$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json) Hash identifier: JkyStcKqGReFiH2NnrlLVXuUUcczwer0LRqd65N9Deo= Subject key identifier: 23:00:D8:14:82:84:F3:4A:19:BF:66:09:97:CB:01:2E:BC:E7:AD:D5 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019D2772B53113985C93E5B1B241D233DAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft Manifest number: 18A8 Signing time: Thu 26 Mar 2026 00:02:01 +0000 Manifest this update: Thu 26 Mar 2026 00:02:01 +0000 Manifest next update: Fri 27 Mar 2026 00:02:01 +0000 Files and hashes: 1: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (hash: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg=) 2: CkKLYj92galNREO338sWbNXvtys.roa (hash: GswGrCpFRGcvwQ2BBbOurYuHd/8bVtTdmHhmb10JZX0=) 3: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (hash: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY=) 4: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (hash: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o=) 5: T6WYRwpE69f1_segiofKG18EyPU.roa (hash: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw=) 6: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (hash: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc=) 7: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (hash: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4=) 8: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (hash: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY=) 9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: x+UTIp/ZcnJ7ZS62piChiigbfK+ljDfxUqAm13x0HKc=) 10: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (hash: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:b5:31:13:98:5c:93:e5:b1:b2:41:d2:33:da:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Mar 26 00:02:01 2026 GMT Not After : Mar 27 00:02:01 2026 GMT Subject: CN=2300d8148284f34a19bf660997cb012ebce7add5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3b:94:eb:e1:c5:5e:bf:33:23:df:99:87:bd: a0:40:ac:a6:5b:16:8a:83:e0:66:6b:a6:07:28:df: ef:00:78:7a:b7:04:c7:c7:79:b8:6d:37:a0:08:8c: 49:6b:11:92:27:bd:37:66:5d:12:76:1f:83:b9:de: 4f:01:0c:0e:14:b4:4c:16:ab:ea:47:03:3f:5a:6c: bb:ba:4b:6b:28:49:8f:b3:3d:c0:17:dd:1a:4a:e6: 7a:31:d6:61:f6:af:f2:f8:a0:50:2b:7f:51:f1:18: 92:94:df:81:b4:28:88:73:20:70:1f:ad:1b:ed:e4: e4:94:5f:ca:a7:32:e0:9a:2d:e0:a9:63:65:e5:95: 2f:9d:42:42:22:7c:01:a3:89:db:21:15:6c:60:e6: 20:d5:24:24:cb:c2:3c:11:aa:f2:d3:12:84:7e:21: fa:a7:f7:ec:cc:88:03:b2:b3:58:94:84:a1:58:ce: d6:99:c5:bb:1e:6a:8f:9e:d8:9a:a7:00:cc:2b:41: 9a:06:0f:97:bd:70:a5:2b:ce:b5:41:a5:52:ce:c7: d6:b8:d1:90:fd:ef:dd:43:ca:e6:16:43:a8:67:fb: 45:42:53:9f:ce:c8:35:9e:2a:d9:b9:e4:95:a5:23: 69:b6:c2:90:88:9e:39:34:fc:8c:97:40:cb:82:4f: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:00:D8:14:82:84:F3:4A:19:BF:66:09:97:CB:01:2E:BC:E7:AD:D5 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fe:bd:b8:e7:33:52:9c:78:4e:c6:f2:7d:6e:81:50:44:de: c5:16:c1:22:31:8e:5d:0b:42:e0:b8:5b:ea:81:ce:06:de:71: ce:97:cd:78:14:54:32:1f:22:b9:e9:a9:b1:2f:87:09:55:61: 76:97:81:e8:d2:e9:6a:08:a0:a6:c2:27:35:3d:40:66:9b:27: 5a:e7:be:e1:35:07:72:e5:b7:0b:bc:a6:45:e7:ee:ab:c2:37: 1f:5e:ea:3b:2c:d0:21:da:29:a9:04:ad:3f:f0:b7:88:5d:e3: fd:5c:2c:54:9e:df:c6:ee:b7:64:14:44:24:e0:a2:12:eb:79: 6b:76:80:4c:06:f4:11:07:89:bd:c1:e8:f4:ea:b5:9c:67:13: 86:d9:70:8d:5a:2e:ba:fe:a8:4c:98:6f:86:6a:08:42:fa:78: 79:cd:86:a4:29:0e:c8:2a:82:fb:e3:1b:e0:a3:10:e1:b6:43: e9:81:19:3e:c0:04:91:c5:f1:ba:f7:7d:cf:e4:f2:71:c9:f5: 1e:af:03:b0:67:a9:05:e2:5b:1d:b8:00:d1:2b:63:45:ff:c0: f0:f8:1c:67:af:38:00:2e:59:ea:14:45:69:1d:99:11:60:47: 47:e6:30:18:0f:f9:ab:89:78:3a:21:11:4d:52:0b:8e:9c:7e: 4a:a3:98:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncrUxE5hck+WxskHSM9qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMzI2MDAwMjAxWhcNMjYwMzI3MDAwMjAxWjAzMTEwLwYDVQQD EygyMzAwZDgxNDgyODRmMzRhMTliZjY2MDk5N2NiMDEyZWJjZTdhZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DuU6+HFXr8zI9+Zh72gQKymWxaK g+Bma6YHKN/vAHh6twTHx3m4bTegCIxJaxGSJ703Zl0Sdh+Dud5PAQwOFLRMFqvq RwM/Wmy7uktrKEmPsz3AF90aSuZ6MdZh9q/y+KBQK39R8RiSlN+BtCiIcyBwH60b 7eTklF/KpzLgmi3gqWNl5ZUvnUJCInwBo4nbIRVsYOYg1SQky8I8Eary0xKEfiH6 p/fszIgDsrNYlIShWM7WmcW7HmqPntiapwDMK0GaBg+XvXClK861QaVSzsfWuNGQ /e/dQ8rmFkOoZ/tFQlOfzsg1nirZueSVpSNptsKQiJ45NPyMl0DLgk/gswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMA2BSChPNKGb9mCZfLAS68563VMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP69uOcz Upx4TsbyfW6BUETexRbBIjGOXQtC4Lhb6oHOBt5xzpfNeBRUMh8iuempsS+HCVVh dpeB6NLpagigpsInNT1AZpsnWue+4TUHcuW3C7ymRefuq8I3H17qOyzQIdopqQSt P/C3iF3j/VwsVJ7fxu63ZBREJOCiEut5a3aATAb0EQeJvcHo9Oq1nGcThtlwjVou uv6oTJhvhmoIQvp4ec2GpCkOyCqC++Mb4KMQ4bZD6YEZPsAEkcXxuvd9z+Tyccn1 Hq8DsGepBeJbHbgA0StjRf/A8PgcZ684AC5Z6hRFaR2ZEWBHR+YwGA/5q4l4OiER TVILjpx+SqOY0w== -----END CERTIFICATE-----Generated at Thu Mar 26 05:04:37 2026 by rpki-client