$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: gLZaMihZiWp8/R+zlRkrsmGcFFchaUspEm8e5UaRB7k= Subject key identifier: 70:23:A0:BA:4E:B0:F5:ED:B8:E1:4D:8C:32:0E:C5:4A:C3:63:95:0E Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 01A0D42617B91C0AA4279877BD3F0AE5371D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1AB5 Signing time: Thu 24 Sep 2026 16:01:01 +0000 Manifest this update: Thu 24 Sep 2026 16:01:01 +0000 Manifest next update: Fri 25 Sep 2026 16:01:01 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: wckujNd0Q2sNXYGOo0U8JALipcso2jEYCpPe8s7UcaI=) 10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 14: bIT3IKoer-jZOwqexvz80un01Ag.roa (hash: nkHH/tm6q2tYfS61XXMRcKDcBRWbEe3yQxisNF7ABDo=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa (hash: 7N9kbNVvBQfZIqrrEUMiDoe5nVwGSES4cx8TzWr1eCA=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:17:b9:1c:0a:a4:27:98:77:bd:3f:0a:e5:37:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Sep 24 16:01:01 2026 GMT Not After : Sep 25 16:01:01 2026 GMT Subject: CN=7023a0ba4eb0f5edb8e14d8c320ec54ac363950e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:39:17:6b:1e:aa:ac:c6:fb:47:52:02:45: b4:fb:a2:38:da:b3:01:47:a5:61:b0:2e:87:1f:f2: 06:78:f7:91:f8:4e:4c:71:6c:07:51:37:fb:4b:24: df:db:5f:5a:33:75:ba:c6:38:7f:b5:d2:34:e6:1f: 52:b7:ef:99:4d:32:a0:1e:9d:bf:10:94:f3:7e:0d: 8e:e1:19:b3:a6:d0:91:c1:79:e4:42:08:e8:76:f4: 40:f4:0e:2e:e7:3a:15:da:af:0e:30:32:95:16:ad: 8e:20:26:de:20:6e:d2:6e:da:e4:07:6d:ff:29:7e: ee:a0:03:7e:8f:b7:68:0b:51:5a:09:3a:d8:83:43: 2b:b9:dd:a1:4d:fe:3c:c7:8f:75:54:23:ed:e1:6e: 8d:c6:0a:cb:68:80:91:29:8c:9c:3a:a9:2a:c2:b0: d6:23:8e:fc:15:2c:dc:33:3d:fb:0b:32:9f:5e:1d: 1f:44:b5:d8:d6:e6:e5:2b:37:02:2b:f7:5a:89:52: ef:db:7f:a1:d7:f0:e7:d3:60:61:f4:a8:e2:e4:f7: 2e:63:05:d0:62:f1:24:df:69:37:dd:e8:a9:9d:ec: c5:a4:82:2b:64:a7:f1:5b:f8:3b:b6:8f:5f:4f:a9: 9b:43:c0:32:2e:e7:e7:52:f7:c8:cc:74:e5:49:fa: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:A0:BA:4E:B0:F5:ED:B8:E1:4D:8C:32:0E:C5:4A:C3:63:95:0E X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4c:03:bd:44:e0:ec:ab:3e:6b:3e:75:b6:25:08:77:c1:4e: b5:db:f4:11:f1:b9:93:d2:70:91:92:eb:5e:64:39:3c:7b:8a: 78:74:7c:cb:87:ce:c5:b7:91:98:6e:78:ab:90:3b:9f:d8:06: e1:7f:9e:72:e8:7c:97:a5:38:d4:c8:7c:6e:98:11:cc:30:04: ff:80:30:27:71:fc:fb:20:e4:b7:80:17:ba:fe:f5:b3:50:aa: ca:07:d0:25:7f:2f:3e:3e:63:1f:d8:2d:a7:bb:89:15:6b:ba: 9e:30:b5:52:66:79:8d:1f:7a:5f:e4:14:27:59:bd:7a:f3:7b: 06:34:8c:92:c6:52:4d:da:50:bd:ee:c2:37:82:f9:30:4c:c4: 8d:65:c1:01:84:9e:80:15:97:39:49:0c:1b:16:f1:75:f5:42: 7b:30:fd:f7:1b:60:26:09:8e:b6:5e:be:f2:c1:55:fd:88:10: 38:a6:93:0b:5d:01:ed:3d:bf:d1:7a:29:be:e3:aa:97:3b:c6: 3b:9e:8c:a4:e6:1c:51:e7:7f:b6:73:eb:5f:26:76:e3:dd:91: d3:5d:8c:01:99:3b:d5:89:17:20:4b:10:1e:77:3c:f4:26:a4: 8d:40:c7:ba:6f:35:e2:dd:8d:a7:f3:46:97:d7:9c:65:c9:e4: f7:10:41:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJhe5HAqkJ5h3vT8K5TcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwOTI0MTYwMTAxWhcNMjYwOTI1MTYwMTAxWjAzMTEwLwYDVQQD Eyg3MDIzYTBiYTRlYjBmNWVkYjhlMTRkOGMzMjBlYzU0YWMzNjM5NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzc5F2seqqzG+0dSAkW0+6I42rMB R6VhsC6HH/IGePeR+E5McWwHUTf7SyTf219aM3W6xjh/tdI05h9St++ZTTKgHp2/ EJTzfg2O4RmzptCRwXnkQgjodvRA9A4u5zoV2q8OMDKVFq2OICbeIG7SbtrkB23/ KX7uoAN+j7doC1FaCTrYg0Mrud2hTf48x491VCPt4W6NxgrLaICRKYycOqkqwrDW I478FSzcMz37CzKfXh0fRLXY1ublKzcCK/daiVLv23+h1/Dn02Bh9Kji5PcuYwXQ YvEk32k33eipnezFpIIrZKfxW/g7to9fT6mbQ8AyLufnUvfIzHTlSfqYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAjoLpOsPXtuOFNjDIOxUrDY5UOMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkwDvUTg 7Ks+az51tiUId8FOtdv0EfG5k9JwkZLrXmQ5PHuKeHR8y4fOxbeRmG54q5A7n9gG 4X+ecuh8l6U41Mh8bpgRzDAE/4AwJ3H8+yDkt4AXuv71s1CqygfQJX8vPj5jH9gt p7uJFWu6njC1UmZ5jR96X+QUJ1m9evN7BjSMksZSTdpQve7CN4L5MEzEjWXBAYSe gBWXOUkMGxbxdfVCezD99xtgJgmOtl6+8sFV/YgQOKaTC10B7T2/0XopvuOqlzvG O56MpOYcUed/tnPrXyZ2492R012MAZk71YkXIEsQHnc89CakjUDHum814t2Np/NG l9ecZcnk9xBBYA== -----END CERTIFICATE-----Generated at Thu Sep 24 23:03:25 2026 by rpki-client