$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: 24dkTbrc0ThAPthkW4E2d5cLUhGHHO89qgyOylkQF28= Subject key identifier: AF:3C:82:1C:F1:98:2C:BF:91:55:CA:72:B7:AB:F3:F1:09:94:00:72 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 01A0C6A0AC8F1D71B896F33D8D81C1E8BE22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1AAE Signing time: Tue 22 Sep 2026 01:00:13 +0000 Manifest this update: Tue 22 Sep 2026 01:00:13 +0000 Manifest next update: Wed 23 Sep 2026 01:00:13 +0000 Files and hashes: 1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=) 2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=) 3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=) 4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=) 5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=) 6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=) 7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=) 8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: MrZ2ht1WinH4FV8m4C3RSu3SMWr/crvskxpEtO4HGdY=) 10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=) 11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=) 12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=) 13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=) 14: bIT3IKoer-jZOwqexvz80un01Ag.roa (hash: nkHH/tm6q2tYfS61XXMRcKDcBRWbEe3yQxisNF7ABDo=) 15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=) 16: sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa (hash: 7N9kbNVvBQfZIqrrEUMiDoe5nVwGSES4cx8TzWr1eCA=) 17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:a0:ac:8f:1d:71:b8:96:f3:3d:8d:81:c1:e8:be:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Sep 22 01:00:13 2026 GMT Not After : Sep 23 01:00:13 2026 GMT Subject: CN=af3c821cf1982cbf9155ca72b7abf3f109940072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:8e:e6:39:b0:1f:cd:d1:7d:80:c7:95:04: d0:a3:ef:e6:da:f1:ff:bf:23:76:dd:57:79:7b:2e: 9e:a6:57:17:e0:d8:bf:50:f3:e0:4d:fc:09:8d:71: 40:53:7c:3e:03:34:3a:af:21:ad:c4:63:e8:ab:8a: a5:ea:9a:c4:e8:7f:04:dd:ec:02:5c:7c:08:26:1d: 16:62:a5:a1:ca:ed:d7:06:b3:24:67:47:22:42:70: 56:1c:38:a2:53:a7:ad:85:ce:cc:2b:4a:3e:84:58: 6e:3a:87:f6:b7:56:52:41:cb:10:fc:73:4a:9b:33: 02:0f:44:d3:5f:62:2c:2a:87:bc:83:b9:37:58:a6: 95:91:73:30:2b:5e:a1:f6:bd:48:69:09:c6:07:01: ea:56:9f:83:11:c0:e7:d5:dc:c6:9a:aa:6d:36:33: dd:77:a6:2f:8b:05:46:36:b1:7e:a0:bf:14:db:75: 6c:2b:12:51:f0:f9:74:4c:58:b4:49:fb:18:c8:b6: 10:54:1a:c0:b4:7b:bc:89:27:e9:53:b1:64:47:b2: 49:fa:62:93:24:5d:9e:e7:ae:67:dd:40:e3:1c:b9: 85:de:8e:7a:93:31:9a:65:81:b4:c4:c9:63:a4:0e: 4c:a0:0c:fa:0b:fc:1b:ba:de:5d:52:52:b4:5c:9f: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:82:1C:F1:98:2C:BF:91:55:CA:72:B7:AB:F3:F1:09:94:00:72 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:90:28:87:71:af:c7:22:af:07:ad:d1:c3:02:45:fb:a9:1c: e6:d4:63:d2:fb:ff:00:fc:96:dd:fe:e2:99:3a:36:4e:bc:eb: a1:b2:37:b9:4c:d5:ca:81:8e:94:a8:2d:6b:0d:e6:a2:43:59: 47:c9:5a:c5:b6:f9:7f:f2:1a:ef:6e:61:fd:10:ae:7b:0d:bf: f3:4b:6a:bf:c7:20:bb:d5:e4:be:4e:a3:f9:55:3c:2d:eb:f9: c4:51:79:71:86:a4:da:40:8f:8a:44:3b:66:87:b6:4a:8e:54: ba:9b:55:d0:a4:53:f9:b2:8e:94:f9:e4:e3:47:c8:c1:b0:97: ab:da:1b:b6:27:0a:12:89:e9:f4:1c:89:c5:c0:5e:ae:81:24: 5f:39:dc:f6:f9:f9:26:f8:26:c5:20:05:44:9d:c0:44:2b:be: 1c:dc:c3:54:04:b0:d8:5e:e0:21:63:48:3e:cf:0d:a3:6c:69: 68:09:af:ac:22:ce:32:5e:6c:c2:fa:1c:a4:5c:7d:34:12:40: 27:6a:40:ed:d8:f3:da:68:49:2f:08:0d:68:49:d1:0a:7a:94: 95:48:fa:70:b2:86:5d:ec:b9:48:b5:ff:33:bd:7a:38:3c:ad: 63:53:5f:bc:6f:24:af:6f:bb:f0:65:9c:32:7a:85:06:af:df: 68:44:6d:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGoKyPHXG4lvM9jYHB6L4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwOTIyMDEwMDEzWhcNMjYwOTIzMDEwMDEzWjAzMTEwLwYDVQQD EyhhZjNjODIxY2YxOTgyY2JmOTE1NWNhNzJiN2FiZjNmMTA5OTQwMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgCO5jmwH83RfYDHlQTQo+/m2vH/ vyN23Vd5ey6eplcX4Ni/UPPgTfwJjXFAU3w+AzQ6ryGtxGPoq4ql6prE6H8E3ewC XHwIJh0WYqWhyu3XBrMkZ0ciQnBWHDiiU6ethc7MK0o+hFhuOof2t1ZSQcsQ/HNK mzMCD0TTX2IsKoe8g7k3WKaVkXMwK16h9r1IaQnGBwHqVp+DEcDn1dzGmqptNjPd d6YviwVGNrF+oL8U23VsKxJR8Pl0TFi0SfsYyLYQVBrAtHu8iSfpU7FkR7JJ+mKT JF2e565n3UDjHLmF3o56kzGaZYG0xMljpA5MoAz6C/wbut5dUlK0XJ+uawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK88ghzxmCy/kVXKcrer8/EJlAByMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZAoh3Gv xyKvB63RwwJF+6kc5tRj0vv/APyW3f7imTo2TrzrobI3uUzVyoGOlKgtaw3mokNZ R8laxbb5f/Ia725h/RCuew2/80tqv8cgu9Xkvk6j+VU8Lev5xFF5cYak2kCPikQ7 Zoe2So5UuptV0KRT+bKOlPnk40fIwbCXq9obticKEonp9ByJxcBeroEkXznc9vn5 JvgmxSAFRJ3ARCu+HNzDVASw2F7gIWNIPs8No2xpaAmvrCLOMl5swvocpFx9NBJA J2pA7djz2mhJLwgNaEnRCnqUlUj6cLKGXey5SLX/M716ODytY1NfvG8kr2+78GWc MnqFBq/faERtUQ== -----END CERTIFICATE-----Generated at Tue Sep 22 12:11:29 2026 by rpki-client