$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: HEXDGQN93dGDYn5FJtci+o0S068SpHJOifl4fVho8NA= Subject key identifier: 35:BE:5A:0F:D4:BE:25:F5:7A:C8:6A:4E:08:C5:44:DC:28:24:1D:51 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019D9B5165AC370624CCE4480DF7F7BE7EE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 15F9 Signing time: Fri 17 Apr 2026 12:01:35 +0000 Manifest this update: Fri 17 Apr 2026 12:01:35 +0000 Manifest next update: Sat 18 Apr 2026 12:01:35 +0000 Files and hashes: 1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=) 2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=) 3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=) 4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=) 5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=) 6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=) 7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=) 8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: ehqX4PDiV8tUXI5mw+fCwCum86VhaXNbtBQOvtGEV1U=) 9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=) 10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=) 11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=) 12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=) 13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:51:65:ac:37:06:24:cc:e4:48:0d:f7:f7:be:7e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Apr 17 12:01:35 2026 GMT Not After : Apr 18 12:01:35 2026 GMT Subject: CN=35be5a0fd4be25f57ac86a4e08c544dc28241d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:ec:06:0a:c2:62:1d:49:51:19:22:d6:fc: 8d:4f:9d:7e:47:53:28:47:48:4a:57:57:94:65:93: 96:36:3c:d4:fd:89:65:c0:ae:5a:01:b2:27:34:6b: ce:5b:b5:ed:77:48:9e:a7:68:55:95:59:0b:b0:b3: 95:bb:17:c9:bf:fc:c8:d9:fd:5b:bc:18:d9:9a:bd: 89:0c:9f:87:af:1f:db:45:f6:61:5e:8b:dd:30:52: 78:08:0b:fd:38:80:09:78:0b:61:78:cd:e9:e8:13: cf:86:c5:d6:68:11:d0:d9:1a:44:ad:d8:d6:6f:d2: a3:fd:10:21:79:05:dd:fb:56:ca:49:b5:8d:ab:6d: a3:3c:4c:63:2f:a5:ad:70:47:b5:7b:1e:ef:7f:92: 52:3f:a9:6e:d0:67:c0:52:fd:c4:90:62:a4:cb:4a: 1f:00:f1:f6:5c:d0:de:1d:f0:aa:58:4f:72:e4:f2: 96:39:57:7c:78:5b:a1:3e:5c:2b:82:da:b3:1c:39: 68:9d:2d:0a:4c:c0:de:a9:33:09:72:be:84:f8:f9: b3:d1:9d:a8:97:22:ce:6c:9f:62:4d:92:43:74:f5: 32:5b:e4:86:ba:07:9f:15:e3:73:b8:49:75:0a:f2: f0:d8:d3:66:2b:25:88:40:86:9a:74:da:af:8a:11: 60:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BE:5A:0F:D4:BE:25:F5:7A:C8:6A:4E:08:C5:44:DC:28:24:1D:51 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:77:50:72:29:9b:ca:f7:cf:e2:e0:b6:a8:db:a0:01:8b:85: 16:57:31:3a:2a:76:00:47:ed:f0:cc:57:a5:87:9c:e8:3b:b7: 45:95:15:bc:9f:e6:13:be:53:9c:5e:0e:96:4f:2d:bc:00:b7: 32:1f:ac:13:3b:aa:ec:b9:73:d1:34:b1:ad:5f:08:84:9a:e0: 98:1b:22:85:06:7d:f3:7c:ac:2b:a6:8a:18:f2:90:e9:b7:59: fa:74:2c:ef:e3:90:29:d2:f2:94:64:00:fa:31:5a:62:92:70: 5b:6b:5f:24:c0:93:ef:f3:c8:3f:ca:3c:52:82:a1:46:b1:5b: 36:fb:65:43:71:0c:ac:de:55:76:fd:24:96:b6:ee:5d:3d:3b: 5e:00:9d:f8:c3:dc:f6:26:08:80:6b:1c:09:89:b7:cb:6a:71: 25:d9:7e:1a:1b:1a:c0:5e:be:7e:18:0b:32:b4:61:41:e9:49: cf:e3:d6:53:b8:02:e9:74:c3:22:83:2b:b4:28:8a:ba:41:2b: 18:f0:a4:b5:b4:82:e6:8e:69:18:4c:ab:3e:c7:59:83:76:0b: 3d:b9:6c:fd:76:cd:0f:d9:c0:4d:60:ab:42:ed:9d:5c:7c:22: a6:e6:f8:86:80:ff:bb:ea:a5:0d:b7:98:b4:1a:9f:05:1f:83: 9d:28:90:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUWWsNwYkzORIDff3vn7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjYwNDE3MTIwMTM1WhcNMjYwNDE4MTIwMTM1WjAzMTEwLwYDVQQD EygzNWJlNWEwZmQ0YmUyNWY1N2FjODZhNGUwOGM1NDRkYzI4MjQxZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy53sBgrCYh1JURki1vyNT51+R1Mo R0hKV1eUZZOWNjzU/YllwK5aAbInNGvOW7Xtd0iep2hVlVkLsLOVuxfJv/zI2f1b vBjZmr2JDJ+Hrx/bRfZhXovdMFJ4CAv9OIAJeAtheM3p6BPPhsXWaBHQ2RpErdjW b9Kj/RAheQXd+1bKSbWNq22jPExjL6WtcEe1ex7vf5JSP6lu0GfAUv3EkGKky0of APH2XNDeHfCqWE9y5PKWOVd8eFuhPlwrgtqzHDlonS0KTMDeqTMJcr6E+Pmz0Z2o lyLObJ9iTZJDdPUyW+SGugefFeNzuEl1CvLw2NNmKyWIQIaadNqvihFgjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW+Wg/UviX1eshqTgjFRNwoJB1RMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHdQcimb yvfP4uC2qNugAYuFFlcxOip2AEft8MxXpYec6Du3RZUVvJ/mE75TnF4Olk8tvAC3 Mh+sEzuq7Llz0TSxrV8IhJrgmBsihQZ983ysK6aKGPKQ6bdZ+nQs7+OQKdLylGQA +jFaYpJwW2tfJMCT7/PIP8o8UoKhRrFbNvtlQ3EMrN5Vdv0klrbuXT07XgCd+MPc 9iYIgGscCYm3y2pxJdl+GhsawF6+fhgLMrRhQelJz+PWU7gC6XTDIoMrtCiKukEr GPCktbSC5o5pGEyrPsdZg3YLPbls/XbND9nATWCrQu2dXHwipub4hoD/u+qlDbeY tBqfBR+DnSiQWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:57:56 2026 by rpki-client