$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: ETQHgHmdN+8vksWCb7G6DzJ4hwaj1qy9fWkyFPjcG2s= Subject key identifier: 66:A1:D3:CB:B9:38:60:C5:57:AF:6E:A3:FD:CF:4D:34:E4:A5:8A:50 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019CAB34111D1210C70EAFD331E20921BDEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 187B Signing time: Sun 01 Mar 2026 21:00:41 +0000 Manifest this update: Sun 01 Mar 2026 21:00:41 +0000 Manifest next update: Mon 02 Mar 2026 21:00:41 +0000 Files and hashes: 1: 1-k1xGgOg7cmIBXcd0nrvnJw4RcA.roa (hash: anNr7e/JBnUYMhLfqMEUI0X/lqFcUzw3+8qk1SByStk=) 2: 42PKmGxLZWltjo2RjF8-O2uhH1I.roa (hash: NUqXlQ+o+ZJwF4uY9fuVeTvOTArxxOzENBFKqJ5J5nw=) 3: 6k3vYeEPu-J7Mw4dXTyiMZ7Ekr0.roa (hash: r1DQwd1lCwiCMr4uiPyUZ5NdhPXNQWe9B7dtgVTDAek=) 4: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (hash: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg=) 5: LMJBE-j1IyfCoGjjOuMvDSrF7jc.roa (hash: /XX1/kCKgIEeweh0hI01sdEdUMLEv7y6gF8fmr1ODg0=) 6: LbYvJLBdHQvWviPwd15d9xVJqgY.roa (hash: WapEJuAR6glnqIHgPfX9/HAglIBhg8ruW/yOCXmYEAs=) 7: Z_Vtx6hPhEla7QjEw0Ge3-aDBkQ.roa (hash: R5X3hIMzkskVUzfz9i4HLODFSm5lw5Mm8yNPeyRwVtU=) 8: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (hash: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE=) 9: niIAPfyiBh5is4uOjKHzZA0pYr0.roa (hash: n3it6wjMVZGXWk3urp2qQ9EldMvUOTMR0pEABJSiuUE=) 10: nk_BFnPjxZUVaqPDlNJQf6RBw4A.roa (hash: vVJ+n/DVIwr6d39NjXvbQOW6EJnb9U7HwwIO7E8CVpo=) 11: pJ0EPd3uAqeCJPQ0mMuRQr2bM6Q.roa (hash: kpeec4UubBGPN76k4D6h51o0xG2zwxwJUcai7RZosTI=) 12: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (hash: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg=) 13: vgmDuTwdWYkC7ythBhfv-YfoSo4.roa (hash: ojkOUqcaOZO1M85OqW1CD3mNuR1ByxiCtAJdHnBPH+k=) 14: w2_9H6bnQ34mWpkvN2QpMj9y_tE.roa (hash: EISykekcQVtgn8+ieX6zMsyVfY2p3kqpa+AlDb9TqBo=) 15: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: tBhaYTrVxFfxg33iyfTLZQA75rFdB6KWsGq2+xRanzI=) 16: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (hash: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:11:1d:12:10:c7:0e:af:d3:31:e2:09:21:bd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Mar 1 21:00:41 2026 GMT Not After : Mar 2 21:00:41 2026 GMT Subject: CN=66a1d3cbb93860c557af6ea3fdcf4d34e4a58a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:5e:83:e5:25:8f:4e:a3:c1:28:28:8b:16: 82:04:9f:1a:6d:b5:15:e3:ab:2e:9c:1a:38:9c:5d: fe:c4:6a:db:30:72:31:8d:81:1c:fa:9d:d7:61:06: 13:c3:b9:1f:ad:09:f2:2d:9d:0e:61:93:96:3b:9c: 5f:26:22:f8:05:5b:d4:2e:c0:0e:27:91:3d:1a:bb: f2:6b:a3:5b:b8:0c:cb:e9:68:32:31:b1:7d:6b:81: 7a:2f:f7:60:e8:cb:86:78:98:a0:ef:6c:26:15:fd: 06:e8:43:f3:86:85:20:05:64:17:a6:17:d2:6e:13: 0b:ce:ec:f1:42:68:d4:ee:ff:a0:f3:83:01:59:2b: c1:a9:b7:44:40:cb:68:a3:30:be:ae:7d:10:db:35: 75:6b:60:f8:ae:4d:f5:64:2c:2d:ed:15:9a:16:59: 28:1b:a1:ce:fa:22:db:2d:1e:54:48:2e:7b:2a:7f: 44:bd:60:22:30:c2:f5:ac:06:1e:4a:3f:d1:8e:d6: 44:3a:76:35:e4:c3:dc:23:14:51:5e:23:8e:23:02: f8:92:fe:c6:1c:4b:7e:0f:d9:8b:df:b8:7c:2b:80: 61:9b:db:fe:bf:92:a7:30:58:ca:26:e5:51:12:b2: 15:b2:e0:86:a8:d1:ab:d4:ae:68:3a:82:b4:a8:82: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A1:D3:CB:B9:38:60:C5:57:AF:6E:A3:FD:CF:4D:34:E4:A5:8A:50 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1c:c2:70:07:b3:e9:8f:ae:ef:a7:68:00:de:51:23:7b:f8: 6d:22:12:4a:e9:d7:dd:e8:05:42:3c:ba:6c:83:73:1f:38:cc: 93:e8:12:1d:7f:d2:c7:9d:42:cf:b8:b2:42:b6:05:a5:f6:92: fa:11:83:62:69:06:4e:d8:ce:5a:97:d4:4d:2c:b5:2f:81:28: 50:da:91:cf:a9:be:b4:e0:64:b5:5b:d6:23:4f:21:61:e9:53: 84:b0:da:73:ef:d1:aa:25:a3:77:b2:34:64:ca:30:3f:36:3e: 68:4e:ad:c6:4a:e9:fe:be:e8:fc:50:a4:ef:e2:ad:39:8a:7a: 51:0b:a4:30:c0:c2:3a:86:c6:5c:cf:56:ca:e1:29:d6:c8:d3: ce:03:4b:52:f5:0c:ed:dd:1d:11:4a:9b:91:6b:ec:ab:37:33: cc:f1:fc:2a:e8:51:16:d3:69:7e:f6:d1:54:d8:10:85:bc:60: 62:25:00:4f:59:27:fd:ab:ab:3e:97:02:0e:b4:02:b7:52:e2: 5e:9b:80:98:a0:ed:ce:d4:5a:f3:26:16:5c:9e:45:24:6f:fe: 72:d0:8a:71:e7:c2:4f:37:a2:90:4d:0f:46:0d:9e:3a:75:4f: 3b:91:34:fc:2f:92:f3:88:58:55:1f:d2:23:92:52:8f:92:5e: 1d:4e:ea:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNBEdEhDHDq/TMeIJIb3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMzAxMjEwMDQxWhcNMjYwMzAyMjEwMDQxWjAzMTEwLwYDVQQD Eyg2NmExZDNjYmI5Mzg2MGM1NTdhZjZlYTNmZGNmNGQzNGU0YTU4YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHJeg+Ulj06jwSgoixaCBJ8abbUV 46sunBo4nF3+xGrbMHIxjYEc+p3XYQYTw7kfrQnyLZ0OYZOWO5xfJiL4BVvULsAO J5E9Grvya6NbuAzL6WgyMbF9a4F6L/dg6MuGeJig72wmFf0G6EPzhoUgBWQXphfS bhMLzuzxQmjU7v+g84MBWSvBqbdEQMtoozC+rn0Q2zV1a2D4rk31ZCwt7RWaFlko G6HO+iLbLR5USC57Kn9EvWAiMML1rAYeSj/RjtZEOnY15MPcIxRRXiOOIwL4kv7G HEt+D9mL37h8K4Bhm9v+v5KnMFjKJuVRErIVsuCGqNGr1K5oOoK0qILD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGah08u5OGDFV69uo/3PTTTkpYpQMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRzCcAez 6Y+u76doAN5RI3v4bSISSunX3egFQjy6bINzHzjMk+gSHX/Sx51Cz7iyQrYFpfaS +hGDYmkGTtjOWpfUTSy1L4EoUNqRz6m+tOBktVvWI08hYelThLDac+/RqiWjd7I0 ZMowPzY+aE6txkrp/r7o/FCk7+KtOYp6UQukMMDCOobGXM9WyuEp1sjTzgNLUvUM 7d0dEUqbkWvsqzczzPH8KuhRFtNpfvbRVNgQhbxgYiUAT1kn/aurPpcCDrQCt1Li XpuAmKDtztRa8yYWXJ5FJG/+ctCKcefCTzeikE0PRg2eOnVPO5E0/C+S84hYVR/S I5JSj5JeHU7qrA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:08:44 2026 by rpki-client