$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: mw/txwagSfLBIJSqUQ5bLkg7mHdsGtBy/ipBoEt4RjI= Subject key identifier: DD:AA:08:95:10:19:30:A9:93:B4:A1:F5:DF:24:BE:0F:39:83:96:A4 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019D2704661FA0983439F60DB0939105719D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 15B1 Signing time: Wed 25 Mar 2026 22:01:32 +0000 Manifest this update: Wed 25 Mar 2026 22:01:32 +0000 Manifest next update: Thu 26 Mar 2026 22:01:32 +0000 Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=) 2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=) 3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=) 4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=) 5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=) 6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=) 7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=) 8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=) 9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=) 10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=) 11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 2m0Gvy+TT+N6zdXTQ0AbUMv7w+ioHo6gVWZkMomFXyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:66:1f:a0:98:34:39:f6:0d:b0:93:91:05:71:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Mar 25 22:01:32 2026 GMT Not After : Mar 26 22:01:32 2026 GMT Subject: CN=ddaa0895101930a993b4a1f5df24be0f398396a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:4e:d0:fb:82:6f:90:6e:f4:3c:80:66:0e: b2:be:83:ee:6d:ba:b0:b9:44:61:f6:98:4c:64:5b: 59:23:a2:0b:10:7c:05:55:f3:02:b1:e5:74:68:a2: a9:03:26:95:cd:3e:fd:f6:e3:97:54:ea:89:7c:2e: 87:bd:dc:58:9f:43:f2:72:47:3e:e8:3f:0e:03:a9: 61:0f:65:97:b9:37:35:b1:53:1c:b0:0f:f2:76:6c: dc:0f:0e:00:01:2c:f6:b9:c9:7d:87:6b:f3:31:76: 15:4e:cb:9d:80:5a:95:19:61:a7:a6:47:94:b2:c1: 05:38:7f:d7:da:29:51:a5:c6:3e:e9:86:6d:bd:19: ca:88:1e:7f:b3:7d:ad:a4:58:9d:e6:d1:d6:9e:f6: af:0d:85:0d:f0:d6:08:0d:9a:f4:00:c3:c1:92:0f: 30:a7:2f:ff:e9:cf:ae:30:74:40:78:61:c4:c2:72: 0c:07:61:b5:3d:47:12:8c:02:66:84:60:58:2d:71: 72:d0:99:9c:d7:40:cf:69:70:36:84:8a:ec:0a:6f: 81:ce:3e:97:32:45:92:91:a0:5c:bc:98:23:a8:74: 66:e3:51:f9:9e:78:ae:aa:3b:86:49:ac:de:06:f7: 4f:30:ae:a3:35:b1:2b:af:d8:28:cd:7c:66:87:a2: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:08:95:10:19:30:A9:93:B4:A1:F5:DF:24:BE:0F:39:83:96:A4 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:88:15:39:74:e6:38:3d:17:0d:7e:4d:10:8e:e9:2d:46:0e: 1b:52:b1:a3:b8:fe:1b:b9:c5:4c:a1:6f:6f:0a:19:cf:26:15: 30:a4:dd:b9:a8:4f:ce:4d:f6:0f:3f:c3:c9:7a:a7:a6:6a:4f: fb:5f:0a:f2:50:c7:48:c2:8d:8c:3b:3e:3b:0a:da:e4:a8:af: d5:dd:0c:67:72:dd:03:45:8e:80:fb:2d:70:79:8b:42:7d:a2: 53:90:c6:ec:49:c9:89:2f:c8:86:b3:4a:29:30:3a:04:7b:4a: 08:34:61:d3:6b:5f:c3:8f:1b:86:19:53:58:be:71:c6:0d:dd: 02:9c:11:b2:56:d7:a2:3c:91:fb:a7:5c:7e:d6:7b:46:1f:c0: 32:b8:7e:84:87:8a:56:7f:e7:a6:04:74:09:d3:a8:b5:ad:cc: ce:05:06:38:9b:4c:1f:8f:ca:e1:a0:93:26:8f:51:59:31:5d: 3f:bc:23:dc:b9:81:04:52:66:85:6e:3e:44:ff:b0:c4:ea:0d: 0c:8a:8a:f6:78:b7:c8:40:39:05:31:0c:69:96:f0:5d:e5:9d: e5:d7:01:c6:fa:09:0e:2f:d3:8a:9c:72:c6:14:20:36:90:ff: 07:91:ed:d3:51:f0:74:77:ab:d8:ad:3a:a9:8d:e3:69:c9:01: 01:c0:43:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBGYfoJg0OfYNsJORBXGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwMzI1MjIwMTMyWhcNMjYwMzI2MjIwMTMyWjAzMTEwLwYDVQQD EyhkZGFhMDg5NTEwMTkzMGE5OTNiNGExZjVkZjI0YmUwZjM5ODM5NmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUBO0PuCb5Bu9DyAZg6yvoPubbqw uURh9phMZFtZI6ILEHwFVfMCseV0aKKpAyaVzT799uOXVOqJfC6HvdxYn0Pyckc+ 6D8OA6lhD2WXuTc1sVMcsA/ydmzcDw4AASz2ucl9h2vzMXYVTsudgFqVGWGnpkeU ssEFOH/X2ilRpcY+6YZtvRnKiB5/s32tpFid5tHWnvavDYUN8NYIDZr0AMPBkg8w py//6c+uMHRAeGHEwnIMB2G1PUcSjAJmhGBYLXFy0Jmc10DPaXA2hIrsCm+Bzj6X MkWSkaBcvJgjqHRm41H5nniuqjuGSazeBvdPMK6jNbErr9gozXxmh6I1xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2qCJUQGTCpk7Sh9d8kvg85g5akMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYgVOXTm OD0XDX5NEI7pLUYOG1Kxo7j+G7nFTKFvbwoZzyYVMKTduahPzk32Dz/DyXqnpmpP +18K8lDHSMKNjDs+Owra5Kiv1d0MZ3LdA0WOgPstcHmLQn2iU5DG7EnJiS/IhrNK KTA6BHtKCDRh02tfw48bhhlTWL5xxg3dApwRslbXojyR+6dcftZ7Rh/AMrh+hIeK Vn/npgR0CdOota3MzgUGOJtMH4/K4aCTJo9RWTFdP7wj3LmBBFJmhW4+RP+wxOoN DIqK9ni3yEA5BTEMaZbwXeWd5dcBxvoJDi/TipxyxhQgNpD/B5Ht01HwdHer2K06 qY3jackBAcBDjg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:49:01 2026 by rpki-client