$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: 6KBVW7DEGtBnf7hH0vzgnvpEWtacHz/2DScPQbABluk= Subject key identifier: 8E:F2:F4:CE:78:A9:03:30:71:97:89:FA:B0:E6:9B:90:9D:85:09:40 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019E1F47CC0799D98B3B3B83119CFED265F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 1872 Signing time: Wed 13 May 2026 03:00:59 +0000 Manifest this update: Wed 13 May 2026 03:00:59 +0000 Manifest next update: Thu 14 May 2026 03:00:59 +0000 Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=) 2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=) 3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=) 4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: QfNjVgmdI9BZbqZ26RIodEnsqHbw0Y2WlIOCtG1Pnqc=) 6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=) 7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=) 8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=) 9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=) 10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=) 11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:47:cc:07:99:d9:8b:3b:3b:83:11:9c:fe:d2:65:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: May 13 03:00:59 2026 GMT Not After : May 14 03:00:59 2026 GMT Subject: CN=8ef2f4ce78a90330719789fab0e69b909d850940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:a1:8c:0b:74:f3:57:94:1b:4a:0b:05:ec: c6:df:35:1c:81:cd:fa:47:56:1b:ae:09:ed:e1:dc: 2e:90:c5:7c:32:68:e5:29:9c:9a:57:8c:7a:b2:6f: d3:a5:59:ed:c3:7c:67:e0:8c:ae:c4:cc:3e:34:f4: b5:9b:d5:e0:c1:6e:d2:28:94:19:39:1b:4c:e7:df: 65:55:a4:7c:a7:98:ce:e7:3e:83:a5:48:a7:3c:72: 7d:c0:99:a4:a5:31:b0:35:69:60:64:81:4a:9e:e6: 65:43:ea:fc:46:a9:50:95:c5:75:82:92:ca:21:3e: 4e:72:6f:71:d1:a1:a4:af:88:6d:2e:51:1f:d1:34: 80:b1:2d:7c:7c:a7:2f:cf:28:8a:ed:45:2b:b5:3e: 93:e1:e2:bf:6b:7e:36:64:c2:52:52:e4:7b:f5:8b: f2:02:eb:f0:97:fe:99:18:d0:52:f7:9c:ae:8b:30: cd:1f:50:8b:79:59:dc:68:fb:54:6c:ee:7e:ce:29: 68:28:d2:78:39:d3:c5:89:2a:f4:2a:ec:6b:cd:a6: 1a:b9:8e:1f:d9:d0:1d:86:c1:15:a2:73:c2:a2:21: cb:96:99:96:d0:20:14:28:af:8c:8b:19:91:f3:06: a6:23:02:5e:a2:b1:61:26:ac:6b:c8:a2:b5:f6:59: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F2:F4:CE:78:A9:03:30:71:97:89:FA:B0:E6:9B:90:9D:85:09:40 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d7:dd:9c:c4:74:98:b3:32:49:60:0e:a6:22:08:dc:33:ee: b2:46:78:42:bd:6f:3f:f3:d1:ac:46:11:d6:1a:d4:98:d3:f8: 65:bf:81:6a:25:6d:a1:b0:1f:20:ce:8c:d2:14:ef:98:55:d6: 75:2a:31:fb:a5:49:f7:9a:20:80:82:b8:e9:ec:b0:85:e9:48: 49:bc:08:87:d2:52:17:73:db:b0:67:8c:3f:2f:75:f2:e7:55: 71:87:1b:07:85:87:d8:58:67:13:79:39:f0:15:3c:2f:35:53: f4:d7:fc:47:d4:c5:11:54:3a:33:30:86:b3:df:a5:41:5b:43: 88:76:a2:50:a1:40:5e:45:a6:76:34:d5:1f:00:13:6b:58:13: bf:dc:27:22:b2:ea:1c:a5:c1:59:1f:cd:e5:5e:32:78:bf:bd: 7d:7d:8c:42:5b:57:cb:8a:b8:25:71:34:9f:83:c3:7c:a7:3a: d6:55:b2:ed:6b:21:e6:fe:be:5a:41:15:15:14:6b:bc:44:86: 8b:5e:e1:9a:bc:6e:4c:91:a6:c6:e9:43:ad:2c:c6:71:c9:61: db:6a:9f:03:26:cd:f0:b6:aa:67:13:14:bc:78:d9:6a:7c:65: f3:84:e4:5f:66:c0:3b:cd:bb:aa:a0:27:36:b1:38:11:71:33: 9b:2c:b9:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4fR8wHmdmLOzuDEZz+0mX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwNTEzMDMwMDU5WhcNMjYwNTE0MDMwMDU5WjAzMTEwLwYDVQQD Eyg4ZWYyZjRjZTc4YTkwMzMwNzE5Nzg5ZmFiMGU2OWI5MDlkODUwOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzyhjAt081eUG0oLBezG3zUcgc36 R1Ybrgnt4dwukMV8MmjlKZyaV4x6sm/TpVntw3xn4IyuxMw+NPS1m9XgwW7SKJQZ ORtM599lVaR8p5jO5z6DpUinPHJ9wJmkpTGwNWlgZIFKnuZlQ+r8RqlQlcV1gpLK IT5Ocm9x0aGkr4htLlEf0TSAsS18fKcvzyiK7UUrtT6T4eK/a342ZMJSUuR79Yvy Auvwl/6ZGNBS95yuizDNH1CLeVncaPtUbO5+ziloKNJ4OdPFiSr0KuxrzaYauY4f 2dAdhsEVonPCoiHLlpmW0CAUKK+MixmR8wamIwJeorFhJqxryKK19lm71wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7y9M54qQMwcZeJ+rDmm5CdhQlAMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdfdnMR0 mLMySWAOpiII3DPuskZ4Qr1vP/PRrEYR1hrUmNP4Zb+BaiVtobAfIM6M0hTvmFXW dSox+6VJ95oggIK46eywhelISbwIh9JSF3PbsGeMPy918udVcYcbB4WH2FhnE3k5 8BU8LzVT9Nf8R9TFEVQ6MzCGs9+lQVtDiHaiUKFAXkWmdjTVHwATa1gTv9wnIrLq HKXBWR/N5V4yeL+9fX2MQltXy4q4JXE0n4PDfKc61lWy7Wsh5v6+WkEVFRRrvESG i17hmrxuTJGmxulDrSzGcclh22qfAybN8LaqZxMUvHjZanxl84TkX2bAO827qqAn NrE4EXEzmyy5BQ== -----END CERTIFICATE-----Generated at Wed May 13 10:30:58 2026 by rpki-client