$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: hnzXGYBeDzbGs6F7sNedtYPcN0Lz7UVRqvSn2fx4rQs= Subject key identifier: 1D:52:E0:F5:F8:AE:BD:4F:B9:58:00:E2:BE:9D:61:06:D6:A1:80:EF Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 01A0D26E6EB4F32F289ED70560DF34B1F929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 1B88 Signing time: Thu 24 Sep 2026 08:00:47 +0000 Manifest this update: Thu 24 Sep 2026 08:00:47 +0000 Manifest next update: Fri 25 Sep 2026 08:00:47 +0000 Files and hashes: 1: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (hash: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8=) 2: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=) 3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=) 4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=) 5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=) 6: Q64xUrRAaelDNsVxAUyEucxHw7Y.roa (hash: C8dCOpG/z2zTzKRV0qbQKf4ylmBMywe/913i1rh1tTg=) 7: S3ojyYbaRSJyEF2Z-S1fyWJZZqI.roa (hash: l0WqUI8pkzg+bF3ZTWyPp+HkuEARHQDbbfNWl4sL2v4=) 8: Uzf4m6ysD6fics4liKliLa4lQgw.roa (hash: jrKKMJ7RRR+vR7ypBXAaBFSStsbNbLrn03HRtgN2PLU=) 9: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: 3Xsm4yizPsSS5eryc7fakpXW1go7DAR7VFJIpGpNqp0=) 10: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (hash: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs=) 11: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (hash: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA=) 12: iahQbW1iBfEY46yiqbkn59Z1NKE.roa (hash: yJG/O2diEJVVBoUaMPlh2OydqeIUx1X535CinLs/Ess=) 13: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (hash: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk=) 14: pa0maz8RzdAqPBYglEiUl6FWmh0.roa (hash: bOE0FSBYTEFSINx3pLoAdJvRYXXPgXPd0w77jq5s09o=) 15: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=) 16: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=) 17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:6e:6e:b4:f3:2f:28:9e:d7:05:60:df:34:b1:f9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Sep 24 08:00:47 2026 GMT Not After : Sep 25 08:00:47 2026 GMT Subject: CN=1d52e0f5f8aebd4fb95800e2be9d6106d6a180ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0b:e2:c1:f5:5b:e3:d6:18:5b:7c:92:50:1a: b0:bf:3d:bd:ce:e7:bf:ed:80:d5:dd:df:df:3e:01: 5c:13:c4:33:1d:48:27:56:98:42:7b:b6:f6:35:e1: 21:01:72:23:7d:3b:d6:8f:d2:eb:e3:8c:83:a0:93: 1d:31:2a:f2:a8:fa:74:c6:f0:ad:1a:10:09:6a:5a: 0d:3e:18:ab:f5:89:cb:c6:26:6a:ff:43:b9:91:db: 2b:cc:5b:10:d6:bc:a9:38:ec:e9:45:5f:78:7c:9a: 46:55:00:d3:d3:46:a0:6b:8e:66:7b:04:ea:2a:5e: 07:72:50:dd:d8:e3:4d:af:a1:71:1e:36:ac:c6:ba: ab:32:76:99:07:04:ef:25:db:d8:31:a9:2f:2f:87: 8f:ae:e0:17:ca:a6:3a:f5:a7:e6:7f:52:6d:e0:83: ed:55:1f:cd:ee:a2:bb:05:a5:10:1d:2b:a9:47:44: a0:67:27:29:35:5f:48:78:87:b2:93:59:27:cb:da: c0:d6:88:20:f2:14:a9:48:e6:fa:1a:57:02:72:3d: cd:6a:5a:c5:1d:3d:9b:83:9b:8d:e6:52:69:c0:8a: c9:c5:60:ad:db:15:67:2c:05:15:b8:51:d9:ce:e0: 0a:39:06:4f:4a:91:df:33:21:4e:d9:d2:cd:b7:9c: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:E0:F5:F8:AE:BD:4F:B9:58:00:E2:BE:9D:61:06:D6:A1:80:EF X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ae:dc:8d:62:1a:a6:12:86:46:a7:9d:98:ea:df:e8:53:e1: a9:9d:54:74:99:9c:ac:3b:42:33:cb:75:e4:29:f6:d6:7a:de: 3c:de:37:a3:8e:64:b1:5f:67:2a:a9:f3:bb:6f:68:83:e0:34: 56:1f:22:5f:b5:0b:57:96:de:e5:5b:9b:89:a9:a9:a8:35:44: 43:ba:ce:2a:1c:a9:ba:25:f9:6e:bd:49:3e:53:53:8b:4b:13: 24:35:64:11:a5:b2:0c:47:9a:38:65:2d:62:02:f5:e0:7f:17: b0:8d:e0:dc:78:9b:50:d4:64:66:ae:7e:5d:80:fd:de:30:11: a2:7c:a9:07:3f:37:90:25:8b:66:1b:ac:16:0f:29:ce:1e:b1: a5:b5:cb:6a:9d:9b:1a:e4:af:f2:23:5d:a0:fc:4e:c5:41:39: 35:0d:4c:b4:2b:60:a9:28:87:41:18:d9:7b:81:8e:a5:c4:85: 65:89:84:f1:92:9c:9a:63:99:a2:63:e0:42:df:3d:17:e7:de: 32:ef:4a:f8:46:fc:e0:14:c0:56:f6:38:01:7a:1d:15:c4:bf: f2:df:2c:75:09:e9:15:4e:8f:84:5f:40:00:13:1b:3c:e5:d9: 48:dd:41:27:96:90:fa:01:45:54:02:29:66:e0:8b:ac:d8:5b: 12:bd:02:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSbm608y8ontcFYN80sfkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwOTI0MDgwMDQ3WhcNMjYwOTI1MDgwMDQ3WjAzMTEwLwYDVQQD EygxZDUyZTBmNWY4YWViZDRmYjk1ODAwZTJiZTlkNjEwNmQ2YTE4MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gviwfVb49YYW3ySUBqwvz29zue/ 7YDV3d/fPgFcE8QzHUgnVphCe7b2NeEhAXIjfTvWj9Lr44yDoJMdMSryqPp0xvCt GhAJaloNPhir9YnLxiZq/0O5kdsrzFsQ1rypOOzpRV94fJpGVQDT00aga45mewTq Kl4HclDd2ONNr6FxHjasxrqrMnaZBwTvJdvYMakvL4ePruAXyqY69afmf1Jt4IPt VR/N7qK7BaUQHSupR0SgZycpNV9IeIeyk1kny9rA1ogg8hSpSOb6GlcCcj3NalrF HT2bg5uN5lJpwIrJxWCt2xVnLAUVuFHZzuAKOQZPSpHfMyFO2dLNt5w6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1S4PX4rr1PuVgA4r6dYQbWoYDvMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha7cjWIa phKGRqedmOrf6FPhqZ1UdJmcrDtCM8t15Cn21nrePN43o45ksV9nKqnzu29og+A0 Vh8iX7ULV5be5VubiampqDVEQ7rOKhypuiX5br1JPlNTi0sTJDVkEaWyDEeaOGUt YgL14H8XsI3g3HibUNRkZq5+XYD93jARonypBz83kCWLZhusFg8pzh6xpbXLap2b GuSv8iNdoPxOxUE5NQ1MtCtgqSiHQRjZe4GOpcSFZYmE8ZKcmmOZomPgQt89F+fe Mu9K+Eb84BTAVvY4AXodFcS/8t8sdQnpFU6PhF9AABMbPOXZSN1BJ5aQ+gFFVAIp ZuCLrNhbEr0CoQ== -----END CERTIFICATE-----Generated at Thu Sep 24 12:48:01 2026 by rpki-client