$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: 6EioLfbTGcVlUXuIyDc7LskNMdROYBoWwgBvwHLduPo= Subject key identifier: F0:15:A7:73:B9:44:49:AD:C2:89:91:44:CB:66:D1:C1:54:02:91:7C Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019F91DAC911A4DD53C7D4F36A59BE95296B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1A0C Signing time: Fri 24 Jul 2026 02:01:02 +0000 Manifest this update: Fri 24 Jul 2026 02:01:02 +0000 Manifest next update: Sat 25 Jul 2026 02:01:02 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: NToHVP659fv9OCoJgbie5rcwssRNuXW5m+pIeAP/yLs=) 10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 14: jOWVYK7gkC0LkmTchBPKIshY1wg.roa (hash: GtMSCed+k6Ff9NDCC09DG2TdmxdSLzC8T5DFgatfys0=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:c9:11:a4:dd:53:c7:d4:f3:6a:59:be:95:29:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jul 24 02:01:02 2026 GMT Not After : Jul 25 02:01:02 2026 GMT Subject: CN=f015a773b94449adc2899144cb66d1c15402917c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:dd:9d:8f:98:54:2d:f8:3f:88:ec:2b:55: f3:84:81:65:cd:7c:f7:8f:dd:e4:38:90:d1:3f:48: 48:26:dc:19:7a:fe:c3:43:86:5e:0d:5c:61:95:77: 83:34:4f:10:7b:2c:83:43:75:33:38:75:5b:f9:4f: 7e:45:91:c1:ad:d8:9b:8e:ce:df:10:23:1f:ba:92: bb:cf:00:60:24:01:6f:c1:4e:aa:20:02:60:db:28: 53:b3:37:06:bc:fb:10:6e:0e:62:60:98:d6:5d:a2: 99:58:0a:df:51:79:69:ed:d8:9f:74:69:dc:a8:3f: f5:ef:2c:45:a6:7b:1c:b8:5e:80:57:0c:52:66:c6: d6:8f:7b:3d:ec:49:7a:29:e5:d7:00:01:19:eb:31: 17:91:ad:2e:ba:66:13:d0:62:4e:90:3d:c8:55:42: 31:9c:32:d2:a4:66:c9:31:b9:95:8d:88:13:b1:13: 02:f6:68:3f:0a:d6:4b:89:a6:b7:aa:43:7f:01:b3: 88:00:fa:ac:c2:03:09:33:e9:76:0f:d3:0b:3f:ee: ab:ce:b9:08:18:11:b2:f6:0f:b0:31:df:6e:22:2a: e4:7c:57:fe:3b:ca:a6:62:16:b8:22:4e:46:5d:85: c9:fd:2d:a4:73:ef:9c:7a:4d:cb:3a:a8:d7:e7:85: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:15:A7:73:B9:44:49:AD:C2:89:91:44:CB:66:D1:C1:54:02:91:7C X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d8:e2:86:97:b6:8e:64:a9:ac:ac:4a:07:6e:37:84:ac:82: 5f:ee:fe:3a:0a:6b:fb:ab:0e:b6:59:65:f9:60:1f:8e:e0:94: e7:2b:74:36:b4:d5:5f:9d:ff:c1:51:0a:1b:93:be:b4:c1:ec: bc:46:8f:fd:3e:da:68:00:5c:0f:64:f2:9e:85:97:b0:de:27: 32:09:bc:98:8d:6f:11:00:4e:f7:04:52:17:a8:f0:bb:45:5e: 7f:de:95:fd:04:3b:f9:a6:6a:70:08:84:9e:c6:5c:9c:8c:60: e4:33:2a:52:d5:58:d1:42:a4:02:80:e2:7b:14:79:de:ac:f5: 80:11:8c:c4:4a:6f:7c:04:04:29:91:df:b7:41:59:84:3a:c3: 3e:4f:ce:5c:92:3c:e0:03:48:84:53:99:ae:4a:98:5e:c6:3b: ea:4b:b0:a4:65:a2:cb:4e:31:6d:fe:b7:9e:60:85:2a:90:54: 8e:61:ee:dd:5d:de:83:8a:11:74:d2:5b:b4:3c:bf:8f:73:08: c3:7e:67:68:42:13:77:99:dd:53:da:bf:94:90:f0:0e:98:ad: 99:dd:f3:ad:07:b2:22:5f:9b:84:3e:d8:2d:47:63:25:9d:47: de:f2:af:79:03:30:66:ce:11:5d:14:bd:7d:20:8a:8c:8d:a3: 4a:ec:d6:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2skRpN1Tx9Tzalm+lSlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwNzI0MDIwMTAyWhcNMjYwNzI1MDIwMTAyWjAzMTEwLwYDVQQD EyhmMDE1YTc3M2I5NDQ0OWFkYzI4OTkxNDRjYjY2ZDFjMTU0MDI5MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NvdnY+YVC34P4jsK1XzhIFlzXz3 j93kOJDRP0hIJtwZev7DQ4ZeDVxhlXeDNE8QeyyDQ3UzOHVb+U9+RZHBrdibjs7f ECMfupK7zwBgJAFvwU6qIAJg2yhTszcGvPsQbg5iYJjWXaKZWArfUXlp7difdGnc qD/17yxFpnscuF6AVwxSZsbWj3s97El6KeXXAAEZ6zEXka0uumYT0GJOkD3IVUIx nDLSpGbJMbmVjYgTsRMC9mg/CtZLiaa3qkN/AbOIAPqswgMJM+l2D9MLP+6rzrkI GBGy9g+wMd9uIirkfFf+O8qmYha4Ik5GXYXJ/S2kc++cek3LOqjX54X0TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAVp3O5REmtwomRRMtm0cFUApF8MB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANjihpe2 jmSprKxKB243hKyCX+7+Ogpr+6sOtlll+WAfjuCU5yt0NrTVX53/wVEKG5O+tMHs vEaP/T7aaABcD2TynoWXsN4nMgm8mI1vEQBO9wRSF6jwu0Vef96V/QQ7+aZqcAiE nsZcnIxg5DMqUtVY0UKkAoDiexR53qz1gBGMxEpvfAQEKZHft0FZhDrDPk/OXJI8 4ANIhFOZrkqYXsY76kuwpGWiy04xbf63nmCFKpBUjmHu3V3eg4oRdNJbtDy/j3MI w35naEITd5ndU9q/lJDwDpitmd3zrQeyIl+bhD7YLUdjJZ1H3vKveQMwZs4RXRS9 fSCKjI2jSuzWAQ== -----END CERTIFICATE-----Generated at Fri Jul 24 08:24:50 2026 by rpki-client