$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft File: WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json) Hash identifier: y0Zzdu0ICMwPIkpTssFoTDCVViNI8M6cYMWgrgSBH44= Subject key identifier: B5:93:41:46:8D:F4:C4:55:44:4D:BE:12:DC:57:81:E5:21:3E:4C:01 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 01A0C557AA62997D9810792BE2623354D96F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft Manifest number: 0B24 Signing time: Mon 21 Sep 2026 19:00:51 +0000 Manifest this update: Mon 21 Sep 2026 19:00:51 +0000 Manifest next update: Tue 22 Sep 2026 19:00:51 +0000 Files and hashes: 1: 0dzMjSKpRUY-44bFET_xjKmLZqk.roa (hash: /gL+2fvCjluGjnsuF06+e5Fr7aGlLRVjmYErYPuCpqc=) 2: 4CeETaDbMmlemWxGvvx0_WuaR08.roa (hash: Ihn6EFoGwfYZmijHSSAZ4/aOa56nJlt5ht+N8FXjtEs=) 3: 8ojHQg-5gn_Du7oteDU3y4gT3eo.roa (hash: i3m9CQuoZX6ywBrI0Ffbx9GRfJOG6PI2xg9iGzfKe/A=) 4: 9kaVTL-pQ2rDV2PSl0bgS_1vqrU.roa (hash: EVjfUOUimz3ybXSCJhjw0hH765mxqtHAnIuPVQGkWyE=) 5: K6psmvZj1dJm7rliy5tYSDkTGdI.roa (hash: ZUvNgSUKEBT7X30ekbcvLFsOKUeEximzhtI2xJnlNKI=) 6: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=) 7: Q3cm2W0FVitcQ58MNaFESLwNN4Q.roa (hash: snhjG0znQuL325FYjOGMzM707T/q+eR3KKmJ5znNIww=) 8: VrZ9rG6buBYTfiaRnNlU6n31R3c.roa (hash: 7/go8CgCRjYxli0+HMN3QK5vnEPd4uxzc3aK0gMIrN8=) 9: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: aPFswqlfXOvAE82m5VpJEpTeXfAQEai7T1SIrNI4JfE=) 10: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=) 11: y1Md-fjS1Mk9fN43V73-ZmrWHYI.roa (hash: YXs0OmfBDY7UMYspxzzwXIRX/OhefbkSgpo07DTddKk=) 12: ypY7s36zWHILvulq23bGKuZ2o9c.roa (hash: C7Mvcwm1E9gnD0gQMleTivJ/u9MHNliPR2TgXm18Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:57:aa:62:99:7d:98:10:79:2b:e2:62:33:54:d9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Sep 21 19:00:51 2026 GMT Not After : Sep 22 19:00:51 2026 GMT Subject: CN=b59341468df4c455444dbe12dc5781e5213e4c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:49:71:8c:98:f9:60:37:91:b1:e6:67:27: f1:09:02:fe:a3:70:a5:ad:9f:34:db:04:04:68:71: d5:98:79:a7:2e:bf:f6:98:2b:3d:fc:c3:89:2a:ed: d8:32:ac:d3:19:89:fe:0e:f9:e2:82:4d:48:bc:c3: cf:7f:fd:02:5d:82:39:20:4a:11:2c:cc:6a:17:ac: 3f:8d:59:2a:86:8d:8e:7c:a5:e1:59:9b:69:93:1d: eb:13:b5:66:7a:49:1e:69:4e:6d:7a:09:93:c4:10: e5:ec:b1:21:d1:21:7b:c2:92:85:87:c8:42:ea:e6: 29:69:8a:d9:ca:fe:98:09:5d:28:95:c8:51:fd:fe: 2c:8f:d3:38:f7:9e:b9:22:cc:b5:1c:2b:56:25:b4: 4a:16:19:01:9a:da:8a:a7:bc:b7:33:0b:6e:a9:b8: 30:c8:d8:3a:95:b0:18:9d:4b:7e:3f:22:92:d9:c7: 62:ff:53:07:6f:69:cc:eb:4e:49:9a:a7:58:82:78: 4b:a3:e3:db:f2:cc:ce:99:11:09:80:7f:d5:66:1c: 89:47:d4:24:49:00:6c:b3:10:bc:3b:66:e9:9a:b2: df:c6:92:ff:38:3e:ad:78:53:02:b2:af:d8:49:e4: a9:b6:f7:bd:a2:8e:87:fb:cc:ca:c7:13:6c:a2:c8: 93:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:93:41:46:8D:F4:C4:55:44:4D:BE:12:DC:57:81:E5:21:3E:4C:01 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0e:29:71:55:1c:16:70:46:ce:e4:5d:db:bd:ec:1c:7d:54: 09:4a:87:2a:24:a5:4c:33:60:f8:9a:bd:b2:a1:13:15:ba:57: dc:ec:39:9d:dd:55:21:3e:94:80:12:77:ea:39:bc:e0:e0:b4: 29:07:c3:6a:d2:87:68:75:ba:13:36:1a:84:62:0a:e9:f9:99: b1:bc:3c:ab:37:7b:fb:98:1b:93:8c:76:3e:ad:fa:af:40:f2: 2b:2f:2a:0c:1e:33:4b:23:11:fb:9a:50:5a:60:a6:07:b0:91: 25:0a:1a:ac:e7:1a:b0:74:71:80:08:8e:fa:f4:b9:7e:f2:94: c8:ce:e7:31:17:ea:1f:c4:59:81:ea:4f:29:05:34:a7:04:20: c0:ff:14:7b:1d:50:b2:d9:f9:11:3c:d7:04:c9:d6:a9:22:a8: dc:41:a3:c7:cd:b9:8c:16:7f:22:fe:c7:34:63:88:ee:f3:76: 76:23:16:45:8d:f3:f0:a1:f0:8b:9a:76:59:8c:89:f5:5b:68: 6b:3f:ab:7d:80:53:b5:a4:cc:78:e2:e8:16:d2:de:08:b4:e2: 82:1b:cd:6d:bc:0a:e4:2c:10:e9:9b:56:56:2e:de:76:e1:ca: 71:ae:e4:92:83:19:88:5a:89:ea:ee:92:66:f7:89:b0:89:fa: 57:0a:b6:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFV6pimX2YEHkr4mIzVNlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwOTIxMTkwMDUxWhcNMjYwOTIyMTkwMDUxWjAzMTEwLwYDVQQD EyhiNTkzNDE0NjhkZjRjNDU1NDQ0ZGJlMTJkYzU3ODFlNTIxM2U0YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzpJcYyY+WA3kbHmZyfxCQL+o3Cl rZ802wQEaHHVmHmnLr/2mCs9/MOJKu3YMqzTGYn+Dvnigk1IvMPPf/0CXYI5IEoR LMxqF6w/jVkqho2OfKXhWZtpkx3rE7VmekkeaU5tegmTxBDl7LEh0SF7wpKFh8hC 6uYpaYrZyv6YCV0olchR/f4sj9M49565Isy1HCtWJbRKFhkBmtqKp7y3Mwtuqbgw yNg6lbAYnUt+PyKS2cdi/1MHb2nM605JmqdYgnhLo+Pb8szOmREJgH/VZhyJR9Qk SQBssxC8O2bpmrLfxpL/OD6teFMCsq/YSeSptve9oo6H+8zKxxNsosiTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWTQUaN9MRVRE2+EtxXgeUhPkwBMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ4pcVUc FnBGzuRd273sHH1UCUqHKiSlTDNg+Jq9sqETFbpX3Ow5nd1VIT6UgBJ36jm84OC0 KQfDatKHaHW6EzYahGIK6fmZsbw8qzd7+5gbk4x2Pq36r0DyKy8qDB4zSyMR+5pQ WmCmB7CRJQoarOcasHRxgAiO+vS5fvKUyM7nMRfqH8RZgepPKQU0pwQgwP8Uex1Q stn5ETzXBMnWqSKo3EGjx825jBZ/Iv7HNGOI7vN2diMWRY3z8KHwi5p2WYyJ9Vto az+rfYBTtaTMeOLoFtLeCLTighvNbbwK5CwQ6ZtWVi7eduHKca7kkoMZiFqJ6u6S ZveJsIn6Vwq2dw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:18 2026 by rpki-client