$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: W4snzzfTO1gTiC1m2XloNJpHAEvPEp+EOywbRzPqoaw= Subject key identifier: 42:BF:60:2C:8B:75:37:2A:BA:4B:99:3C:0F:69:A7:38:70:7C:B1:24 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019D98F52A397095916EF74B7EE23B8DEA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 15EC Signing time: Fri 17 Apr 2026 01:01:36 +0000 Manifest this update: Fri 17 Apr 2026 01:01:36 +0000 Manifest next update: Sat 18 Apr 2026 01:01:36 +0000 Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=) 2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=) 3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=) 4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=) 5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=) 6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=) 7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=) 8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=) 9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=) 10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=) 11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 6ZAeWNhcLQgiVv3a1dP6m+QzjDgpekz/gqMzCAS6Cx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f5:2a:39:70:95:91:6e:f7:4b:7e:e2:3b:8d:ea:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Apr 17 01:01:36 2026 GMT Not After : Apr 18 01:01:36 2026 GMT Subject: CN=42bf602c8b75372aba4b993c0f69a738707cb124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:bb:2e:0b:1c:e6:4d:b3:fb:b3:43:ca:0a: 1f:62:05:f6:23:e2:5e:da:df:dd:85:69:c1:d5:71: c8:1f:4b:d0:7a:c4:73:db:a3:40:31:ef:28:d6:82: 04:f6:ef:13:e5:61:6c:f0:da:8e:00:db:6b:8d:b4: 1c:7a:ad:6c:9e:1a:1b:fa:40:ef:38:0b:f9:a1:8b: 6a:13:36:e3:be:5b:02:46:44:55:07:57:e6:0f:72: 3c:7e:39:e6:fb:52:73:0f:2d:07:2b:8e:7f:5b:b5: 5f:e4:38:0c:66:72:48:e6:80:f6:86:64:5d:d9:44: fc:df:30:50:57:59:dc:79:48:a4:ef:f0:d3:ba:fa: f4:f9:f6:52:a4:f3:b6:f9:3c:c0:d2:5c:16:e6:a1: a2:24:e7:50:d6:3e:73:4d:fd:21:5e:95:ba:4e:72: 0e:ee:6c:4e:6c:64:a0:ab:6b:90:22:af:ea:f5:b4: 79:ec:cf:1e:bf:73:0d:4e:8c:2e:44:67:89:c7:ea: 03:6b:ef:ef:a6:9d:50:e6:6f:40:cd:74:43:59:7f: de:a1:d9:25:74:14:59:d4:6b:fd:b6:d6:53:5d:1d: 7b:69:8b:51:2e:ff:92:ae:c7:be:df:85:8d:b9:7a: 95:5d:5b:33:12:4a:9d:e8:c0:a9:80:51:f4:5d:4d: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:60:2C:8B:75:37:2A:BA:4B:99:3C:0F:69:A7:38:70:7C:B1:24 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1e:e6:3c:1c:ff:3f:ba:89:46:b3:e1:cc:f1:54:03:d2:d3: 0b:68:31:1f:ac:54:70:cd:19:90:08:28:2f:c3:6f:f4:bf:26: 93:86:00:ce:85:98:b8:51:fd:b2:9d:3c:c5:61:29:a5:ff:95: 2e:01:45:9f:7d:7b:68:1b:c3:cf:37:0b:53:49:86:d3:6f:80: 56:72:e0:3a:b3:b4:8c:85:99:3f:a5:cb:39:44:11:7f:e5:39: 6d:ba:17:02:00:23:ef:e1:45:37:df:a5:41:ec:0e:96:8c:38: d1:8c:4f:f9:a6:1a:25:e4:bf:d7:f2:16:c4:2e:1d:c5:b3:53: 41:bb:5e:2b:2f:dc:81:36:80:54:9b:e3:84:5a:aa:57:19:2c: c1:f3:e1:df:3a:89:ed:15:06:76:b2:3a:bd:a7:b2:9b:e2:87: de:9e:63:c4:dd:6c:4b:e4:2b:6b:7a:cf:54:7a:bb:00:dd:31: e7:d9:2c:f1:96:66:f8:5b:5b:d8:1a:3e:14:f7:a6:94:ac:d9: e2:58:41:fe:38:15:ab:bd:20:93:2f:31:fb:4f:02:18:dc:25: e0:5f:e4:d9:3d:74:5f:8e:b2:40:8b:6f:b6:88:09:d7:20:7e: 70:ac:c9:76:4a:f7:b2:78:74:6e:3e:7d:dc:3f:d4:9b:44:c2: 3f:90:42:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Y9So5cJWRbvdLfuI7jepQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwNDE3MDEwMTM2WhcNMjYwNDE4MDEwMTM2WjAzMTEwLwYDVQQD Eyg0MmJmNjAyYzhiNzUzNzJhYmE0Yjk5M2MwZjY5YTczODcwN2NiMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtG7Lgsc5k2z+7NDygofYgX2I+Je 2t/dhWnB1XHIH0vQesRz26NAMe8o1oIE9u8T5WFs8NqOANtrjbQceq1snhob+kDv OAv5oYtqEzbjvlsCRkRVB1fmD3I8fjnm+1JzDy0HK45/W7Vf5DgMZnJI5oD2hmRd 2UT83zBQV1nceUik7/DTuvr0+fZSpPO2+TzA0lwW5qGiJOdQ1j5zTf0hXpW6TnIO 7mxObGSgq2uQIq/q9bR57M8ev3MNTowuRGeJx+oDa+/vpp1Q5m9AzXRDWX/eodkl dBRZ1Gv9ttZTXR17aYtRLv+Srse+34WNuXqVXVszEkqd6MCpgFH0XU2kNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK/YCyLdTcqukuZPA9ppzhwfLEkMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB7mPBz/ P7qJRrPhzPFUA9LTC2gxH6xUcM0ZkAgoL8Nv9L8mk4YAzoWYuFH9sp08xWEppf+V LgFFn317aBvDzzcLU0mG02+AVnLgOrO0jIWZP6XLOUQRf+U5bboXAgAj7+FFN9+l QewOlow40YxP+aYaJeS/1/IWxC4dxbNTQbteKy/cgTaAVJvjhFqqVxkswfPh3zqJ 7RUGdrI6vaeym+KH3p5jxN1sS+Qra3rPVHq7AN0x59ks8ZZm+Ftb2Bo+FPemlKzZ 4lhB/jgVq70gky8x+08CGNwl4F/k2T10X46yQItvtogJ1yB+cKzJdkr3snh0bj59 3D/Um0TCP5BC+A== -----END CERTIFICATE-----Generated at Fri Apr 17 10:21:51 2026 by rpki-client