYBKD7uAx2oAgO+dFGJykcR6LdmTjkiJiB8GW6AU7RJePQG7 /zx8a6Nt+j98awgCYW62uX9T91AjV4ixus1nSP5Wancr5MFxTOuCgHonpNVZUqpI 5k++Oopr0gvT1g== -----END CERTIFICATE-----Generated at Sun Nov 15 10:23:34 2026 by rpki-client