$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft File: WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json) Hash identifier: gzTQfw5wLbudcn1DMo0VEuJoT2cRFSqWsXhyVQtOpQU= Subject key identifier: 5A:C6:16:24:C1:68:17:53:3B:A6:73:30:B8:27:D3:66:D2:68:10:F0 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 01A0D0EE05BF82210C350C681D5F70D1403A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft Manifest number: 0B2A Signing time: Thu 24 Sep 2026 01:00:54 +0000 Manifest this update: Thu 24 Sep 2026 01:00:54 +0000 Manifest next update: Fri 25 Sep 2026 01:00:54 +0000 Files and hashes: 1: 0dzMjSKpRUY-44bFET_xjKmLZqk.roa (hash: /gL+2fvCjluGjnsuF06+e5Fr7aGlLRVjmYErYPuCpqc=) 2: 4CeETaDbMmlemWxGvvx0_WuaR08.roa (hash: Ihn6EFoGwfYZmijHSSAZ4/aOa56nJlt5ht+N8FXjtEs=) 3: 8ojHQg-5gn_Du7oteDU3y4gT3eo.roa (hash: i3m9CQuoZX6ywBrI0Ffbx9GRfJOG6PI2xg9iGzfKe/A=) 4: 9kaVTL-pQ2rDV2PSl0bgS_1vqrU.roa (hash: EVjfUOUimz3ybXSCJhjw0hH765mxqtHAnIuPVQGkWyE=) 5: K6psmvZj1dJm7rliy5tYSDkTGdI.roa (hash: ZUvNgSUKEBT7X30ekbcvLFsOKUeEximzhtI2xJnlNKI=) 6: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=) 7: Q3cm2W0FVitcQ58MNaFESLwNN4Q.roa (hash: snhjG0znQuL325FYjOGMzM707T/q+eR3KKmJ5znNIww=) 8: VrZ9rG6buBYTfiaRnNlU6n31R3c.roa (hash: 7/go8CgCRjYxli0+HMN3QK5vnEPd4uxzc3aK0gMIrN8=) 9: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: LRaWGyedPNMmgvhafbZqT7GfR5C3n/L6cduPWzoR1Rs=) 10: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=) 11: y1Md-fjS1Mk9fN43V73-ZmrWHYI.roa (hash: YXs0OmfBDY7UMYspxzzwXIRX/OhefbkSgpo07DTddKk=) 12: ypY7s36zWHILvulq23bGKuZ2o9c.roa (hash: C7Mvcwm1E9gnD0gQMleTivJ/u9MHNliPR2TgXm18Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:ee:05:bf:82:21:0c:35:0c:68:1d:5f:70:d1:40:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Sep 24 01:00:54 2026 GMT Not After : Sep 25 01:00:54 2026 GMT Subject: CN=5ac61624c16817533ba67330b827d366d26810f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:83:e0:28:ec:e4:70:a3:07:50:01:0c:98: 95:04:f6:f5:a1:14:74:ff:0c:cd:5d:4a:ed:6f:7d: ac:59:17:a4:c3:96:5d:60:6a:7d:d2:3f:f3:66:8c: 1c:d8:91:35:09:64:ee:36:a5:1d:da:d3:c3:33:5b: 99:4e:08:e3:df:cd:14:aa:25:3f:3a:7e:0a:58:a3: 2d:83:be:a2:a5:50:9d:b1:82:6d:a3:40:0d:66:3f: f4:6c:dc:c8:34:e0:9b:53:e4:0c:da:c6:ab:39:df: 77:46:78:59:0c:78:26:c1:a4:f0:4b:22:84:7d:bc: 88:15:cb:75:d6:93:08:6e:ac:2f:2e:f1:b9:0e:16: 86:de:a5:65:f0:0a:ef:69:09:35:9f:6f:bd:25:52: d2:87:d9:99:60:10:ef:30:a9:18:6e:96:7d:63:6a: 4e:96:31:c1:0a:1e:41:56:a2:40:03:b2:a4:52:ed: 8c:96:f6:84:61:2d:9a:42:0c:3b:e3:ea:1f:80:0e: 81:73:83:3c:40:0f:6a:a2:9b:65:81:7b:81:25:18: a2:28:c9:03:7a:2b:eb:7e:d2:59:37:d4:4b:72:a8: 87:7f:ef:0b:16:68:61:c0:c4:e2:08:e1:6b:67:e7: 0e:cf:6e:8f:b9:b8:08:44:ab:e6:db:dd:18:1d:9e: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:16:24:C1:68:17:53:3B:A6:73:30:B8:27:D3:66:D2:68:10:F0 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:05:5d:00:b9:b1:03:59:54:3b:bf:2b:03:53:5b:b5:5c:d1: 88:90:8d:b4:50:1b:58:10:f7:c0:45:4b:29:8e:4b:9b:68:b3: 93:77:44:77:a3:f6:e8:e9:40:c3:95:35:c3:db:89:99:cc:99: ab:e8:13:24:6d:df:89:9e:1f:74:db:26:a8:68:ec:95:ac:37: f2:45:11:19:96:59:b1:5b:a3:ca:59:8c:11:15:f7:81:5d:34: b4:70:7b:3f:77:26:1a:bf:96:06:03:f1:bf:47:93:c1:9b:a8: 5e:30:2c:c2:32:f8:a7:b2:ea:9f:66:74:55:c1:e1:9d:1c:e8: e0:1f:e3:f6:60:d6:21:a3:5d:75:78:75:45:35:7b:c2:5b:01: 10:62:75:9e:49:df:54:7b:38:5f:0f:20:96:2d:6b:36:48:00: bc:22:9c:dc:21:01:b8:1e:a0:0c:9a:36:be:a5:d4:3a:84:68: ce:54:e1:fc:02:d2:c4:aa:e3:d9:d7:31:07:cb:78:24:a4:1d: b8:51:6b:49:cb:df:6b:27:0e:c6:01:51:e8:e3:bd:4e:1e:38: b9:4c:77:fd:7d:0f:ab:41:9e:cc:a4:59:31:cb:12:88:82:31: a8:5c:be:e9:61:75:8f:90:b9:40:c5:9f:4e:93:96:52:6e:cf: 3f:20:02:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQ7gW/giEMNQxoHV9w0UA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwOTI0MDEwMDU0WhcNMjYwOTI1MDEwMDU0WjAzMTEwLwYDVQQD Eyg1YWM2MTYyNGMxNjgxNzUzM2JhNjczMzBiODI3ZDM2NmQyNjgxMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BSD4Cjs5HCjB1ABDJiVBPb1oRR0 /wzNXUrtb32sWRekw5ZdYGp90j/zZowc2JE1CWTuNqUd2tPDM1uZTgjj380UqiU/ On4KWKMtg76ipVCdsYJto0ANZj/0bNzINOCbU+QM2sarOd93RnhZDHgmwaTwSyKE fbyIFct11pMIbqwvLvG5DhaG3qVl8ArvaQk1n2+9JVLSh9mZYBDvMKkYbpZ9Y2pO ljHBCh5BVqJAA7KkUu2MlvaEYS2aQgw74+ofgA6Bc4M8QA9qoptlgXuBJRiiKMkD eivrftJZN9RLcqiHf+8LFmhhwMTiCOFrZ+cOz26PubgIRKvm290YHZ7SZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrGFiTBaBdTO6ZzMLgn02bSaBDwMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgVdALmx A1lUO78rA1NbtVzRiJCNtFAbWBD3wEVLKY5Lm2izk3dEd6P26OlAw5U1w9uJmcyZ q+gTJG3fiZ4fdNsmqGjslaw38kURGZZZsVujylmMERX3gV00tHB7P3cmGr+WBgPx v0eTwZuoXjAswjL4p7Lqn2Z0VcHhnRzo4B/j9mDWIaNddXh1RTV7wlsBEGJ1nknf VHs4Xw8gli1rNkgAvCKc3CEBuB6gDJo2vqXUOoRozlTh/ALSxKrj2dcxB8t4JKQd uFFrScvfaycOxgFR6OO9Th44uUx3/X0Pq0GezKRZMcsSiIIxqFy+6WF1j5C5QMWf TpOWUm7PPyACfA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:53:34 2026 by rpki-client