$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: nZLlwKThAs8U3UWDqweN0oIDFj4gZnQ42qUDuJxuOPM= Subject key identifier: F8:E9:57:11:97:F7:52:7C:13:71:C5:76:18:59:26:E3:85:77:E9:46 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019CABD9A08C8996779753C81E1BA3CC1A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 157D Signing time: Mon 02 Mar 2026 00:01:32 +0000 Manifest this update: Mon 02 Mar 2026 00:01:32 +0000 Manifest next update: Tue 03 Mar 2026 00:01:32 +0000 Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=) 2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=) 3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=) 4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=) 5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=) 6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=) 7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=) 8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: 7RpK2kyxwsHjdy15Pdt8nuhYhm14jnolTvlyh1Irpsc=) 9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=) 10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=) 11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=) 12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=) 13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:a0:8c:89:96:77:97:53:c8:1e:1b:a3:cc:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Mar 2 00:01:32 2026 GMT Not After : Mar 3 00:01:32 2026 GMT Subject: CN=f8e9571197f7527c1371c576185926e38577e946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:33:22:1e:69:47:9f:55:7b:d7:85:6e:62: 1f:a9:0f:f0:89:5d:69:d6:27:59:a3:29:1e:29:41: e8:94:6d:c8:f2:0b:c4:bf:40:1d:6a:db:d9:d0:f1: ea:f4:c8:b2:24:a4:0c:fc:35:94:fa:3e:7a:8a:5b: 9a:c5:07:5a:be:1c:f4:6a:fd:ca:4e:3b:ce:6c:e7: 9a:21:d8:69:27:0f:6f:40:fe:22:92:73:ef:aa:11: 59:7e:44:a4:22:dd:91:33:4f:51:b9:db:09:b3:e2: 64:36:9c:57:17:d2:bf:c9:cc:96:ec:d4:48:be:75: ef:6f:8c:90:9c:22:5b:71:44:46:ab:a1:94:ae:5a: 39:77:4c:20:b2:92:79:5c:f0:31:4b:d4:df:07:77: 91:7f:1c:90:6b:f4:21:22:da:04:cf:56:00:82:ea: 97:4a:12:64:64:4a:b2:6e:f5:ef:a0:a1:ba:aa:15: 27:46:b2:9c:f3:69:3d:a5:82:3e:79:8e:95:51:5f: 63:ea:52:ea:52:00:c3:c4:a6:99:3d:99:8f:6d:71: c0:17:6b:50:df:34:5a:4b:cc:50:09:a5:ab:4a:48: d1:7c:14:6f:04:f2:d6:41:8a:cf:c3:98:8f:40:46: ff:45:d0:ff:88:6a:ba:2e:a9:a5:b1:2e:00:35:b7: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E9:57:11:97:F7:52:7C:13:71:C5:76:18:59:26:E3:85:77:E9:46 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:73:d5:c6:7b:d0:8b:b6:d5:4c:00:be:81:b7:0d:19:c9:31: fe:07:c5:9c:3c:d6:2b:71:5f:2b:c7:b0:fe:88:91:ab:b8:ec: 1c:2d:d0:0f:72:ee:42:e8:04:07:f9:3e:54:70:60:36:a3:6b: e8:f4:91:60:73:ed:04:98:6a:8b:87:79:04:ab:92:f0:9b:71: e5:20:9f:8e:0b:96:61:6e:46:f5:a1:58:67:6a:da:45:9b:7e: 5e:69:62:98:33:09:1e:75:ed:11:79:18:81:38:4a:2b:00:4e: 64:9a:f2:1f:09:19:45:fc:dc:47:44:60:fb:c0:74:de:6f:03: a6:e0:e7:c3:90:82:c1:64:e5:9f:37:6d:4e:f5:0b:59:e9:9f: 2f:9c:39:9d:53:40:97:42:ea:80:63:eb:f5:04:f8:63:97:e8: 7f:6c:5f:0b:6d:a1:f4:31:19:31:40:be:92:6f:5e:53:c0:8a: 81:ca:65:b5:8d:57:0f:db:2c:16:06:d3:dc:dd:e9:66:85:69: af:e7:c7:5f:03:08:29:03:77:de:1a:7b:9f:ab:d2:61:31:62: 65:3a:e2:52:07:00:50:35:59:f3:5e:db:41:ff:9b:40:84:0b: 52:ce:c2:49:39:a4:92:b7:20:e6:ba:47:4c:5c:08:d4:4d:6a: cd:2c:39:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2aCMiZZ3l1PIHhujzBogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjYwMzAyMDAwMTMyWhcNMjYwMzAzMDAwMTMyWjAzMTEwLwYDVQQD EyhmOGU5NTcxMTk3Zjc1MjdjMTM3MWM1NzYxODU5MjZlMzg1NzdlOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKIzIh5pR59Ve9eFbmIfqQ/wiV1p 1idZoykeKUHolG3I8gvEv0AdatvZ0PHq9MiyJKQM/DWU+j56iluaxQdavhz0av3K TjvObOeaIdhpJw9vQP4iknPvqhFZfkSkIt2RM09RudsJs+JkNpxXF9K/ycyW7NRI vnXvb4yQnCJbcURGq6GUrlo5d0wgspJ5XPAxS9TfB3eRfxyQa/QhItoEz1YAguqX ShJkZEqybvXvoKG6qhUnRrKc82k9pYI+eY6VUV9j6lLqUgDDxKaZPZmPbXHAF2tQ 3zRaS8xQCaWrSkjRfBRvBPLWQYrPw5iPQEb/RdD/iGq6LqmlsS4ANbfB1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjpVxGX91J8E3HFdhhZJuOFd+lGMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXPVxnvQ i7bVTAC+gbcNGckx/gfFnDzWK3FfK8ew/oiRq7jsHC3QD3LuQugEB/k+VHBgNqNr 6PSRYHPtBJhqi4d5BKuS8Jtx5SCfjguWYW5G9aFYZ2raRZt+XmlimDMJHnXtEXkY gThKKwBOZJryHwkZRfzcR0Rg+8B03m8DpuDnw5CCwWTlnzdtTvULWemfL5w5nVNA l0LqgGPr9QT4Y5fof2xfC22h9DEZMUC+km9eU8CKgcpltY1XD9ssFgbT3N3pZoVp r+fHXwMIKQN33hp7n6vSYTFiZTriUgcAUDVZ817bQf+bQIQLUs7CSTmkkrcg5rpH TFwI1E1qzSw5vQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:12 2026 by rpki-client