$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: OynsOhdF71M8bHoU6FoqfTP+266Hi4KDfWLuJOjnXkY= Subject key identifier: 0A:B6:3D:8D:FA:BA:C8:11:28:74:0C:48:96:4D:A4:57:90:F0:9D:06 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 01A0BFFA188438689A476CBA3CDCF057E6BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1A9B Signing time: Sun 20 Sep 2026 18:00:33 +0000 Manifest this update: Sun 20 Sep 2026 18:00:33 +0000 Manifest next update: Mon 21 Sep 2026 18:00:33 +0000 Files and hashes: 1: 4hsmCQ0_Hfxooe6nlg4d9riyNO0.roa (hash: TGJqJ6UIU9E/Hr+bDZjiyFWq6TL6D9FFJj+BmivCcrw=) 2: 5_O_-Ts_PXr2shf_BK27FxmRb0E.roa (hash: HdNtBk6r6/g/NGu66avK4wtW2O6fVyALFYw/tzivy2w=) 3: 6y-secnE2lDQKI1GGrirpaJzUYs.roa (hash: 1ZBZRlQJYd1XGb21+sdUz77pf1q1nzuib9QtD1g4f7E=) 4: MnkZ2uGRZrTSdTCIfeiOua7a3c8.roa (hash: W5Zv1swY/sHVBwrPHptQ5GwEAhCn12V7MA2pp2AtLQs=) 5: NRwfAJkL_LqOp1mMbz2MYDdBfoM.roa (hash: W3nGwB/5l82VyTMniD79KQw9BOTXPJR7EjkBzNDA5Zw=) 6: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (hash: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=) 7: TmtlZhBR9Ovcl6IJQ4WPWT13yx0.roa (hash: sZjXDmusj/EZKsD0MsGwCOHFRPz3nm2yQT/8pNTj2Qw=) 8: aatid15nJg_ZHnTqc9bbhStxui8.roa (hash: uyHxYZyZlMGakqXvepDoIH+z7/maRvFeBVXUuB8kJyE=) 9: dQaTjbpdJpL1XP1v01EKXqRYC-w.roa (hash: ULOoetRX5qMtgr34Ew/wFPFv5aHflUOVtLIXDSuv5Hw=) 10: egISSsj_emXqIzTgWR5rt0OsUxI.roa (hash: PGCg7xxw/0+DVy2qN0rYw5NAol7r6pcd4sImkT4t1IQ=) 11: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (hash: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=) 12: gwfkpOpPzc-UUNBRNurVqQ1BnOU.roa (hash: QBi5IqWkfubZgMUQCUMhG623BzbGTNquHl5ghz5pfQU=) 13: hBaKkxMtUKtrEeFF-i0rx692Iyo.roa (hash: eWsrWRk1A9hKlcWj/lFqR26zj+izpniq3CmuJ2sGH14=) 14: iTV1ir2wyiT3gaNEy_HgNIFvx8k.roa (hash: 3LWLZYb3aiYtjNvO6yw7iHphKFQPMUTYJLyWPV6vMiw=) 15: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: ZQxuBBGVtOaU3xnZDwS2E2g2D1CDOt7Rf4YKzLi65Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:fa:18:84:38:68:9a:47:6c:ba:3c:dc:f0:57:e6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Sep 20 18:00:33 2026 GMT Not After : Sep 21 18:00:33 2026 GMT Subject: CN=0ab63d8dfabac81128740c48964da45790f09d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:de:c3:57:fd:9f:7c:f4:7f:60:b5:d9:ae: fb:e9:1a:17:85:3d:b1:77:c8:27:5e:5a:17:3f:13: 8d:e6:ec:ad:ec:ea:6a:74:5b:69:42:50:a3:c4:f2: 67:e8:63:2e:70:e5:c2:77:2a:f5:73:32:3e:bd:9f: ae:0b:b1:4c:29:33:c6:91:ae:86:4e:de:e9:25:17: 4e:b4:e3:35:1a:ea:e1:eb:54:e4:71:f8:9f:25:52: 11:22:9a:f2:09:be:0c:85:26:b2:bd:35:ee:8a:a7: a2:43:31:ee:d0:f7:c1:e3:7d:ac:e8:4c:7b:a0:ad: 7c:66:57:f6:f2:92:ab:ac:0f:f2:b6:a1:b2:37:b9: 51:57:96:a0:30:50:a5:76:92:2b:ae:be:3c:f3:de: 68:a7:6b:fc:9d:92:05:92:18:a5:67:ba:84:f4:b0: 73:76:6c:30:a9:d4:d9:20:0e:d7:3b:9f:b2:87:03: ec:49:2e:49:a4:d0:db:c8:1c:0a:76:99:ce:5f:52: 5f:6b:3c:4d:9d:ce:ad:3c:9c:31:d5:43:63:df:8c: 7d:f6:8e:7a:63:b4:16:8a:d3:2f:2c:c9:ca:d4:74: 58:94:b6:55:2e:3b:2f:3d:8c:18:29:fa:49:95:17: 62:dd:1f:57:ef:b4:20:54:a0:83:aa:24:fe:4e:7d: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B6:3D:8D:FA:BA:C8:11:28:74:0C:48:96:4D:A4:57:90:F0:9D:06 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:ee:25:75:2d:a1:49:1a:9f:30:37:1b:26:6c:4c:7d:da: 93:e2:bf:70:52:28:f5:ef:a6:0b:b4:8e:3b:1a:c9:ef:06:9e: 3f:2c:4e:02:10:dd:26:65:c9:82:50:e0:15:b6:71:6d:1e:03: bd:49:30:15:b6:c9:25:1e:8a:c5:98:dc:a3:c4:86:fe:ad:7b: d0:1c:b6:ea:f3:6b:e3:17:28:7e:e4:b1:29:f9:f5:6f:13:db: 9d:8b:9b:88:bb:1e:72:4e:ee:f4:39:3d:69:76:d0:32:a2:74: 4e:84:41:3e:22:12:2d:a1:c2:55:36:97:78:bb:44:33:65:8b: 3f:71:b1:b3:4e:ec:f2:85:7c:c6:88:d9:fe:3b:bf:c7:58:f5: 27:51:3a:76:7b:93:91:3f:04:08:8e:0e:e4:88:0e:8f:8e:91: 97:76:80:d9:d3:c5:77:42:cf:64:fc:3d:e2:25:84:48:78:fd: dc:c3:87:40:70:3d:7c:c3:e2:e1:52:c5:8e:0c:9a:13:68:d4: cb:56:27:31:56:20:0b:6d:c3:95:c8:a2:d5:e1:5c:86:42:9a: cb:8b:2d:4a:ab:1d:51:d9:a4:f4:96:6c:66:59:1a:f6:ee:b9: 16:a0:51:e8:d2:e8:c1:96:6e:9c:66:11:78:21:37:99:23:31: 47:96:d5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/+hiEOGiaR2y6PNzwV+a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwOTIwMTgwMDMzWhcNMjYwOTIxMTgwMDMzWjAzMTEwLwYDVQQD EygwYWI2M2Q4ZGZhYmFjODExMjg3NDBjNDg5NjRkYTQ1NzkwZjA5ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRfew1f9n3z0f2C12a776RoXhT2x d8gnXloXPxON5uyt7OpqdFtpQlCjxPJn6GMucOXCdyr1czI+vZ+uC7FMKTPGka6G Tt7pJRdOtOM1Gurh61TkcfifJVIRIpryCb4MhSayvTXuiqeiQzHu0PfB432s6Ex7 oK18Zlf28pKrrA/ytqGyN7lRV5agMFCldpIrrr48895op2v8nZIFkhilZ7qE9LBz dmwwqdTZIA7XO5+yhwPsSS5JpNDbyBwKdpnOX1JfazxNnc6tPJwx1UNj34x99o56 Y7QWitMvLMnK1HRYlLZVLjsvPYwYKfpJlRdi3R9X77QgVKCDqiT+Tn2DiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq2PY36usgRKHQMSJZNpFeQ8J0GMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzHuJXUt oUkanzA3GyZsTH3ak+K/cFIo9e+mC7SOOxrJ7waePyxOAhDdJmXJglDgFbZxbR4D vUkwFbbJJR6KxZjco8SG/q170By26vNr4xcofuSxKfn1bxPbnYubiLseck7u9Dk9 aXbQMqJ0ToRBPiISLaHCVTaXeLtEM2WLP3Gxs07s8oV8xojZ/ju/x1j1J1E6dnuT kT8ECI4O5IgOj46Rl3aA2dPFd0LPZPw94iWESHj93MOHQHA9fMPi4VLFjgyaE2jU y1YnMVYgC23Dlcii1eFchkKay4stSqsdUdmk9JZsZlka9u65FqBR6NLowZZunGYR eCE3mSMxR5bV6g== -----END CERTIFICATE-----Generated at Mon Sep 21 03:33:58 2026 by rpki-client