$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: YWPgKZNdSN+kC4DE9s15VB1v33kCcA4u1wg9lLyd370= Subject key identifier: BD:43:85:C1:4E:2C:C6:FB:13:C2:5B:D5:38:95:9A:D5:D1:0C:35:32 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 01A0DDCE11FB898D54AA5401F7F95207540F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 1AAA Signing time: Sat 26 Sep 2026 13:01:04 +0000 Manifest this update: Sat 26 Sep 2026 13:01:04 +0000 Manifest next update: Sun 27 Sep 2026 13:01:04 +0000 Files and hashes: 1: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (hash: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk=) 2: 42PKmGxLZWltjo2RjF8-O2uhH1I.roa (hash: NUqXlQ+o+ZJwF4uY9fuVeTvOTArxxOzENBFKqJ5J5nw=) 3: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (hash: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek=) 4: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (hash: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg=) 5: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (hash: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0=) 6: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (hash: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs=) 7: Z_Vtx6hPhEla7QjEw0Ge3-aDBkQ.roa (hash: R5X3hIMzkskVUzfz9i4HLODFSm5lw5Mm8yNPeyRwVtU=) 8: h5SeKNU4v1zqrz2SEUMsDeykB1k.roa (hash: /SW4vZCDxBQFJ0MN64qdImwemRl7ZDJMHfByaohPzpI=) 9: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (hash: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE=) 10: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (hash: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE=) 11: nk_BFnPjxZUVaqPDlNJQf6RBw4A.roa (hash: vVJ+n/DVIwr6d39NjXvbQOW6EJnb9U7HwwIO7E8CVpo=) 12: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (hash: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg=) 13: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (hash: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k=) 14: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (hash: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo=) 15: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: Jvdg0aA0xoT+f1OBtfXiE2Ahh7QqI0iytkFA8Y+lJIY=) 16: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (hash: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:ce:11:fb:89:8d:54:aa:54:01:f7:f9:52:07:54:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Sep 26 13:01:04 2026 GMT Not After : Sep 27 13:01:04 2026 GMT Subject: CN=bd4385c14e2cc6fb13c25bd538959ad5d10c3532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:a4:85:94:87:db:c6:ed:1c:38:59:95:d8: 9c:3c:b3:a3:fb:82:6c:6e:8d:74:06:6d:0a:c4:39: f3:24:31:05:d5:3b:a4:4e:81:08:b9:99:f9:99:72: b5:0d:2a:4c:ae:2a:09:f5:7a:4a:61:82:c8:be:1c: f9:5e:99:62:55:32:00:ba:9d:5d:82:82:18:c4:0a: df:27:6a:e7:5f:03:ef:1e:52:6e:47:dc:38:8a:bb: 96:87:6f:32:38:f6:a5:f1:12:76:9a:93:29:28:53: b9:86:aa:8c:ba:d2:64:9b:f6:3e:be:c9:85:84:79: d8:79:4b:b6:a6:e1:98:4e:e6:83:f8:c0:3f:09:7b: 5d:83:00:4e:35:fb:84:37:35:8d:a3:8f:02:44:8f: 9e:64:6e:53:9a:6c:82:85:cb:6d:f9:ab:0b:39:9c: f4:30:6e:8d:b5:c8:b7:03:d9:c0:47:39:60:7e:fb: b1:37:d5:07:cb:49:68:95:e6:f6:dd:83:ae:80:61: 25:df:d5:1b:9a:7b:78:82:40:d3:03:ce:94:32:75: 83:6a:6c:1f:0d:9c:ef:e9:4a:ee:2a:a3:8a:2b:9e: 06:0d:c2:4a:93:07:62:3b:09:6b:13:91:9e:ef:2a: bb:e4:ae:b6:f8:7f:61:f4:3d:30:ec:b3:88:ee:96: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:43:85:C1:4E:2C:C6:FB:13:C2:5B:D5:38:95:9A:D5:D1:0C:35:32 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:81:4e:66:76:27:a6:c5:c6:89:c9:f5:ad:08:f2:95:84:9e: 94:34:b9:cf:2c:86:cd:2c:16:97:5d:7e:3b:50:99:15:7c:44: b1:ba:f7:ec:5d:5b:b7:43:73:74:37:cc:24:6b:16:44:f2:f5: 49:ab:16:c7:c7:84:db:2b:46:b1:07:16:a3:d4:20:ba:fe:bb: 20:23:21:41:50:da:97:64:c1:eb:4a:d9:58:d0:07:3c:91:0f: 88:74:fc:bc:f0:cd:21:ca:d6:1f:56:48:c8:42:5c:99:b8:16: d9:90:fe:d1:68:de:1c:43:f8:f2:e5:1e:e5:ce:59:5e:4b:5b: ef:63:81:3e:c5:12:09:0a:09:4c:0c:f3:a6:c6:80:08:e4:ca: f6:ba:c3:dd:b6:e7:3e:7f:98:f3:2b:8e:c8:6d:06:06:45:96: 80:fb:64:1e:d5:cf:26:d9:b1:ce:4f:ab:db:f2:1c:e5:40:10: 53:3a:7b:34:10:f1:a6:7e:50:b4:72:b5:ae:f0:c5:52:e5:23: c3:0f:a9:33:87:ea:6e:20:4e:d2:f6:c0:48:eb:23:80:3c:18: 8c:16:30:82:2e:1c:7d:38:61:6a:73:a5:2d:8b:bd:c0:5f:3c: 22:08:d4:61:e9:43:be:b6:f1:0f:75:9e:7f:2c:b6:74:a1:fe: ec:7c:82:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdzhH7iY1UqlQB9/lSB1QPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwOTI2MTMwMTA0WhcNMjYwOTI3MTMwMTA0WjAzMTEwLwYDVQQD EyhiZDQzODVjMTRlMmNjNmZiMTNjMjViZDUzODk1OWFkNWQxMGMzNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNSkhZSH28btHDhZldicPLOj+4Js bo10Bm0KxDnzJDEF1TukToEIuZn5mXK1DSpMrioJ9XpKYYLIvhz5XpliVTIAup1d goIYxArfJ2rnXwPvHlJuR9w4iruWh28yOPal8RJ2mpMpKFO5hqqMutJkm/Y+vsmF hHnYeUu2puGYTuaD+MA/CXtdgwBONfuENzWNo48CRI+eZG5TmmyChctt+asLOZz0 MG6Ntci3A9nARzlgfvuxN9UHy0loleb23YOugGEl39Ubmnt4gkDTA86UMnWDamwf DZzv6UruKqOKK54GDcJKkwdiOwlrE5Ge7yq75K62+H9h9D0w7LOI7pbXNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1DhcFOLMb7E8Jb1TiVmtXRDDUyMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIFOZnYn psXGicn1rQjylYSelDS5zyyGzSwWl11+O1CZFXxEsbr37F1bt0NzdDfMJGsWRPL1 SasWx8eE2ytGsQcWo9Qguv67ICMhQVDal2TB60rZWNAHPJEPiHT8vPDNIcrWH1ZI yEJcmbgW2ZD+0WjeHEP48uUe5c5ZXktb72OBPsUSCQoJTAzzpsaACOTK9rrD3bbn Pn+Y8yuOyG0GBkWWgPtkHtXPJtmxzk+r2/Ic5UAQUzp7NBDxpn5QtHK1rvDFUuUj ww+pM4fqbiBO0vbASOsjgDwYjBYwgi4cfThhanOlLYu9wF88IgjUYelDvrbxD3We fyy2dKH+7HyCkg== -----END CERTIFICATE-----Generated at Sat Sep 26 18:34:30 2026 by rpki-client