$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: UA04NWebulWvCbWRVlFZ8j+4ANVxwi4yk5hO+GVES4U= Subject key identifier: AA:D3:00:20:B4:44:6C:71:DB:8D:7F:BF:55:3F:13:55:CD:66:CD:3D Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019D97AAF03EF1F135EDA7C03E26EC02579B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 18F6 Signing time: Thu 16 Apr 2026 19:00:55 +0000 Manifest this update: Thu 16 Apr 2026 19:00:55 +0000 Manifest next update: Fri 17 Apr 2026 19:00:55 +0000 Files and hashes: 1: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (hash: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk=) 2: 42PKmGxLZWltjo2RjF8-O2uhH1I.roa (hash: NUqXlQ+o+ZJwF4uY9fuVeTvOTArxxOzENBFKqJ5J5nw=) 3: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (hash: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek=) 4: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (hash: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg=) 5: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (hash: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0=) 6: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (hash: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs=) 7: Y678nbAXgyJNIhHWBvPEm3Eg6Tc.roa (hash: DKV+BJtz3zDg36mgeAzIAS8VLgrjboCuiDPTZTHhis8=) 8: Z_Vtx6hPhEla7QjEw0Ge3-aDBkQ.roa (hash: R5X3hIMzkskVUzfz9i4HLODFSm5lw5Mm8yNPeyRwVtU=) 9: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (hash: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE=) 10: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (hash: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE=) 11: nk_BFnPjxZUVaqPDlNJQf6RBw4A.roa (hash: vVJ+n/DVIwr6d39NjXvbQOW6EJnb9U7HwwIO7E8CVpo=) 12: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (hash: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg=) 13: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (hash: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k=) 14: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (hash: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo=) 15: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: 9NRVxbWdYYWlP/5it1GlH1ieAuGWmcj52MVOZ6kgvjI=) 16: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (hash: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:aa:f0:3e:f1:f1:35:ed:a7:c0:3e:26:ec:02:57:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Apr 16 19:00:55 2026 GMT Not After : Apr 17 19:00:55 2026 GMT Subject: CN=aad30020b4446c71db8d7fbf553f1355cd66cd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:48:a7:cb:e9:31:b5:49:3b:00:20:66:19: 5f:f0:ce:90:8f:b7:14:e7:8f:f2:5a:bd:61:de:3f: 06:67:5d:ad:78:c7:17:31:8a:d1:54:8d:49:af:f8: 22:10:b4:72:0f:08:44:6e:9c:2b:df:13:34:3f:aa: b9:bb:d0:3b:3c:34:19:6b:2a:95:03:6f:69:70:ca: 61:8d:8d:69:a3:37:c8:cb:74:18:c3:f9:95:21:03: e9:86:53:9e:5b:c1:d2:59:f0:11:b6:13:b1:f2:9c: cc:a5:91:3e:2a:31:a2:96:5a:09:72:6d:9e:f4:5b: 49:20:b2:4a:f9:0a:6e:67:6c:59:23:e8:c3:d0:35: d6:ef:46:af:96:33:69:dc:3f:e9:5c:87:1c:86:ec: 9b:aa:6e:52:15:37:4b:a9:6c:48:b1:98:f7:a4:01: 78:e5:96:b4:35:22:67:54:3d:4c:e9:2e:73:3e:1b: 1d:29:e8:8c:f3:2d:49:fa:d0:71:e4:86:4d:78:d0: d0:f6:4b:9c:2c:fb:ab:a3:75:e3:ed:85:2d:43:b9: d9:8c:77:a6:df:17:de:83:58:d3:0e:e8:58:a8:79: 35:e8:c3:ab:a4:03:0d:38:93:f0:fe:01:0a:f9:de: aa:4b:23:13:86:f9:ef:f4:41:60:64:42:2f:fc:d4: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D3:00:20:B4:44:6C:71:DB:8D:7F:BF:55:3F:13:55:CD:66:CD:3D X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:92:34:73:76:c2:92:58:11:a9:24:98:9a:54:fe:1f:d1:17: ff:1f:92:07:71:88:ac:2f:ec:1d:2d:9b:3b:2a:ee:4b:50:0e: 54:5d:e0:bd:ec:23:e2:d7:fc:2d:89:7d:7a:b7:ff:4e:7f:c7: dc:71:c3:cf:ee:19:44:39:fa:7c:cf:5a:8a:72:00:4e:ed:9d: 37:25:8d:3a:04:61:a9:16:a5:ab:c8:a2:55:a3:c8:1d:be:01: c6:9c:e4:25:5f:89:c1:cd:23:79:8d:50:d9:3e:14:ae:9e:a5: 62:85:bd:4e:48:9a:c8:79:6c:e1:6e:76:ca:dc:bd:e4:ee:9f: b9:5d:4c:32:f3:9b:db:8b:7f:c0:78:36:5c:82:53:69:cc:2d: d6:98:33:25:a5:61:95:2b:32:82:6e:47:54:8c:1a:25:cf:e3: cb:50:75:2a:94:62:88:bc:87:2a:65:f1:79:6f:d1:18:c3:d9: 0f:2f:a4:e6:5c:38:b2:d7:ad:fe:2a:c8:37:84:74:58:c9:3b: af:0f:8e:ae:3f:f9:01:50:72:48:70:81:c9:1b:fa:1f:ae:6d: b7:bd:37:50:8a:74:19:fb:93:e1:cf:7d:39:a9:b6:96:8b:5f: d9:67:9d:0c:7b:ca:b6:40:8d:c3:fd:51:bc:43:f0:42:c9:8c: 20:db:36:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2XqvA+8fE17afAPibsAlebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwNDE2MTkwMDU1WhcNMjYwNDE3MTkwMDU1WjAzMTEwLwYDVQQD EyhhYWQzMDAyMGI0NDQ2YzcxZGI4ZDdmYmY1NTNmMTM1NWNkNjZjZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxIp8vpMbVJOwAgZhlf8M6Qj7cU 54/yWr1h3j8GZ12teMcXMYrRVI1Jr/giELRyDwhEbpwr3xM0P6q5u9A7PDQZayqV A29pcMphjY1pozfIy3QYw/mVIQPphlOeW8HSWfARthOx8pzMpZE+KjGilloJcm2e 9FtJILJK+QpuZ2xZI+jD0DXW70avljNp3D/pXIcchuybqm5SFTdLqWxIsZj3pAF4 5Za0NSJnVD1M6S5zPhsdKeiM8y1J+tBx5IZNeNDQ9kucLPuro3Xj7YUtQ7nZjHem 3xfeg1jTDuhYqHk16MOrpAMNOJPw/gEK+d6qSyMThvnv9EFgZEIv/NRowwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrTACC0RGxx241/v1U/E1XNZs09MB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZI0c3bC klgRqSSYmlT+H9EX/x+SB3GIrC/sHS2bOyruS1AOVF3gvewj4tf8LYl9erf/Tn/H 3HHDz+4ZRDn6fM9ainIATu2dNyWNOgRhqRalq8iiVaPIHb4BxpzkJV+Jwc0jeY1Q 2T4Urp6lYoW9TkiayHls4W52yty95O6fuV1MMvOb24t/wHg2XIJTacwt1pgzJaVh lSsygm5HVIwaJc/jy1B1KpRiiLyHKmXxeW/RGMPZDy+k5lw4stet/irIN4R0WMk7 rw+Orj/5AVBySHCByRv6H65tt703UIp0GfuT4c99Oam2lotf2WedDHvKtkCNw/1R vEPwQsmMINs20Q== -----END CERTIFICATE-----Generated at Fri Apr 17 00:03:58 2026 by rpki-client