$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: KvpIYDSGRicCXlO7DyNMXFNW309u9eAlKbURWNMg12w= Subject key identifier: 04:4B:2C:76:0A:54:27:08:03:F1:C3:C4:DC:EB:E9:52:68:5B:97:55 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019CAC7DB4A782A7B1A1E96FCAE8F6DF09C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1883 Signing time: Mon 02 Mar 2026 03:00:45 +0000 Manifest this update: Mon 02 Mar 2026 03:00:45 +0000 Manifest next update: Tue 03 Mar 2026 03:00:45 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: J7rQibY3a8-MeIzjHxJ_un-Q56k.roa (hash: KfYp7j0f60mC69NVOXIfMLH4hMu/T36lhK6azRv6oDs=) 6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: 3b4HMY9Ps4SDOR9n0uzV78SUBaIdpHw1oZHNHdLd+JY=) 11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7d:b4:a7:82:a7:b1:a1:e9:6f:ca:e8:f6:df:09:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Mar 2 03:00:45 2026 GMT Not After : Mar 3 03:00:45 2026 GMT Subject: CN=044b2c760a54270803f1c3c4dcebe952685b9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:a0:37:b2:6d:47:6b:03:b5:04:67:ea:f4: 98:11:75:28:c9:f6:56:40:e4:d5:4e:d9:a9:0a:f5: b8:f3:0b:99:44:7c:e4:91:9b:37:61:8b:8f:83:24: c4:d8:66:96:e0:09:d8:37:13:f1:61:c0:f5:ed:3e: 80:e6:3f:11:84:d7:1d:ba:59:65:a4:94:d7:6e:3d: fb:d1:bf:b0:11:69:d7:bf:3f:76:ff:0c:99:9b:f8: 76:7a:6c:f4:8a:c0:f9:0f:42:5b:dc:a0:2a:2e:d1: 2f:c7:48:a3:23:41:b7:8e:7e:e5:cd:2b:f6:06:97: 98:dc:2a:7a:f4:79:84:27:35:bb:5f:64:c1:35:46: 29:ea:15:ad:e9:79:3c:90:2a:e2:e0:4e:e0:86:83: 8a:70:c0:b5:f0:7c:82:6e:3a:3e:99:e9:8a:96:f8: d9:7d:ab:c2:8e:c6:b0:94:75:94:98:9f:b7:47:b7: 9d:26:b9:97:2f:fd:6f:76:f3:ba:11:6c:fc:57:5e: 4d:a9:74:b3:91:f1:88:98:27:27:8c:7d:8e:6d:1b: 1d:a2:d3:6f:09:cc:03:f5:39:bb:21:38:86:3b:e0: 08:c2:70:4b:a3:36:1c:56:5a:a9:59:2d:8c:b0:5a: 9b:0e:02:e8:46:5f:67:b9:af:ab:65:44:72:37:9e: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4B:2C:76:0A:54:27:08:03:F1:C3:C4:DC:EB:E9:52:68:5B:97:55 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9c:d6:0d:2a:a5:06:6c:13:69:69:0f:da:db:33:e6:b1:58: 2e:8e:bb:1d:d9:02:cc:8a:1e:22:8f:33:4d:82:a5:29:59:2b: b2:d2:52:3f:7d:37:b3:6c:bd:a5:b9:0f:0d:55:82:6c:99:4b: d9:99:ce:43:06:38:0a:0c:91:dd:53:be:e1:2d:a2:a5:53:9a: 11:2b:62:75:e6:24:16:d0:8c:8f:31:0a:58:e4:37:4e:fb:6a: bc:82:5c:f0:89:5d:04:a4:ee:a4:bc:8d:ce:dd:b0:3b:b5:c2: f5:93:e1:9a:ce:f2:a2:91:e9:fe:7a:b6:3b:73:70:94:a7:65: ab:48:ee:a0:19:5d:3f:0e:09:53:68:81:c1:4d:fd:25:d6:47: 50:ff:0d:7c:ac:f6:d7:53:2b:43:5c:f0:6e:d0:71:88:c9:36: d3:f9:07:a0:ab:35:a6:8d:e0:b4:b9:6e:dc:9b:50:18:c7:b2: 0a:b0:de:de:ad:09:42:4e:3a:d1:09:cf:40:bf:33:2c:c1:22: 5a:43:27:66:9e:a5:55:4d:26:3f:8f:da:8d:4e:92:bd:7f:e6: ba:ce:cf:60:62:d1:f8:b7:24:97:1b:ff:bc:9b:68:e5:11:e1: a3:28:9c:a5:f4:c1:96:f4:46:49:6e:fc:7b:82:d5:22:6a:28: b2:5c:c6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfbSngqexoelvyuj23wnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMzAyMDMwMDQ1WhcNMjYwMzAzMDMwMDQ1WjAzMTEwLwYDVQQD EygwNDRiMmM3NjBhNTQyNzA4MDNmMWMzYzRkY2ViZTk1MjY4NWI5NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIGgN7JtR2sDtQRn6vSYEXUoyfZW QOTVTtmpCvW48wuZRHzkkZs3YYuPgyTE2GaW4AnYNxPxYcD17T6A5j8RhNcdulll pJTXbj370b+wEWnXvz92/wyZm/h2emz0isD5D0Jb3KAqLtEvx0ijI0G3jn7lzSv2 BpeY3Cp69HmEJzW7X2TBNUYp6hWt6Xk8kCri4E7ghoOKcMC18HyCbjo+memKlvjZ favCjsawlHWUmJ+3R7edJrmXL/1vdvO6EWz8V15NqXSzkfGImCcnjH2ObRsdotNv CcwD9Tm7ITiGO+AIwnBLozYcVlqpWS2MsFqbDgLoRl9nua+rZURyN54eOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARLLHYKVCcIA/HDxNzr6VJoW5dVMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZzWDSql BmwTaWkP2tsz5rFYLo67HdkCzIoeIo8zTYKlKVkrstJSP303s2y9pbkPDVWCbJlL 2ZnOQwY4CgyR3VO+4S2ipVOaEStideYkFtCMjzEKWOQ3TvtqvIJc8IldBKTupLyN zt2wO7XC9ZPhms7yopHp/nq2O3NwlKdlq0juoBldPw4JU2iBwU39JdZHUP8NfKz2 11MrQ1zwbtBxiMk20/kHoKs1po3gtLlu3JtQGMeyCrDe3q0JQk460QnPQL8zLMEi WkMnZp6lVU0mP4/ajU6SvX/mus7PYGLR+Lcklxv/vJto5RHhoyicpfTBlvRGSW78 e4LVImooslzGbg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:42 2026 by rpki-client