$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: dDHRnHYEPEuOxr05DCxLOEPRp0lG+PZRWmXtU94RzMA= Subject key identifier: 0D:8A:26:58:3B:78:11:18:A5:0C:DC:9C:A1:1D:CB:EE:D8:28:E2:CA Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019D26CD60DCA5240BCFCAF0A68CBD1DEC8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 18BB Signing time: Wed 25 Mar 2026 21:01:27 +0000 Manifest this update: Wed 25 Mar 2026 21:01:27 +0000 Manifest next update: Thu 26 Mar 2026 21:01:27 +0000 Files and hashes: 1: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (hash: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk=) 2: 42PKmGxLZWltjo2RjF8-O2uhH1I.roa (hash: NUqXlQ+o+ZJwF4uY9fuVeTvOTArxxOzENBFKqJ5J5nw=) 3: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (hash: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek=) 4: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (hash: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg=) 5: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (hash: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0=) 6: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (hash: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs=) 7: Z_Vtx6hPhEla7QjEw0Ge3-aDBkQ.roa (hash: R5X3hIMzkskVUzfz9i4HLODFSm5lw5Mm8yNPeyRwVtU=) 8: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (hash: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE=) 9: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (hash: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE=) 10: nk_BFnPjxZUVaqPDlNJQf6RBw4A.roa (hash: vVJ+n/DVIwr6d39NjXvbQOW6EJnb9U7HwwIO7E8CVpo=) 11: pJ0EPd3uAqeCJPQ0mMuRQr2bM6Q.roa (hash: kpeec4UubBGPN76k4D6h51o0xG2zwxwJUcai7RZosTI=) 12: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (hash: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg=) 13: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (hash: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k=) 14: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (hash: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo=) 15: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: njyEM1rs6ruFQ3fVt38plK11ZxyGPtAsuqQo3CrIrNc=) 16: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (hash: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:60:dc:a5:24:0b:cf:ca:f0:a6:8c:bd:1d:ec:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Mar 25 21:01:27 2026 GMT Not After : Mar 26 21:01:27 2026 GMT Subject: CN=0d8a26583b781118a50cdc9ca11dcbeed828e2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:fa:4a:cf:65:0a:e5:17:09:39:30:a7:35: 64:02:0e:d3:ab:0b:ce:c5:1f:df:35:3f:6f:63:ae: aa:08:40:b4:73:9f:8f:02:e0:2f:86:25:0b:4c:50: be:1c:4b:52:f7:af:54:86:a8:3d:5b:91:f4:a5:a6: 41:fe:cb:91:35:d5:64:93:04:0a:7f:3e:e0:e9:37: e6:92:f8:be:15:dc:80:07:a9:92:48:4f:9b:a4:f8: 9e:bf:95:e4:7e:c7:ce:9e:59:2b:ba:0b:f8:7e:21: 53:48:98:b8:54:0f:2f:6b:d5:b5:ef:c7:15:d5:de: cb:40:c0:c9:9b:a5:ed:ba:92:76:14:ae:d8:87:01: de:f3:5b:3d:3f:0c:68:3a:df:f8:39:86:21:a8:2d: 74:97:2b:c4:d6:0a:d0:60:40:ba:fb:a3:3e:bd:ba: 20:2e:50:b1:3a:04:c8:a8:0b:4e:0a:07:45:f1:3f: f0:97:02:18:be:a1:bf:02:66:84:90:9d:95:75:3a: 8d:28:fc:b1:9f:02:4e:b8:57:23:bb:28:69:96:c6: 29:44:2d:e9:d6:ca:36:db:f2:75:88:bf:7d:7e:01: 95:8b:19:1b:60:f3:8c:a4:61:31:6e:63:1f:88:97: 52:87:c8:57:fe:e5:9f:c2:13:7c:52:f5:c0:2d:0c: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8A:26:58:3B:78:11:18:A5:0C:DC:9C:A1:1D:CB:EE:D8:28:E2:CA X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:c8:8d:e6:3e:b1:89:e3:e8:5f:67:3c:87:88:9f:1d:35: 76:7b:3f:7d:82:57:1b:74:eb:60:34:ee:0f:32:f5:29:0f:4e: e9:7e:c7:7c:d6:59:15:96:a0:af:f0:4a:4c:9f:2a:b4:61:4e: 0e:46:99:2a:f9:7b:14:a6:88:28:25:c3:28:d4:14:75:15:d3: e1:d2:04:6c:a6:2f:26:48:8f:e1:11:b1:a9:75:dd:b9:d4:27: 59:7c:3e:09:72:f7:42:51:0e:c9:b0:50:a8:96:b0:e6:4b:2f: e6:ec:4b:40:5d:00:b5:ee:fe:cc:c6:32:ec:f0:c3:15:dd:f4: 50:39:b9:bf:a3:e2:5b:13:63:86:94:1a:6a:46:84:23:4a:bd: 74:fa:bc:44:cc:e0:14:d2:c0:ba:68:b1:6c:37:22:c1:55:dc: 30:2e:8d:41:aa:1c:8a:74:5e:35:b4:3d:96:16:9b:04:b7:0b: 8d:a1:18:4d:57:d5:09:af:33:63:5a:e0:7a:1f:9b:d0:81:06: 66:e4:69:89:bc:e4:f7:78:f2:91:cb:b3:a5:ff:f1:24:24:f3: 94:a8:2a:f4:b3:e2:8d:dd:a0:36:9b:98:8f:e5:1d:d0:38:f6: a0:80:fe:57:d1:33:29:9b:6e:14:18:d2:fe:12:34:45:6c:8c: 91:9a:53:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzWDcpSQLz8rwpoy9HeyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMzI1MjEwMTI3WhcNMjYwMzI2MjEwMTI3WjAzMTEwLwYDVQQD EygwZDhhMjY1ODNiNzgxMTE4YTUwY2RjOWNhMTFkY2JlZWQ4MjhlMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTb6Ss9lCuUXCTkwpzVkAg7TqwvO xR/fNT9vY66qCEC0c5+PAuAvhiULTFC+HEtS969Uhqg9W5H0paZB/suRNdVkkwQK fz7g6Tfmkvi+FdyAB6mSSE+bpPiev5XkfsfOnlkrugv4fiFTSJi4VA8va9W178cV 1d7LQMDJm6XtupJ2FK7YhwHe81s9PwxoOt/4OYYhqC10lyvE1grQYEC6+6M+vbog LlCxOgTIqAtOCgdF8T/wlwIYvqG/AmaEkJ2VdTqNKPyxnwJOuFcjuyhplsYpRC3p 1so22/J1iL99fgGVixkbYPOMpGExbmMfiJdSh8hX/uWfwhN8UvXALQz0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2KJlg7eBEYpQzcnKEdy+7YKOLKMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx/IjeY+ sYnj6F9nPIeInx01dns/fYJXG3TrYDTuDzL1KQ9O6X7HfNZZFZagr/BKTJ8qtGFO DkaZKvl7FKaIKCXDKNQUdRXT4dIEbKYvJkiP4RGxqXXdudQnWXw+CXL3QlEOybBQ qJaw5ksv5uxLQF0Ate7+zMYy7PDDFd30UDm5v6PiWxNjhpQaakaEI0q9dPq8RMzg FNLAumixbDciwVXcMC6NQaocinReNbQ9lhabBLcLjaEYTVfVCa8zY1rgeh+b0IEG ZuRpibzk93jykcuzpf/xJCTzlKgq9LPijd2gNpuYj+Ud0Dj2oID+V9EzKZtuFBjS /hI0RWyMkZpTvw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:42 2026 by rpki-client