$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: tDHqFByxr+HJpN+W2tai0FM1Ovs955Tw4ZYIaTe1Bv0= Subject key identifier: 87:80:E7:3F:3B:31:7A:72:56:3A:E0:56:90:C6:52:BF:0A:6F:93:39 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019D25F22B9F78F44A7D646745136E82896D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 10F3 Signing time: Wed 25 Mar 2026 17:02:01 +0000 Manifest this update: Wed 25 Mar 2026 17:02:01 +0000 Manifest next update: Thu 26 Mar 2026 17:02:01 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: foc8CjZA8YHr5kz0utox5g2bkqzfs7CLHU7NUO1azVk=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f2:2b:9f:78:f4:4a:7d:64:67:45:13:6e:82:89:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Mar 25 17:02:01 2026 GMT Not After : Mar 26 17:02:01 2026 GMT Subject: CN=8780e73f3b317a72563ae05690c652bf0a6f9339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:c4:fc:a8:6e:1a:7a:6b:85:1e:42:12:ed: 3d:ed:c8:e4:d3:fc:5a:20:37:97:16:85:61:e5:40: 07:f0:44:4c:f2:a8:6a:d8:9b:b4:de:31:6e:3b:d8: 5f:0a:24:b7:05:e2:83:cf:39:1f:04:02:de:b0:77: f4:84:dc:33:c9:48:5a:fb:59:f3:f0:6a:63:4e:19: 5f:37:c1:9a:9b:6c:2f:08:a7:78:a4:1e:b4:e5:69: d7:9a:36:0f:ee:55:81:d1:f5:e9:c0:27:30:e1:90: 69:63:0b:dc:58:7e:74:97:2a:29:4d:d0:cf:ba:ac: da:cb:37:31:21:eb:58:f3:7b:7a:a1:2a:bc:e8:3a: 8e:3e:4e:2d:b0:c4:9c:19:32:e7:bf:21:26:75:08: 6c:5b:f6:fa:5c:32:f7:16:3d:cf:e3:88:09:44:77: 05:fc:15:12:7b:56:0f:94:c9:c9:24:91:8b:39:37: 8c:78:fc:53:af:09:e0:03:42:d7:dd:54:39:20:47: f7:47:67:fd:0d:64:22:36:35:10:e3:30:a0:f2:23: 51:a9:43:1e:e2:d6:2d:d6:c5:3d:46:5a:88:ba:a3: 21:16:43:b5:97:a1:ba:16:ac:77:6c:50:b0:5c:3f: 6e:7b:70:ce:eb:a3:25:8d:8a:0a:03:e5:d2:30:8c: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:80:E7:3F:3B:31:7A:72:56:3A:E0:56:90:C6:52:BF:0A:6F:93:39 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b0:b9:bb:00:92:2d:1d:97:f2:30:b1:45:85:3d:ea:3d:68: 15:b6:20:2b:66:68:e6:9f:ec:18:14:2c:1f:5a:d0:e4:37:37: e4:7c:c4:ed:1b:25:40:10:1e:d5:45:42:fb:1c:8c:49:97:9a: 66:bf:21:a2:49:e7:a7:fa:4b:b0:ee:79:26:2f:05:a8:1a:6f: e8:da:4f:fc:ad:ac:b1:9c:6a:71:e2:ae:4c:82:7b:dd:6a:20: f2:9b:79:f8:9e:c5:4c:2d:25:9e:e0:2a:53:6f:05:61:2c:3f: ed:1a:1d:34:e5:d3:7e:bb:c9:23:a2:93:e4:96:17:ab:1d:f1: 5c:bd:da:1f:6a:8d:0a:5e:1f:6e:5f:81:9d:c4:7f:c9:86:6b: 56:2a:0a:d6:51:31:f5:40:f0:72:9b:bf:47:4f:0b:65:bb:c8: 2e:04:8a:db:d3:84:d7:b4:06:28:ee:c6:8c:28:e8:a6:d3:1a: 9c:6f:99:18:48:0c:f3:29:18:05:f2:14:07:79:ac:c6:75:08: ab:0d:e6:6c:f7:27:2b:42:e5:49:17:94:2a:b1:bc:41:66:30: 45:23:aa:77:76:db:c8:71:32:36:a9:d2:24:f4:d4:9c:ab:72: e7:a2:b0:ab:47:e0:ed:78:e1:f5:94:23:ef:da:f6:1c:fc:ef: e5:fc:bb:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8iufePRKfWRnRRNugoltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMzI1MTcwMjAxWhcNMjYwMzI2MTcwMjAxWjAzMTEwLwYDVQQD Eyg4NzgwZTczZjNiMzE3YTcyNTYzYWUwNTY5MGM2NTJiZjBhNmY5MzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngLE/KhuGnprhR5CEu097cjk0/xa IDeXFoVh5UAH8ERM8qhq2Ju03jFuO9hfCiS3BeKDzzkfBALesHf0hNwzyUha+1nz 8GpjThlfN8Gam2wvCKd4pB605WnXmjYP7lWB0fXpwCcw4ZBpYwvcWH50lyopTdDP uqzayzcxIetY83t6oSq86DqOPk4tsMScGTLnvyEmdQhsW/b6XDL3Fj3P44gJRHcF /BUSe1YPlMnJJJGLOTeMePxTrwngA0LX3VQ5IEf3R2f9DWQiNjUQ4zCg8iNRqUMe 4tYt1sU9RlqIuqMhFkO1l6G6Fqx3bFCwXD9ue3DO66MljYoKA+XSMIxzUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeA5z87MXpyVjrgVpDGUr8Kb5M5MB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLC5uwCS LR2X8jCxRYU96j1oFbYgK2Zo5p/sGBQsH1rQ5Dc35HzE7RslQBAe1UVC+xyMSZea Zr8hoknnp/pLsO55Ji8FqBpv6NpP/K2ssZxqceKuTIJ73Wog8pt5+J7FTC0lnuAq U28FYSw/7RodNOXTfrvJI6KT5JYXqx3xXL3aH2qNCl4fbl+BncR/yYZrVioK1lEx 9UDwcpu/R08LZbvILgSK29OE17QGKO7GjCjoptManG+ZGEgM8ykYBfIUB3msxnUI qw3mbPcnK0LlSReUKrG8QWYwRSOqd3bbyHEyNqnSJPTUnKty56Kwq0fg7Xjh9ZQj 79r2HPzv5fy7kA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:01:06 2026 by rpki-client