$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json) Hash identifier: N9d/xYORx4UzzSSvL6i1zVmGXOz9OBeOIY/CT9KtKZk= Subject key identifier: 30:B9:B1:13:FE:AD:78:95:31:72:DB:AB:05:83:C8:EE:FA:8C:B2:79 Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Certificate serial: 01A0C10D17483B41F0BD0C9CA05367BD9494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft Manifest number: 1A6A Signing time: Sun 20 Sep 2026 23:00:55 +0000 Manifest this update: Sun 20 Sep 2026 23:00:55 +0000 Manifest next update: Mon 21 Sep 2026 23:00:55 +0000 Files and hashes: 1: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=) 2: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=) 3: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=) 4: MPnZ2IAC1xgd07uCZkieW893YC0.roa (hash: Pp3PeX0RbMqeepjALv8Rlw2HnxxIY16HtKih3ySkz5c=) 5: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: xayq6ciKBgXQHQJUQYRBXE5Q598vsreFk/sCEyWjXF4=) 6: lZEX5TKEx5hCkasDPbRjOyHPXGI.roa (hash: tjb5iXKbv01rpTz7gJYnJJIH0J2+gq3FvhNX1/NC5Xs=) 7: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=) 8: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=) 9: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=) 10: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=) 11: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=) 12: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:0d:17:48:3b:41:f0:bd:0c:9c:a0:53:67:bd:94:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Validity Not Before: Sep 20 23:00:55 2026 GMT Not After : Sep 21 23:00:55 2026 GMT Subject: CN=30b9b113fead78953172dbab0583c8eefa8cb279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:aa:97:ba:d8:87:7d:0b:55:8f:18:c1:bf: 50:73:47:76:01:12:13:3c:05:9f:61:d9:7c:11:19: a0:6c:da:6e:4e:bb:a7:63:75:cf:63:09:7f:7e:ed: dc:c9:b8:27:4b:d2:5d:73:b1:e8:de:24:1c:74:c0: 7f:e9:91:ff:7f:00:0f:da:82:94:5f:c7:9b:ad:52: b2:e1:e0:45:7b:2b:b0:e4:c0:39:19:cf:4c:a5:c1: 4f:a6:0c:fd:9f:a6:90:3c:d3:38:fb:36:6d:d0:be: 4c:b4:32:37:03:72:a8:e3:dc:f3:84:98:09:d0:00: 3f:f5:f6:0c:b9:09:47:b4:86:95:79:fc:7a:8a:ea: 66:e9:25:41:bd:68:8a:5e:fb:d1:4f:d7:71:35:32: 1f:45:85:ec:8e:ae:58:fd:02:6a:53:a2:f1:39:88: b4:0c:2b:51:9e:98:89:fe:c1:9e:95:1d:f7:c8:eb: 97:bf:7f:de:6f:4b:92:d6:da:ff:bd:8e:cb:1b:93: 88:14:98:8d:2e:db:27:a9:c9:ed:f3:ed:07:c0:37: 20:f1:89:f7:8f:8a:6b:2c:b5:2c:ec:c2:55:2c:bb: a1:82:74:f5:f7:f4:be:1c:03:fd:54:2d:c5:9f:37: 6f:46:dd:fa:b5:59:a6:58:cc:cc:b8:db:1e:72:2d: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B9:B1:13:FE:AD:78:95:31:72:DB:AB:05:83:C8:EE:FA:8C:B2:79 X509v3 Authority Key Identifier: keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:cf:51:15:d5:5c:43:23:4f:94:7c:81:a7:5c:90:8a:f3: 51:78:d5:45:d0:ad:6d:f2:f9:80:20:49:42:1e:54:f1:01:4e: 90:fe:40:cc:81:9a:15:aa:aa:86:05:be:ca:33:9a:93:7d:27: 43:d1:98:c5:72:a3:dc:9d:24:c6:f2:dc:e4:88:1c:ad:e7:2f: ec:ce:6d:de:58:cb:31:2e:9a:6b:92:97:b1:34:17:c3:a2:c5: f4:41:38:7e:87:7c:cb:f2:4e:b6:02:4a:42:23:97:41:27:12: 63:06:84:95:51:f0:88:f8:0c:e5:39:0c:e1:6f:e6:9d:78:b1: 75:85:1d:d4:2d:58:29:74:5b:25:e0:2c:45:76:e6:36:69:d9: c6:ce:10:ad:0f:4f:52:d1:ff:4c:f2:cd:34:1b:ef:88:04:70: a4:02:55:50:5b:9c:d2:e4:98:64:c6:76:33:a7:4a:bc:95:a5: d6:d4:31:f8:4e:08:0b:e2:8b:86:51:95:cf:6b:ce:aa:62:18: f3:d6:c7:4e:65:b3:b3:5f:af:40:94:5c:b2:ae:dc:d5:2d:18: 2e:ed:ca:c1:f4:79:51:12:22:b6:6a:70:40:d1:fe:ae:46:7a: 97:a2:ee:20:fb:af:02:83:b1:1c:34:27:11:a0:8f:9f:45:39: 27:c8:45:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBDRdIO0HwvQycoFNnvZSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx MDZkOTcwHhcNMjYwOTIwMjMwMDU1WhcNMjYwOTIxMjMwMDU1WjAzMTEwLwYDVQQD EygzMGI5YjExM2ZlYWQ3ODk1MzE3MmRiYWIwNTgzYzhlZWZhOGNiMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOyql7rYh30LVY8Ywb9Qc0d2ARIT PAWfYdl8ERmgbNpuTrunY3XPYwl/fu3cybgnS9Jdc7Ho3iQcdMB/6ZH/fwAP2oKU X8ebrVKy4eBFeyuw5MA5Gc9MpcFPpgz9n6aQPNM4+zZt0L5MtDI3A3Ko49zzhJgJ 0AA/9fYMuQlHtIaVefx6iupm6SVBvWiKXvvRT9dxNTIfRYXsjq5Y/QJqU6LxOYi0 DCtRnpiJ/sGelR33yOuXv3/eb0uS1tr/vY7LG5OIFJiNLtsnqcnt8+0HwDcg8Yn3 j4prLLUs7MJVLLuhgnT19/S+HAP9VC3FnzdvRt36tVmmWMzMuNseci2HPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDC5sRP+rXiVMXLbqwWDyO76jLJ5MB8GA1UdIwQY MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1 LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0nPURXV XEMjT5R8gadckIrzUXjVRdCtbfL5gCBJQh5U8QFOkP5AzIGaFaqqhgW+yjOak30n Q9GYxXKj3J0kxvLc5Igcrecv7M5t3ljLMS6aa5KXsTQXw6LF9EE4fod8y/JOtgJK QiOXQScSYwaElVHwiPgM5TkM4W/mnXixdYUd1C1YKXRbJeAsRXbmNmnZxs4QrQ9P UtH/TPLNNBvviARwpAJVUFuc0uSYZMZ2M6dKvJWl1tQx+E4IC+KLhlGVz2vOqmIY 89bHTmWzs1+vQJRcsq7c1S0YLu3KwfR5URIitmpwQNH+rkZ6l6LuIPuvAoOxHDQn EaCPn0U5J8hF2A== -----END CERTIFICATE-----Generated at Mon Sep 21 08:25:49 2026 by rpki-client