$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: NDeJZ/TyW50ZJsHu5ETG4W2LKud3JPhnvwvu5MDgKPo= Subject key identifier: 02:DA:A9:89:81:7C:4E:7B:2D:69:CE:0C:3D:AE:73:C4:AA:88:DB:2B Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019E1D2314BA172B9C96B9CC3CDB761A92F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 1173 Signing time: Tue 12 May 2026 17:01:38 +0000 Manifest this update: Tue 12 May 2026 17:01:38 +0000 Manifest next update: Wed 13 May 2026 17:01:38 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 68tNSd50XMxUCzXDNykaNcM7mDdqRZ7812eFtdjVEtY=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:23:14:ba:17:2b:9c:96:b9:cc:3c:db:76:1a:92:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: May 12 17:01:38 2026 GMT Not After : May 13 17:01:38 2026 GMT Subject: CN=02daa989817c4e7b2d69ce0c3dae73c4aa88db2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:3c:80:ef:fb:9e:22:36:d6:f0:6a:43:fb: 27:1e:06:5c:2b:b9:3d:3f:c6:76:88:f7:fb:07:2a: 09:fe:32:28:57:87:26:97:96:b3:e9:e7:4f:2b:d2: 93:c8:ec:34:7f:4d:ac:b7:94:a4:bd:97:23:6a:ce: 26:ab:5c:13:b0:38:d1:a9:f6:25:a2:95:fe:fe:9a: a4:2d:d8:8e:45:a8:3f:3d:2f:df:4f:92:46:06:13: b1:83:f1:3c:25:a9:43:4d:f9:fa:be:3c:af:6c:fb: 45:0c:9c:4f:0d:ff:e3:d1:7a:71:fe:6e:36:0a:34: 9b:03:ed:18:0a:df:06:11:97:e7:45:2c:7c:97:ff: d1:99:b9:4a:c0:e3:46:24:62:65:2a:c2:2c:8d:94: 4e:61:dc:8c:f2:13:8f:6d:2c:f5:5d:a2:c9:75:d0: 75:39:79:df:47:82:0a:6d:b7:86:26:b1:14:ca:97: c0:93:88:44:5d:f6:d1:f3:94:85:6f:f7:13:a4:5b: 13:7d:26:fc:05:30:70:36:57:72:da:cf:3d:bb:2d: 1e:84:7d:61:94:4e:94:1a:f9:a2:fe:69:26:c3:ef: d1:78:d8:f7:8a:ae:35:e5:c4:be:ad:87:05:0c:8c: 83:51:80:07:65:1f:bb:e7:b2:38:86:dc:ab:f6:fe: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:A9:89:81:7C:4E:7B:2D:69:CE:0C:3D:AE:73:C4:AA:88:DB:2B X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:14:e7:79:5c:99:0a:65:b1:d7:fb:27:20:73:30:3d:5c:3f: 72:3e:7d:38:bb:31:9c:26:e5:40:05:d1:c5:bf:5d:7a:f2:6a: 92:e7:09:2c:ee:95:64:37:0a:af:53:e8:f4:9e:88:f5:cf:fb: e9:ec:29:38:23:66:19:fc:92:78:26:52:7f:d6:64:ad:6b:32: 0d:74:58:2f:9b:a5:27:b4:0a:fc:4c:ad:a7:d5:69:ff:ac:b5: 9c:09:95:e8:76:2f:a6:3e:68:88:fa:47:29:79:f9:00:69:8c: f2:d6:2d:db:e4:e8:b1:5a:07:75:f6:92:83:33:dc:f2:b5:fa: fd:88:28:d0:74:7b:7a:93:ca:7d:cc:98:50:f7:d9:86:f2:78: 10:b1:fb:7d:ae:36:9f:67:d4:95:b1:c5:12:c3:a0:e9:e2:ae: aa:12:83:9d:5e:ad:55:7a:1f:b5:7f:e4:5b:85:cf:cb:9a:62: a9:32:67:c2:46:08:dd:6c:0d:5b:d6:5c:04:c1:d1:8f:e8:35: 92:8b:b7:01:33:df:cb:a3:a8:e9:e2:bd:ef:62:17:78:ed:13: 8d:98:23:26:95:8f:bd:e8:48:12:12:fe:33:4b:3a:82:ff:d5: fd:bc:70:dc:82:b2:c7:6c:86:fa:1e:f2:9d:c9:b1:eb:99:7c: f6:ae:69:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIxS6FyuclrnMPNt2GpLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNTEyMTcwMTM4WhcNMjYwNTEzMTcwMTM4WjAzMTEwLwYDVQQD EygwMmRhYTk4OTgxN2M0ZTdiMmQ2OWNlMGMzZGFlNzNjNGFhODhkYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNQ8gO/7niI21vBqQ/snHgZcK7k9 P8Z2iPf7ByoJ/jIoV4cml5az6edPK9KTyOw0f02st5SkvZcjas4mq1wTsDjRqfYl opX+/pqkLdiORag/PS/fT5JGBhOxg/E8JalDTfn6vjyvbPtFDJxPDf/j0Xpx/m42 CjSbA+0YCt8GEZfnRSx8l//RmblKwONGJGJlKsIsjZROYdyM8hOPbSz1XaLJddB1 OXnfR4IKbbeGJrEUypfAk4hEXfbR85SFb/cTpFsTfSb8BTBwNldy2s89uy0ehH1h lE6UGvmi/mkmw+/ReNj3iq415cS+rYcFDIyDUYAHZR+757I4htyr9v5IRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALaqYmBfE57LWnODD2uc8SqiNsrMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBTneVyZ CmWx1/snIHMwPVw/cj59OLsxnCblQAXRxb9devJqkucJLO6VZDcKr1Po9J6I9c/7 6ewpOCNmGfySeCZSf9ZkrWsyDXRYL5ulJ7QK/Eytp9Vp/6y1nAmV6HYvpj5oiPpH KXn5AGmM8tYt2+TosVoHdfaSgzPc8rX6/Ygo0HR7epPKfcyYUPfZhvJ4ELH7fa42 n2fUlbHFEsOg6eKuqhKDnV6tVXoftX/kW4XPy5piqTJnwkYI3WwNW9ZcBMHRj+g1 kou3ATPfy6Oo6eK972IXeO0TjZgjJpWPvehIEhL+M0s6gv/V/bxw3IKyx2yG+h7y ncmx65l89q5psg== -----END CERTIFICATE-----Generated at Tue May 12 22:15:01 2026 by rpki-client