$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: L02PlG39mACh4fFQraEV7QhPvcra2RfgWBBHQIcfGM4= Subject key identifier: F9:3B:41:3A:A6:42:25:3E:38:17:DC:C5:4D:DA:13:E6:96:9F:87:73 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019D9A06B3A81009F0A417784EA93BE4166B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1907 Signing time: Fri 17 Apr 2026 06:00:23 +0000 Manifest this update: Fri 17 Apr 2026 06:00:23 +0000 Manifest next update: Sat 18 Apr 2026 06:00:23 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: I-A5_1bs-Zrq29WUPc8DYT2pjtM.roa (hash: 7IMqVGok5Av3pf78GpAJeeU1UrrXUL/USwl5ojc30yk=) 6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: i28BnFVox9ZVADt9kwXVuwn+q5CiXP1u8cjyT+vH9Wg=) 11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:b3:a8:10:09:f0:a4:17:78:4e:a9:3b:e4:16:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Apr 17 06:00:23 2026 GMT Not After : Apr 18 06:00:23 2026 GMT Subject: CN=f93b413aa642253e3817dcc54dda13e6969f8773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:fb:43:ff:7e:a2:5b:d1:7a:45:2e:f4:86: d2:38:c4:52:42:6b:24:9f:57:2b:c2:bb:09:3e:16: ac:9b:70:52:d9:1f:14:61:cf:21:5b:b8:c2:b8:e6: d6:3b:97:d5:9f:b9:1e:5a:c5:9d:7a:ee:69:17:38: 35:0b:63:e8:d8:df:0e:5a:f6:56:0b:9f:43:f2:09: e0:e6:fc:45:80:8e:07:c4:54:f6:b4:1a:3f:e0:55: 50:30:49:0e:03:13:6c:53:a5:d9:d9:8d:f6:3b:6b: e1:7b:86:7c:04:43:2c:1c:20:6b:45:e7:a7:06:e6: 96:21:36:07:7e:bd:69:58:63:f2:8b:7c:c3:c7:4b: 2e:c5:df:76:f8:ef:3e:c2:82:87:95:c7:9e:ed:0e: 98:cf:1e:98:18:e7:5f:08:c1:1f:c1:e4:f4:b8:b0: 74:82:cc:c7:9d:76:b7:d7:73:5a:3a:ce:54:51:d3: d6:09:ad:4d:9c:e8:43:e2:4e:8b:cb:25:0e:03:8c: 33:10:28:83:41:0d:fe:1f:b9:c8:17:1e:3a:9a:a3: e5:df:17:29:e6:70:7f:49:ee:f2:6b:eb:6d:5d:b1: cd:a9:0b:f7:de:17:a0:ea:18:c3:12:f5:62:13:03: 95:ca:97:89:96:55:56:65:b2:29:89:a6:e5:f9:92: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3B:41:3A:A6:42:25:3E:38:17:DC:C5:4D:DA:13:E6:96:9F:87:73 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:25:db:1e:cf:cd:78:5f:03:a4:41:c5:28:15:6a:1e:59:67: bd:51:31:ec:d7:99:0c:ea:e4:a4:b3:fa:33:cf:35:84:e7:5f: f0:cf:4c:17:4d:77:ed:c0:a6:20:66:ba:1d:b5:ce:d5:b8:d7: 60:6c:cc:02:96:04:4e:f7:7d:96:d0:66:34:73:4d:09:c8:39: bc:48:f7:6b:e9:2c:58:cb:47:cc:6d:a8:cf:2b:c6:b1:a8:88: c2:d1:5b:ed:9d:f4:41:6c:8a:8d:00:e1:20:74:9e:92:84:da: 82:cc:5d:d5:69:ba:98:0b:f1:95:05:c7:10:66:21:f7:6d:b8: 0f:7e:c9:e0:e1:ca:02:03:40:15:52:9d:2b:f5:94:5b:15:7b: f9:41:cc:31:23:da:09:8c:cf:50:23:5e:ad:09:f2:83:0b:8b: 75:dd:21:fc:64:78:c2:1a:fe:12:24:7c:25:46:d1:57:3c:22: 77:76:ad:c1:8e:77:cb:07:4a:b9:14:21:c0:55:26:06:07:e7: fc:51:34:39:1a:bf:d3:e5:cd:3f:38:3c:09:63:24:e9:73:61: e9:b1:de:d2:1f:86:c7:b6:dc:2c:64:65:d7:ab:de:ce:5c:68: 2b:54:d5:4d:d2:b6:ea:4c:de:1a:69:3b:50:02:b3:04:6f:f2: 2b:84:50:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBrOoEAnwpBd4Tqk75BZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwNDE3MDYwMDIzWhcNMjYwNDE4MDYwMDIzWjAzMTEwLwYDVQQD EyhmOTNiNDEzYWE2NDIyNTNlMzgxN2RjYzU0ZGRhMTNlNjk2OWY4NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9H7Q/9+olvRekUu9IbSOMRSQmsk n1crwrsJPhasm3BS2R8UYc8hW7jCuObWO5fVn7keWsWdeu5pFzg1C2Po2N8OWvZW C59D8gng5vxFgI4HxFT2tBo/4FVQMEkOAxNsU6XZ2Y32O2vhe4Z8BEMsHCBrReen BuaWITYHfr1pWGPyi3zDx0suxd92+O8+woKHlcee7Q6Yzx6YGOdfCMEfweT0uLB0 gszHnXa313NaOs5UUdPWCa1NnOhD4k6LyyUOA4wzECiDQQ3+H7nIFx46mqPl3xcp 5nB/Se7ya+ttXbHNqQv33heg6hjDEvViEwOVypeJllVWZbIpiabl+ZIi0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk7QTqmQiU+OBfcxU3aE+aWn4dzMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSXbHs/N eF8DpEHFKBVqHllnvVEx7NeZDOrkpLP6M881hOdf8M9MF0137cCmIGa6HbXO1bjX YGzMApYETvd9ltBmNHNNCcg5vEj3a+ksWMtHzG2ozyvGsaiIwtFb7Z30QWyKjQDh IHSekoTagsxd1Wm6mAvxlQXHEGYh9224D37J4OHKAgNAFVKdK/WUWxV7+UHMMSPa CYzPUCNerQnygwuLdd0h/GR4whr+EiR8JUbRVzwid3atwY53ywdKuRQhwFUmBgfn /FE0ORq/0+XNPzg8CWMk6XNh6bHe0h+Gx7bcLGRl16vezlxoK1TVTdK26kzeGmk7 UAKzBG/yK4RQtg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:59:26 2026 by rpki-client