$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: 2MetgfKhzDxDEapSEDctNIbmWC38dx0AgzC/JD0jIwk= Subject key identifier: 9C:84:97:09:F3:26:11:B2:41:4C:A3:F0:AE:E4:CE:68:77:ED:95:6F Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019E1CB462BCD4717680F2CA6632D9B25824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 1260 Signing time: Tue 12 May 2026 15:00:44 +0000 Manifest this update: Tue 12 May 2026 15:00:44 +0000 Manifest next update: Wed 13 May 2026 15:00:44 +0000 Files and hashes: 1: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: VHMyZ9v5dlltQDT0HNF5j3ju1syq82yYmobk2OFydDc=) 2: OqFYhVg1Efiv3mat7wl-y0IWh0M.roa (hash: oKWk1mz8YCchnuM+fj+VOQNacesKLKH9rOD1QPPd9Pk=) 3: SMSgelubJSOLBVZ-smCvqnI-Ohw.roa (hash: 8Ebh+rjESi3nt5+4WFx9Ng5uGDoI/GGkzTBScBfsOR4=) 4: SS-XwihKQ_Jut_u0kB0C0jTBC6g.roa (hash: rPpkOjYvnM4DCXuhdrHJgLwjmOB3eXAXFBoPZ/CIvH8=) 5: Ug9ynSBXJvbacZUCymyFegFwsdc.roa (hash: gneEDKy7z65cw82gMUszrjpGrKuBIM6nLytArcluJiI=) 6: btG2nJT4iaqSf2ka_3HJpZV-U3w.roa (hash: VP+IxLeiBTwTjl4LN6YqPGbYd8Q1JdjDhqR+iKRO1YY=) 7: cgUyX51ni1S68djJwifB7g8e6Kw.roa (hash: 3dVMqfRP6yRNJLYCw4N0iFLQvnH08Iy8aWjLtSTCtyk=) 8: haTrs_5tpUyACklPcJ9fH1LslHE.roa (hash: PZyuQBgGj0U34RVF0awm9EujFdbexSECm7KqphEpSv8=) 9: iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa (hash: btcDN1EO2IkvpjFNTIzzJGr341Fzj5AkaE+wKJ7Jt0o=) 10: uzdBbBS3T-chT93z9aFklFPXceQ.roa (hash: 2HStjG1X7LnSDu/XK+LCJICQndfda0I58UATYz414mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:62:bc:d4:71:76:80:f2:ca:66:32:d9:b2:58:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: May 12 15:00:44 2026 GMT Not After : May 13 15:00:44 2026 GMT Subject: CN=9c849709f32611b2414ca3f0aee4ce6877ed956f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:31:4e:fc:76:ab:c5:a0:23:21:12:96:9d: e5:e8:88:04:94:94:b6:da:4f:15:90:f3:72:4a:41: a3:9d:d1:7b:01:4e:1d:c6:a3:b6:f6:21:04:92:20: d1:0a:ff:61:61:05:0a:6e:61:a9:09:17:19:41:7d: 16:dc:f0:e2:f1:d5:b5:1e:9b:ed:fd:63:3d:61:3a: 3c:00:f8:15:99:ad:95:65:cf:13:52:7d:af:e2:10: be:6a:15:29:1e:44:96:b6:e7:d1:d1:3e:3a:d2:56: 12:78:21:fb:56:ed:49:fa:33:5d:e4:c9:49:15:6e: ca:90:f9:38:77:e5:6e:02:68:f8:3e:82:97:0f:38: 8d:b7:a7:0b:27:8c:65:d9:f2:7a:0e:20:91:98:af: 94:7f:2e:10:c2:fb:57:a7:3b:0b:7b:c9:0b:bb:20: bc:27:7e:ec:5b:43:35:47:b3:ee:f9:c0:a7:a2:4b: 18:14:6d:f0:62:3a:79:9f:51:a5:86:3f:d7:f1:11: 99:ff:5b:b8:52:59:ce:9c:be:ce:34:92:bd:06:34: af:b7:cf:14:e7:6e:df:e7:31:1e:54:16:2d:52:88: db:83:a1:51:bf:16:98:4d:c7:be:21:c3:6a:08:96: 0c:65:cf:c1:60:66:c8:73:b1:89:ff:6d:19:65:21: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:84:97:09:F3:26:11:B2:41:4C:A3:F0:AE:E4:CE:68:77:ED:95:6F X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:82:27:98:e5:82:ec:f5:12:f8:c0:75:45:b8:a0:cc:4f:21: e7:bd:e4:87:fb:4b:2e:f3:6a:02:ad:41:21:7e:c6:27:ad:fe: 7d:bf:9f:a2:46:7c:f3:70:77:d3:9f:18:83:a7:fb:55:0b:31: dc:44:1a:ff:2c:6b:ec:d8:e1:7a:a0:ed:3b:af:8c:c6:cd:b4: fb:ca:72:fb:c4:89:d7:cd:e5:bc:68:f8:90:db:67:82:f5:de: ea:43:ea:db:a6:24:36:63:90:29:4e:b2:fe:ab:24:4d:6b:4f: 0a:43:5d:53:05:fc:e2:5d:7a:7e:8d:57:81:59:ca:b7:a8:cf: a1:f9:80:ad:9e:86:1e:3b:c4:c7:fa:d6:1a:e5:1b:b7:0d:8d: b7:b4:1a:c0:c7:65:e8:b4:64:dc:f9:d6:3c:cc:ea:92:f3:48: 6d:b8:da:96:4f:63:ed:e4:44:6f:e9:78:16:49:61:3c:66:ec: 0b:7c:8d:02:ed:0a:6c:7e:78:2a:f1:70:15:ca:f9:a4:1b:d6: a0:95:0d:b7:2d:a1:f3:47:14:b8:b5:ea:c4:31:1d:1f:65:7f: 9b:aa:ba:bd:26:2a:87:95:31:6b:dd:cd:5e:85:47:f0:7f:44: 96:06:6d:38:8b:f3:b7:e8:ac:9b:e9:73:dd:6a:ba:3a:ed:e7: c0:72:e3:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctGK81HF2gPLKZjLZslgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjYwNTEyMTUwMDQ0WhcNMjYwNTEzMTUwMDQ0WjAzMTEwLwYDVQQD Eyg5Yzg0OTcwOWYzMjYxMWIyNDE0Y2EzZjBhZWU0Y2U2ODc3ZWQ5NTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL0xTvx2q8WgIyESlp3l6IgElJS2 2k8VkPNySkGjndF7AU4dxqO29iEEkiDRCv9hYQUKbmGpCRcZQX0W3PDi8dW1Hpvt /WM9YTo8APgVma2VZc8TUn2v4hC+ahUpHkSWtufR0T460lYSeCH7Vu1J+jNd5MlJ FW7KkPk4d+VuAmj4PoKXDziNt6cLJ4xl2fJ6DiCRmK+Ufy4QwvtXpzsLe8kLuyC8 J37sW0M1R7Pu+cCnoksYFG3wYjp5n1Glhj/X8RGZ/1u4UlnOnL7ONJK9BjSvt88U 527f5zEeVBYtUojbg6FRvxaYTce+IcNqCJYMZc/BYGbIc7GJ/20ZZSHjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyElwnzJhGyQUyj8K7kzmh37ZVvMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoInmOWC 7PUS+MB1RbigzE8h573kh/tLLvNqAq1BIX7GJ63+fb+fokZ883B3058Yg6f7VQsx 3EQa/yxr7NjheqDtO6+Mxs20+8py+8SJ183lvGj4kNtngvXe6kPq26YkNmOQKU6y /qskTWtPCkNdUwX84l16fo1XgVnKt6jPofmArZ6GHjvEx/rWGuUbtw2Nt7QawMdl 6LRk3PnWPMzqkvNIbbjalk9j7eREb+l4FklhPGbsC3yNAu0KbH54KvFwFcr5pBvW oJUNty2h80cUuLXqxDEdH2V/m6q6vSYqh5Uxa93NXoVH8H9ElgZtOIvzt+ism+lz 3Wq6Ou3nwHLj/g== -----END CERTIFICATE-----Generated at Wed May 13 00:57:32 2026 by rpki-client