$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: txZ8AcAyZJCaYiDyiCbcUVrwYsacL50xuztKKiW4USE= Subject key identifier: 80:1F:73:08:8A:C1:81:EE:23:83:AC:82:DA:BF:B1:20:86:6A:B8:88 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019D2816FA4C2E7062B12A3AFE189F578C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 18C3 Signing time: Thu 26 Mar 2026 03:01:27 +0000 Manifest this update: Thu 26 Mar 2026 03:01:27 +0000 Manifest next update: Fri 27 Mar 2026 03:01:27 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: J7rQibY3a8-MeIzjHxJ_un-Q56k.roa (hash: KfYp7j0f60mC69NVOXIfMLH4hMu/T36lhK6azRv6oDs=) 6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: vhu0NUeGA4CSsu1hZhHPDZo498E/riEAQIY0TRaCmcc=) 11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:fa:4c:2e:70:62:b1:2a:3a:fe:18:9f:57:8c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Mar 26 03:01:27 2026 GMT Not After : Mar 27 03:01:27 2026 GMT Subject: CN=801f73088ac181ee2383ac82dabfb120866ab888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:01:23:6f:c1:80:29:14:32:a0:dd:ba:54: 01:4d:d5:4e:df:0d:61:ef:3a:56:5d:ce:c1:fa:13: 81:8a:6d:44:da:53:4b:36:05:d2:f8:a7:ab:f1:5e: fc:c4:02:e9:17:42:fb:3e:bf:6f:7c:3d:8a:92:0d: 29:42:c6:53:ad:6a:76:4a:7d:93:fc:22:a5:b3:ee: fc:91:1c:91:d2:1f:7b:84:3f:20:93:05:fd:d3:2b: c5:79:22:b5:cf:45:8f:03:3f:ae:e6:f2:e9:33:c4: 4b:6e:f7:d2:ae:04:3f:48:a1:e3:06:cb:cf:cf:46: 9c:af:aa:de:ae:0d:34:97:ca:b9:d5:b6:1a:18:a2: d2:c9:01:6b:9f:e4:ad:61:5d:74:6a:0b:92:c9:fd: 87:f8:6a:b2:01:7f:8c:a4:08:c6:7c:3c:f9:d9:0d: 54:8f:93:61:22:7a:da:33:c9:66:fc:d6:1d:b5:11: c4:9e:73:f9:1e:51:7b:8e:7b:b5:11:bf:ea:f3:8b: a9:ab:83:43:d5:ea:28:b8:06:54:24:12:44:20:f7: f8:57:71:65:6c:a2:12:27:d6:10:ec:df:cd:76:0e: 08:78:aa:10:86:e0:c5:2a:f9:f5:c9:27:e0:0f:4b: 02:9d:10:ea:75:70:75:03:28:c3:a0:08:b3:6d:77: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1F:73:08:8A:C1:81:EE:23:83:AC:82:DA:BF:B1:20:86:6A:B8:88 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4d:9e:77:de:8a:e7:0d:a8:00:1a:1e:04:ed:14:a7:48:02: dd:b1:15:cc:42:ef:1c:c2:53:4e:48:fe:b7:03:7e:fd:62:30: 3f:48:59:93:f1:0b:78:3f:a2:5c:48:02:fe:01:c3:be:c7:83: ea:27:74:05:ce:60:e9:9c:92:df:21:f9:83:52:02:96:08:5f: 60:28:cf:b4:dd:79:44:e1:94:dc:05:f6:10:74:b7:f2:ce:e0: 03:31:ee:37:ba:47:49:7b:78:38:df:c9:31:e4:a8:62:34:33: d1:cb:19:40:58:7d:91:41:88:53:0c:d2:54:fa:86:37:c2:de: 9a:ce:18:c0:a3:05:26:41:9e:78:c4:a9:da:03:74:cc:57:30: e6:21:66:9e:60:b4:ba:e0:e3:43:bb:3d:87:6b:ae:4e:ab:54: b5:13:7e:3d:f2:61:4b:25:c3:3d:93:19:2b:15:42:ba:2c:a0: 1f:09:63:c2:19:4c:ec:d1:a1:b7:17:e2:49:fc:de:91:ef:76: de:16:61:c5:e3:02:8c:b9:cc:a2:e7:d7:98:76:c3:49:b8:2d: 89:59:45:f4:e7:6e:c1:fb:a1:5a:94:a4:71:3a:96:63:89:ac: a5:57:f8:8a:1a:85:b6:9b:d3:63:2b:35:d1:dc:47:82:1e:0a: b6:58:4c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFvpMLnBisSo6/hifV4xJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD Eyg4MDFmNzMwODhhYzE4MWVlMjM4M2FjODJkYWJmYjEyMDg2NmFiODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiUBI2/BgCkUMqDdulQBTdVO3w1h 7zpWXc7B+hOBim1E2lNLNgXS+Ker8V78xALpF0L7Pr9vfD2Kkg0pQsZTrWp2Sn2T /CKls+78kRyR0h97hD8gkwX90yvFeSK1z0WPAz+u5vLpM8RLbvfSrgQ/SKHjBsvP z0acr6rerg00l8q51bYaGKLSyQFrn+StYV10aguSyf2H+GqyAX+MpAjGfDz52Q1U j5NhInraM8lm/NYdtRHEnnP5HlF7jnu1Eb/q84upq4ND1eoouAZUJBJEIPf4V3Fl bKISJ9YQ7N/Ndg4IeKoQhuDFKvn1ySfgD0sCnRDqdXB1AyjDoAizbXe4fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAfcwiKwYHuI4Osgtq/sSCGariIMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM02ed96K 5w2oABoeBO0Up0gC3bEVzELvHMJTTkj+twN+/WIwP0hZk/ELeD+iXEgC/gHDvseD 6id0Bc5g6ZyS3yH5g1IClghfYCjPtN15ROGU3AX2EHS38s7gAzHuN7pHSXt4ON/J MeSoYjQz0csZQFh9kUGIUwzSVPqGN8Lems4YwKMFJkGeeMSp2gN0zFcw5iFmnmC0 uuDjQ7s9h2uuTqtUtRN+PfJhSyXDPZMZKxVCuiygHwljwhlM7NGhtxfiSfzeke92 3hZhxeMCjLnMoufXmHbDSbgtiVlF9OduwfuhWpSkcTqWY4mspVf4ihqFtpvTYys1 0dxHgh4KtlhM5g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:13 2026 by rpki-client