$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: kjUtHCAhg+u1u+sLfGevdPMzp1LgEEd8ul9/KLfyopo= Subject key identifier: 89:A3:C7:CE:D9:AB:1E:85:55:FB:BC:38:7D:DA:BA:1A:ED:42:6B:32 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019F916D9622F64A1D663CF9DBA6CEC567FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 16FD Signing time: Fri 24 Jul 2026 00:01:45 +0000 Manifest this update: Fri 24 Jul 2026 00:01:45 +0000 Manifest next update: Sat 25 Jul 2026 00:01:45 +0000 Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=) 2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=) 3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=) 4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=) 5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=) 6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=) 7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=) 8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: qFbATs2N+a1wyrzBLIEhl1vWoYOODsFpNaqr5Ay0ZTE=) 9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=) 10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=) 11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=) 12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=) 13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:6d:96:22:f6:4a:1d:66:3c:f9:db:a6:ce:c5:67:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Jul 24 00:01:45 2026 GMT Not After : Jul 25 00:01:45 2026 GMT Subject: CN=89a3c7ced9ab1e8555fbbc387ddaba1aed426b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:54:36:c5:ce:39:66:4a:19:60:84:77:13: 0e:4d:a5:75:d8:a9:15:7d:be:24:89:ec:71:d0:1d: 39:08:0f:11:61:e4:9c:3c:24:35:49:d4:59:6b:38: 58:66:9d:09:e7:27:ee:49:c9:21:73:4e:5a:2a:ba: 8f:e4:4f:1e:3a:a0:77:2b:cd:f2:73:88:ec:9d:8a: 27:40:fd:cd:20:34:2e:08:73:e0:37:06:53:70:4a: e1:65:a4:6c:24:40:4f:7e:40:bc:24:ff:fb:b6:af: b1:5b:d4:a1:55:b0:61:50:73:95:19:06:6f:86:b1: 1f:88:d0:69:66:c4:d1:5b:2d:28:78:fa:6e:9f:bd: f6:81:49:55:e3:ff:66:af:2a:89:24:a6:71:32:fd: 57:f7:2c:5e:da:dd:31:7a:86:d9:fe:f7:e2:a1:33: 6d:fb:61:80:3e:aa:ba:9f:ee:eb:cf:58:46:fc:ee: 99:ce:02:e6:1f:73:b9:b2:b8:c3:1b:2f:ac:27:13: 02:cf:71:3e:0d:d6:7b:15:98:8e:05:b2:20:4c:d8: 95:35:4d:1e:6b:58:fe:ed:5f:f1:59:02:50:60:38: c7:b9:3f:e1:cb:a9:fb:82:7b:89:05:da:ca:dd:a2: 98:97:2d:d9:34:5b:64:c6:70:07:7c:95:2c:ad:d3: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:C7:CE:D9:AB:1E:85:55:FB:BC:38:7D:DA:BA:1A:ED:42:6B:32 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:71:2c:08:c1:4b:37:e0:47:f6:db:19:be:7d:33:5f:d2:cc: 89:7c:e9:6a:8a:4a:80:d8:38:10:e8:4c:9e:08:33:89:90:9f: 05:aa:e4:df:0a:0c:35:4a:00:53:1e:d3:b7:95:bd:85:ca:35: 07:17:c8:cf:3b:16:8e:ec:ae:e8:25:55:68:df:88:61:cb:30: 9e:2f:62:04:e8:96:ad:4b:ae:9d:4c:7f:1d:f1:96:ca:73:00: 1d:1a:b0:a8:b0:b1:ba:82:ab:fe:9f:e4:1d:47:dc:a3:7c:39: b1:9d:46:5a:5a:bf:ad:c1:dc:18:bc:38:f3:56:03:fd:74:16: 63:a1:11:7c:51:61:4a:bb:47:d9:c3:e8:33:ee:5e:17:06:8e: 3a:7c:32:63:31:f8:ad:d7:af:e3:24:f0:bd:50:74:10:bb:79: 28:ed:d6:65:86:a6:82:a6:67:9f:15:36:b5:32:c7:39:77:ed: 14:98:91:dc:2c:ea:8c:19:86:a4:2a:0e:ae:a8:dd:17:1f:6c: 92:9e:f8:6a:3e:42:d2:db:29:01:cb:ad:af:34:e7:24:61:f8: 94:92:80:ba:3b:1a:51:aa:b5:14:49:c7:02:55:b4:70:c7:69: dd:c8:1c:db:9a:dd:97:38:43:c9:20:25:29:bc:2f:93:d7:3b: d3:a0:f1:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RbZYi9kodZjz526bOxWf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjYwNzI0MDAwMTQ1WhcNMjYwNzI1MDAwMTQ1WjAzMTEwLwYDVQQD Eyg4OWEzYzdjZWQ5YWIxZTg1NTVmYmJjMzg3ZGRhYmExYWVkNDI2YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxUNsXOOWZKGWCEdxMOTaV12KkV fb4kiexx0B05CA8RYeScPCQ1SdRZazhYZp0J5yfuSckhc05aKrqP5E8eOqB3K83y c4jsnYonQP3NIDQuCHPgNwZTcErhZaRsJEBPfkC8JP/7tq+xW9ShVbBhUHOVGQZv hrEfiNBpZsTRWy0oePpun732gUlV4/9mryqJJKZxMv1X9yxe2t0xeobZ/vfioTNt +2GAPqq6n+7rz1hG/O6ZzgLmH3O5srjDGy+sJxMCz3E+DdZ7FZiOBbIgTNiVNU0e a1j+7V/xWQJQYDjHuT/hy6n7gnuJBdrK3aKYly3ZNFtkxnAHfJUsrdPlWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImjx87Zqx6FVfu8OH3auhrtQmsyMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXEsCMFL N+BH9tsZvn0zX9LMiXzpaopKgNg4EOhMnggziZCfBark3woMNUoAUx7Tt5W9hco1 BxfIzzsWjuyu6CVVaN+IYcswni9iBOiWrUuunUx/HfGWynMAHRqwqLCxuoKr/p/k HUfco3w5sZ1GWlq/rcHcGLw481YD/XQWY6ERfFFhSrtH2cPoM+5eFwaOOnwyYzH4 rdev4yTwvVB0ELt5KO3WZYamgqZnnxU2tTLHOXftFJiR3CzqjBmGpCoOrqjdFx9s kp74aj5C0tspAcutrzTnJGH4lJKAujsaUaq1FEnHAlW0cMdp3cgc25rdlzhDySAl Kbwvk9c706DxPg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:46:09 2026 by rpki-client