$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json) Hash identifier: FdsgYikurIa3CH/i01BDXv88CxpFrpXOoWgfrH4LteA= Subject key identifier: EE:F3:46:AA:A7:14:DE:D2:F5:26:2E:41:4B:E6:E1:7C:95:40:58:C1 Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019D25BA032B555B4279B64BC1372D4827FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft Manifest number: 0DC7 Signing time: Wed 25 Mar 2026 16:00:40 +0000 Manifest this update: Wed 25 Mar 2026 16:00:40 +0000 Manifest next update: Thu 26 Mar 2026 16:00:40 +0000 Files and hashes: 1: 2Z2J5Ju30fTSS6wJ5IKnbRjstx0.roa (hash: ozXlVAQX7heZzyY06prkBteN7ujmsdprMmTU+0njtmQ=) 2: 6r51rXoAPdmeC4K_yqp03Vb9g2s.roa (hash: RjWH0Hn9t48ZQGZWWRbFWYn9A7hmaM+wOLDLBMuGRRM=) 3: 8FOWFEWcx16C0mva1ErD1ehkFBU.roa (hash: rn3EeCGq/aMeCBtKEwzF9PyWQiRVYlCrTF4jKTOnpKM=) 4: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (hash: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE=) 5: Miwu8YXoVp5B89v9kGwcUmqn6QU.roa (hash: k3WOZfSv7shx90Y1dMVj4Nd6ciQTdDSrKwPel6VpQXo=) 6: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (hash: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ=) 7: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: M+HLOjcHMRLEqSe7d+OvGDpZX2F2T8nptOxUGGjHHNI=) 8: YGVozKeT_bwzfEiwwQRKa2fjDt4.roa (hash: uLfRMkK7zfI8iMFNVyYCqQLQn1y3LaBbbtnaH/2sb7M=) 9: b31NEv9Es8XVDEj8beb9fT9naRs.roa (hash: 3veQsyx85NL4O7dRRCNwd65jcAMA+8SLngv7KreI9GQ=) 10: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (hash: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA=) 11: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (hash: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI=) 12: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (hash: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4=) 13: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (hash: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:03:2b:55:5b:42:79:b6:4b:c1:37:2d:48:27:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Mar 25 16:00:40 2026 GMT Not After : Mar 26 16:00:40 2026 GMT Subject: CN=eef346aaa714ded2f5262e414be6e17c954058c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:a3:c8:6e:b9:8e:8c:b1:e2:bf:39:57:80: 54:68:0c:17:70:5b:46:0d:f1:01:65:68:03:e1:05: 56:9e:78:a3:cf:67:ec:0f:33:43:b3:bf:cb:6e:f3: 6a:bd:36:cc:1c:09:bc:ba:dc:2a:33:c3:b2:1e:b8: b4:75:10:89:1a:d4:de:7b:0f:b4:18:ad:dd:b7:27: fe:92:83:10:cf:3b:21:00:fc:1f:f7:a3:08:6a:2a: 31:df:33:86:4c:b6:a4:bd:79:17:28:b0:4c:78:5e: e9:a3:84:00:f4:fb:fc:d1:36:2b:e1:7f:b6:82:71: 07:c3:af:7d:8c:14:4f:fd:1f:bc:fc:e3:70:f7:03: c2:27:33:42:ad:e3:a2:bc:4e:95:e5:1e:38:09:3e: 07:6a:4e:eb:37:12:df:58:0e:89:16:d2:e1:44:0e: 90:2f:f9:8b:dd:8c:41:62:86:d5:06:f2:92:dd:84: 26:63:f7:ed:24:83:bd:a4:e2:b3:3f:ad:bc:15:80: b8:28:ee:88:99:0a:c6:46:3d:5c:47:ab:e8:09:ed: 23:46:74:31:70:a4:a1:50:ba:dd:79:97:cf:c1:18: 83:53:f9:b5:c2:ba:b0:ba:92:7f:45:62:e0:1c:47: 5f:8a:c2:4e:40:5e:44:ae:f0:95:24:db:f0:62:dc: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F3:46:AA:A7:14:DE:D2:F5:26:2E:41:4B:E6:E1:7C:95:40:58:C1 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3a:93:d5:54:7e:79:b8:a1:af:f5:a0:8c:8a:1e:ce:3d:0e: 5e:cb:81:25:63:ed:ed:ac:60:e9:b7:d0:b2:61:ec:96:91:62: c8:87:da:7f:44:bf:13:67:fc:dc:ec:cd:9d:61:62:e9:96:7a: 7c:7c:f2:e4:4d:d7:63:10:d2:eb:c9:6a:9e:03:b5:f2:95:99: c6:5d:b7:00:bb:bc:00:db:45:c5:66:a8:da:43:a7:2c:a5:65: 73:93:ec:55:d3:7d:96:5a:5c:eb:6e:d4:7b:63:d5:98:d4:4f: 76:16:0f:d6:9a:c9:4c:a4:4d:14:9b:3f:98:ae:25:32:c9:8e: 89:91:5e:11:67:35:bb:fd:24:5f:5d:ce:01:12:9e:cb:fe:7b: be:6e:05:9a:81:b3:a7:40:6a:23:29:07:13:7e:ee:53:d6:77: 9c:31:58:e6:af:5d:8f:53:d3:af:5e:b6:1f:d7:ed:16:2a:22: f5:41:38:9b:62:00:b3:d5:fb:53:02:31:fe:53:7f:eb:bb:cd: db:10:33:08:a4:eb:33:50:bc:97:1c:50:74:e9:37:8b:f6:e7: 00:f3:c8:13:8e:4a:a3:73:84:70:c4:f8:01:e1:c4:18:d7:e9: 13:c1:1a:03:5d:a6:2a:ce:44:c7:5f:c5:d0:ea:57:37:01:41: 4d:18:43:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lugMrVVtCebZLwTctSCf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMzI1MTYwMDQwWhcNMjYwMzI2MTYwMDQwWjAzMTEwLwYDVQQD EyhlZWYzNDZhYWE3MTRkZWQyZjUyNjJlNDE0YmU2ZTE3Yzk1NDA1OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5yjyG65joyx4r85V4BUaAwXcFtG DfEBZWgD4QVWnnijz2fsDzNDs7/LbvNqvTbMHAm8utwqM8OyHri0dRCJGtTeew+0 GK3dtyf+koMQzzshAPwf96MIaiox3zOGTLakvXkXKLBMeF7po4QA9Pv80TYr4X+2 gnEHw699jBRP/R+8/ONw9wPCJzNCreOivE6V5R44CT4Hak7rNxLfWA6JFtLhRA6Q L/mL3YxBYobVBvKS3YQmY/ftJIO9pOKzP628FYC4KO6ImQrGRj1cR6voCe0jRnQx cKShULrdeZfPwRiDU/m1wrqwupJ/RWLgHEdfisJOQF5ErvCVJNvwYtwpswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7zRqqnFN7S9SYuQUvm4XyVQFjBMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTqT1VR+ ebihr/WgjIoezj0OXsuBJWPt7axg6bfQsmHslpFiyIfaf0S/E2f83OzNnWFi6ZZ6 fHzy5E3XYxDS68lqngO18pWZxl23ALu8ANtFxWao2kOnLKVlc5PsVdN9llpc627U e2PVmNRPdhYP1prJTKRNFJs/mK4lMsmOiZFeEWc1u/0kX13OARKey/57vm4FmoGz p0BqIykHE37uU9Z3nDFY5q9dj1PTr162H9ftFioi9UE4m2IAs9X7UwIx/lN/67vN 2xAzCKTrM1C8lxxQdOk3i/bnAPPIE45Ko3OEcMT4AeHEGNfpE8EaA12mKs5Ex1/F 0OpXNwFBTRhDnQ== -----END CERTIFICATE-----Generated at Thu Mar 26 01:19:22 2026 by rpki-client