$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: /dVTU6hP2CrWUWGrwgT+gaqs4+xlgbMtNAGbhLiZ6Ug= Subject key identifier: AD:D5:FE:E6:CE:0D:7F:57:C8:B6:1D:89:F2:99:EE:43:10:84:82:D2 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 01A1DB384BA3A125105A9326660788D2ABF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1702 Signing time: Sat 14 Nov 2026 18:01:02 +0000 Manifest this update: Sat 14 Nov 2026 18:01:02 +0000 Manifest next update: Sun 15 Nov 2026 18:01:02 +0000 Files and hashes: 1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=) 2: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=) 3: A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa (hash: Vg1LcQNz/XKk+x/pf6T3VfFuldheMFgMWkJ/JA6myNs=) 4: AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa (hash: NHQMdNh4Ym+0k0zIiZ+2OzU8E5q7yos10YV7kXoqN9k=) 5: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=) 6: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=) 7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: ZMF/kTJ2I6lVPy0/LBIVx94uHD2sC9iQ/PIdr9+UHlA=) 8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=) 9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=) 10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=) 11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=) 12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:4b:a3:a1:25:10:5a:93:26:66:07:88:d2:ab:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Nov 14 18:01:02 2026 GMT Not After : Nov 15 18:01:02 2026 GMT Subject: CN=add5fee6ce0d7f57c8b61d89f299ee43108482d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:87:87:2f:1d:4d:d6:e6:46:c3:54:a1:6d: 7b:48:48:72:1c:67:24:eb:a2:3b:88:a9:8c:fc:db: 40:a5:14:4d:00:da:9a:78:f1:36:fd:4e:e3:06:61: ee:3d:90:b6:f7:b7:90:ef:59:20:68:99:a3:e0:91: ba:78:6a:56:df:bf:68:92:3a:b4:b2:71:28:9b:8a: 14:fa:62:c5:3d:3e:19:0a:6f:cd:b9:d6:80:1f:66: 05:e5:52:9c:93:91:45:72:80:e7:ca:6e:70:68:1d: 07:ca:cd:c1:4f:16:c6:da:d9:03:fb:8a:0b:84:d2: bc:8b:3e:40:01:54:c5:c8:6b:f1:1c:81:f8:59:f9: cc:53:32:1a:9a:de:89:87:82:60:37:c1:f8:e6:b2: 64:83:61:46:3c:77:2b:a1:b8:1d:c6:d1:07:d2:1c: b9:7a:0a:13:e1:c8:7b:86:a5:8b:1c:2f:84:17:e6: a1:93:29:ed:d6:7d:d2:68:fe:d2:93:78:95:48:6d: fe:f6:e7:b5:f1:0c:47:15:5c:cf:b2:4c:4c:fd:f8: 66:8f:b2:96:83:08:e4:27:92:2a:67:6b:2f:ba:05: e2:f6:c6:04:e2:5b:ef:0d:dd:15:ed:f7:73:c4:c7: 38:6f:a6:95:e7:e2:e0:9f:58:05:f1:2b:e7:f3:63: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:FE:E6:CE:0D:7F:57:C8:B6:1D:89:F2:99:EE:43:10:84:82:D2 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3b:50:03:9f:27:f4:05:e1:d3:ec:3c:e8:1c:7d:8b:fb:cc: e3:83:bf:52:df:27:16:22:62:f5:76:a9:c7:e2:e2:f2:1c:29: e6:53:e3:50:d8:fe:0e:f0:01:8f:6e:2f:e9:ed:63:1e:8e:eb: 46:72:f2:52:8a:0f:e0:0e:cb:13:c2:72:ef:ef:c0:00:0f:f0: 95:bf:11:34:d9:73:91:10:49:e3:58:1e:fd:a9:60:7a:a2:4c: fe:54:52:66:c8:7b:96:e5:58:5f:2d:5b:65:1e:4a:21:59:2d: b2:ae:26:9f:ff:1f:d6:f3:1f:94:2a:86:1a:61:3b:2c:cc:22: fe:5c:23:c6:ec:37:36:be:9c:e3:a8:d8:27:0b:72:0f:fe:33: 64:65:f8:b3:e9:41:71:5c:50:e8:11:42:83:32:1b:04:77:85: f0:9a:70:53:d4:5c:2f:a8:82:ca:a6:95:1c:e4:11:40:bb:02: 01:70:26:7d:59:0c:dd:75:ae:5c:cc:7c:54:d4:2d:ca:68:99: 20:20:f2:20:d9:11:a9:f0:35:76:f7:f6:86:cb:69:9b:cc:a9: 5a:a8:cc:22:39:e8:d7:09:80:b5:3c:30:98:c3:5d:b4:4f:00: 9e:85:82:b4:6f:aa:a6:36:38:cd:ee:cd:77:cd:ae:0c:3d:8c: 54:ac:0b:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOEujoSUQWpMmZgeI0qvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYxMTE0MTgwMTAyWhcNMjYxMTE1MTgwMTAyWjAzMTEwLwYDVQQD EyhhZGQ1ZmVlNmNlMGQ3ZjU3YzhiNjFkODlmMjk5ZWU0MzEwODQ4MmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxeHhy8dTdbmRsNUoW17SEhyHGck 66I7iKmM/NtApRRNANqaePE2/U7jBmHuPZC297eQ71kgaJmj4JG6eGpW379okjq0 snEom4oU+mLFPT4ZCm/NudaAH2YF5VKck5FFcoDnym5waB0Hys3BTxbG2tkD+4oL hNK8iz5AAVTFyGvxHIH4WfnMUzIamt6Jh4JgN8H45rJkg2FGPHcrobgdxtEH0hy5 egoT4ch7hqWLHC+EF+ahkynt1n3SaP7Sk3iVSG3+9ue18QxHFVzPskxM/fhmj7KW gwjkJ5IqZ2svugXi9sYE4lvvDd0V7fdzxMc4b6aV5+Lgn1gF8Svn82NTpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3V/ubODX9XyLYdifKZ7kMQhILSMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTtQA58n 9AXh0+w86Bx9i/vM44O/Ut8nFiJi9Xapx+Li8hwp5lPjUNj+DvABj24v6e1jHo7r RnLyUooP4A7LE8Jy7+/AAA/wlb8RNNlzkRBJ41ge/algeqJM/lRSZsh7luVYXy1b ZR5KIVktsq4mn/8f1vMflCqGGmE7LMwi/lwjxuw3Nr6c46jYJwtyD/4zZGX4s+lB cVxQ6BFCgzIbBHeF8JpwU9RcL6iCyqaVHOQRQLsCAXAmfVkM3XWuXMx8VNQtymiZ ICDyINkRqfA1dvf2hstpm8ypWqjMIjno1wmAtTwwmMNdtE8AnoWCtG+qpjY4ze7N d82uDD2MVKwL4Q== -----END CERTIFICATE-----Generated at Sat Nov 14 22:43:22 2026 by rpki-client