$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: iunQCzECeBiU+wJBV3jq295yf9+l86GWL65CSEqmEX8= Subject key identifier: B4:D4:41:C1:30:39:A5:36:8C:C5:5B:2C:B4:E3:5E:3A:E8:E5:A9:01 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019D2772EA3B535396D8F288F417C3D1F19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 11FC Signing time: Thu 26 Mar 2026 00:02:15 +0000 Manifest this update: Thu 26 Mar 2026 00:02:15 +0000 Manifest next update: Fri 27 Mar 2026 00:02:15 +0000 Files and hashes: 1: 1-Iasn8QfLlHYw1d3apIIRZdHnTA.roa (hash: akuumleUFXeZK5cFHJWvfQVycNhjGDQhhy8k92/fVaI=) 2: 381UF0wFpH9KjqdTVyULKW-Symg.roa (hash: o5DAvprNnmno2nQB2U4MWvOReYohozPhDKrJxLJCZL4=) 3: 4vfTU0zYJcCA3r-0LKFgGYMLHwM.roa (hash: MqIS70KygzK8Y14etZelzh7zJomk1FjDjGJtlbBmHPY=) 4: 6emA3pTEafcOiEfNIuZ-GtDDkT8.roa (hash: xQowLxGBfyXEonbIvPO8fiDwnrLgdjvcz1zHHkHRFfs=) 5: 98bq823Vn9Z-Fx2cEcT7XY2KMVA.roa (hash: DIi0u4CyW3cyDGyZyEVbeSJXsT7W1hYXrmK6X7/JaRw=) 6: E2zZ0ptuLLW4GKeqwRjSDPvtHuc.roa (hash: 6H27mylWpjWFpKd6fOdf4A0bu4ovsdmc8EAG0X5i4xQ=) 7: E9wKeiD_LK90gSuNFJOLzH-dBSw.roa (hash: 3ooOx4pHPNscaC848kYWeY32PaNSsSRSaeSUE20QIto=) 8: LcJgxPCvokunnEvSCOPu7WrjbvE.roa (hash: vwqM2RvDfDOT5q/Rx6th5P6AZOWy9ZT0Ufjhzi6ZfvM=) 9: Vs4q05s-W8NHWMm5YOcJc_SL2QY.roa (hash: JRDT0B7hKKnVofZeEKM2euy2nBMFe7V+h7bbjCvTBHk=) 10: XuvIYq8HLSlZkXL-VdvjhCtcmkU.roa (hash: jr1ROeEtTUtrgfLsp+6muEgknMQtZxXtTSB2SKkiCCU=) 11: dg-GLMnH67j7yppJECaVRoBdf0Y.roa (hash: b2J8Y5D45Z9OWsyTH6IUg3DHGscsWRNscUcZPz5dRnw=) 12: f8_GIAm3EWN0ORRIzeDYJdUFY1M.roa (hash: zVcR9MNoQHTb+oV5/AwYk0U0f8I9YZgy5dnCAHN404g=) 13: fLNjAmopkelaDg7Aq2lJcncLXtM.roa (hash: 8cm1hslCHrVaaQSNqeySs3D9Y+PqAm9zZ1D0nP3dkvI=) 14: t0dJBq5tyuef8sqhfZjuaOUjwGk.roa (hash: TOFTPGQ61BbJrcBH4fsixoKiOEv8Y7aIrVJWORJmIls=) 15: tIkY4OoTNihbQhTi0QsM5bM1dfA.roa (hash: b+OXoXB4CdtdFNvzy3lCk/uJkJJJusTiPWfrLUgLfeU=) 16: uUpVaQyB5Gef14b5-tkLPMH-Qck.roa (hash: ADfKqzOA47ogtpw04+VhM6A9XUlpgBTWjAQa2xF3ouQ=) 17: wU0R58qK6e5amJTxuMpsmh9tO3E.roa (hash: PYIa7k7PcyJeg80FAZZysjj7H3WxvfuOAOrglzOpvEo=) 18: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: KBe9rRQoAG02CwlN8hG/kngaSZiLVtGYkxVxGC0girw=) 19: yLdcgrU5vCy_8kpFmnfof5HhrIM.roa (hash: Mm/JUprpaFlD3gm2ov0b19oP/Je2orYsA8KzhAJGVkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:ea:3b:53:53:96:d8:f2:88:f4:17:c3:d1:f1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Mar 26 00:02:15 2026 GMT Not After : Mar 27 00:02:15 2026 GMT Subject: CN=b4d441c13039a5368cc55b2cb4e35e3ae8e5a901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:b0:72:be:e7:a2:df:c8:6f:1e:af:aa:e9: 20:c8:19:fd:37:e8:7d:76:63:ce:3c:df:2b:88:1c: 7f:5d:c5:98:a1:af:41:ad:e4:c6:a9:4f:1b:75:73: d5:59:f4:82:7a:e4:28:02:78:d8:65:06:96:a7:1e: 09:c9:ef:be:9e:b6:fd:5c:48:8b:a0:ea:e7:48:b0: db:30:19:d8:ec:46:34:2f:b4:84:34:b7:44:6a:cb: 45:d4:b5:05:50:6b:88:bc:fc:b8:74:0e:dc:99:e9: ba:19:6a:df:59:62:fa:f6:b1:31:ec:e4:5f:04:50: d1:8c:ea:60:25:87:39:2f:a8:dc:12:39:4c:64:0a: a8:3e:68:2c:fb:2f:f8:2e:3d:a9:7e:78:78:39:04: 01:4b:e1:5c:23:fe:20:c9:4a:71:19:dd:a1:ac:d9: 3f:3c:57:d2:1b:da:f8:e3:e7:c0:63:ae:29:fd:e1: dc:f0:0e:b9:83:9a:2f:e3:34:4a:9f:99:c2:73:e0: c0:d8:31:6a:75:29:1b:87:55:eb:8f:a0:0a:53:4a: 92:e9:be:be:07:ca:83:04:d4:3b:1a:e7:40:83:9f: 66:6e:02:57:56:ee:36:67:98:a9:38:ed:c7:fb:cf: c4:a8:c0:88:6b:c3:0b:30:dc:8a:fa:7d:ef:91:1c: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D4:41:C1:30:39:A5:36:8C:C5:5B:2C:B4:E3:5E:3A:E8:E5:A9:01 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6e:02:81:4b:3e:34:83:bd:be:1e:75:76:ea:49:db:52:30: 9c:2e:4f:21:78:09:21:5a:33:79:73:d2:b3:8d:e2:55:4d:ad: 7d:0d:cd:85:fa:34:12:28:48:5f:aa:10:cc:ab:04:eb:85:fd: 44:da:72:c8:6a:cc:31:d4:d9:f0:b9:70:95:76:e8:33:97:46: 45:02:4d:5d:b7:de:22:d2:d1:19:39:38:33:74:37:84:12:72: 57:45:c9:16:9a:50:4f:81:7b:c7:1d:e8:c4:8e:18:08:77:5d: 08:54:a7:29:41:99:00:5c:ad:cb:75:0c:8e:ba:c3:98:bb:55: 1d:6c:88:f3:d1:80:5d:a7:eb:4c:07:68:ff:9a:2e:9c:4d:f3: fd:88:53:36:7b:f5:bd:1e:79:a4:2f:b4:f5:3a:e8:dc:b3:b7: e1:52:7a:ba:0a:2d:3b:92:d3:7b:f6:c3:fb:50:ea:cd:76:8a: 21:26:06:35:b3:69:1b:46:a1:30:33:39:31:c4:2c:b2:bb:ae: 6a:18:92:0b:d4:a0:f9:b1:8a:43:a4:e2:af:9a:ec:b6:eb:e1: 7d:1a:74:9f:77:74:b4:f6:fd:e8:6e:7a:48:74:2f:b9:d7:97: 14:7c:41:e8:bc:00:42:cd:18:be:8b:36:c8:95:08:f3:33:ec: 86:cd:ce:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncuo7U1OW2PKI9BfD0fGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMzI2MDAwMjE1WhcNMjYwMzI3MDAwMjE1WjAzMTEwLwYDVQQD EyhiNGQ0NDFjMTMwMzlhNTM2OGNjNTViMmNiNGUzNWUzYWU4ZTVhOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMuwcr7not/Ibx6vqukgyBn9N+h9 dmPOPN8riBx/XcWYoa9BreTGqU8bdXPVWfSCeuQoAnjYZQaWpx4Jye++nrb9XEiL oOrnSLDbMBnY7EY0L7SENLdEastF1LUFUGuIvPy4dA7cmem6GWrfWWL69rEx7ORf BFDRjOpgJYc5L6jcEjlMZAqoPmgs+y/4Lj2pfnh4OQQBS+FcI/4gyUpxGd2hrNk/ PFfSG9r44+fAY64p/eHc8A65g5ov4zRKn5nCc+DA2DFqdSkbh1Xrj6AKU0qS6b6+ B8qDBNQ7GudAg59mbgJXVu42Z5ipOO3H+8/EqMCIa8MLMNyK+n3vkRwi4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTUQcEwOaU2jMVbLLTjXjro5akBMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW4CgUs+ NIO9vh51dupJ21IwnC5PIXgJIVozeXPSs43iVU2tfQ3Nhfo0EihIX6oQzKsE64X9 RNpyyGrMMdTZ8LlwlXboM5dGRQJNXbfeItLRGTk4M3Q3hBJyV0XJFppQT4F7xx3o xI4YCHddCFSnKUGZAFyty3UMjrrDmLtVHWyI89GAXafrTAdo/5ounE3z/YhTNnv1 vR55pC+09Tro3LO34VJ6ugotO5LTe/bD+1DqzXaKISYGNbNpG0ahMDM5McQssruu ahiSC9Sg+bGKQ6Tir5rstuvhfRp0n3d0tPb96G56SHQvudeXFHxB6LwAQs0Yvos2 yJUI8zPshs3OaQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:14 2026 by rpki-client