$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: ivWFx3kfDbYlhFEvw01veRIXBOccR6degNkQw83G1N4= Subject key identifier: A1:04:E4:E1:B4:67:D4:A0:80:66:2E:AD:7F:FC:FE:CA:92:A0:AB:21 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019F9059D840A29F5132D2996E2518528BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1A1C Signing time: Thu 23 Jul 2026 19:00:34 +0000 Manifest this update: Thu 23 Jul 2026 19:00:34 +0000 Manifest next update: Fri 24 Jul 2026 19:00:34 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: q9Gdy6lL0e7m8xinGpz889zDDTHGepMzzcBSeanGKeY=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: KkDqDLNE240fCTXz3x0pbuKHvl4.roa (hash: 8CcwM3+dFL+lua0flReoYrUHpd5rKuSGWfX4/qWe1QI=) 7: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 8: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 9: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 10: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 17: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 18: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:59:d8:40:a2:9f:51:32:d2:99:6e:25:18:52:8b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jul 23 19:00:34 2026 GMT Not After : Jul 24 19:00:34 2026 GMT Subject: CN=a104e4e1b467d4a080662ead7ffcfeca92a0ab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:08:48:60:12:b6:cf:14:ec:52:96:55:50: 49:1a:fc:fc:cf:26:d9:ae:12:df:93:5a:04:0d:41: c5:f6:8a:fd:88:10:ea:e8:05:b5:97:ee:21:04:6f: d1:81:e3:df:57:4e:92:86:7b:22:27:4d:29:07:89: 7c:19:e8:91:d5:9b:46:aa:d2:a7:b4:83:c9:48:50: 48:41:a8:d4:03:2f:a6:59:4c:1a:d0:46:e9:de:1d: 23:e9:6e:c8:03:d3:75:dc:64:f0:b9:c9:5d:41:05: c7:ca:94:59:1f:27:98:ad:0d:00:95:7b:0a:b7:53: 7d:d1:c7:b0:ce:fe:d6:36:e7:20:f4:4e:15:8f:5e: 6e:3d:70:98:e3:bf:52:82:3c:ba:0f:00:1d:cf:97: b5:b0:5b:22:f5:18:d8:17:67:53:10:38:5b:4f:f8: 0d:00:70:09:f0:6f:18:f3:7a:93:bf:68:63:8d:a1: 1e:27:00:2d:70:76:7e:ee:b2:79:75:b5:08:68:9b: 0e:10:18:0a:29:d2:91:0a:a3:81:71:d9:ec:09:01: 6b:4d:24:9e:ff:08:16:85:f0:ae:d7:a1:0b:42:fb: eb:b3:3a:2c:4b:58:e0:13:65:7d:ae:b2:21:38:ef: 3d:8b:59:9c:35:50:0c:43:00:55:01:6a:db:e9:99: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:04:E4:E1:B4:67:D4:A0:80:66:2E:AD:7F:FC:FE:CA:92:A0:AB:21 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8b:6b:fd:4c:c9:59:48:34:62:f6:ef:6d:b1:86:fa:03:1f: 90:29:41:ba:74:60:32:0e:4b:c0:fb:31:d1:d7:e8:20:dc:98: 65:3e:29:99:39:62:02:12:dd:61:cf:10:24:f5:b8:8e:32:f2: 2d:36:60:dd:ac:47:0a:77:26:90:17:fb:a5:e4:00:58:bc:3d: 7e:43:20:e4:5c:37:dc:5d:de:a1:94:e0:0d:bf:42:06:fe:c8: 32:cb:80:dd:1b:5f:c3:97:69:2a:ef:ad:d2:f6:3b:4d:28:89: f1:c0:2b:f7:af:35:08:ce:c5:d4:59:e1:27:b2:4b:8e:25:77: 96:fc:b5:5d:6e:98:22:62:4a:0c:73:26:52:88:0d:5d:5e:9d: 89:90:bd:ed:7a:2a:a4:98:3f:02:7e:ae:c2:ff:6f:7d:82:d8: 2b:63:9c:9f:1c:e1:55:20:ea:00:33:8b:e1:cb:a5:a3:17:e8: 15:f9:ac:85:02:03:c2:42:92:71:35:63:b3:5f:a6:16:0f:8a: 87:26:93:d8:16:8e:1c:89:7b:a5:55:92:2b:28:29:e9:1d:1a: 0f:fe:96:19:2a:10:78:46:18:62:f2:38:33:43:a7:ab:7a:14: 99:10:80:f6:59:30:a4:8f:bf:6b:7e:4b:ea:9f:26:76:67:76: d8:a4:75:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWdhAop9RMtKZbiUYUou3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwNzIzMTkwMDM0WhcNMjYwNzI0MTkwMDM0WjAzMTEwLwYDVQQD EyhhMTA0ZTRlMWI0NjdkNGEwODA2NjJlYWQ3ZmZjZmVjYTkyYTBhYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAresISGASts8U7FKWVVBJGvz8zybZ rhLfk1oEDUHF9or9iBDq6AW1l+4hBG/RgePfV06ShnsiJ00pB4l8GeiR1ZtGqtKn tIPJSFBIQajUAy+mWUwa0Ebp3h0j6W7IA9N13GTwucldQQXHypRZHyeYrQ0AlXsK t1N90cewzv7WNucg9E4Vj15uPXCY479Sgjy6DwAdz5e1sFsi9RjYF2dTEDhbT/gN AHAJ8G8Y83qTv2hjjaEeJwAtcHZ+7rJ5dbUIaJsOEBgKKdKRCqOBcdnsCQFrTSSe /wgWhfCu16ELQvvrszosS1jgE2V9rrIhOO89i1mcNVAMQwBVAWrb6Zk62wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEE5OG0Z9SggGYurX/8/sqSoKshMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYtr/UzJ WUg0YvbvbbGG+gMfkClBunRgMg5LwPsx0dfoINyYZT4pmTliAhLdYc8QJPW4jjLy LTZg3axHCncmkBf7peQAWLw9fkMg5Fw33F3eoZTgDb9CBv7IMsuA3Rtfw5dpKu+t 0vY7TSiJ8cAr9681CM7F1FnhJ7JLjiV3lvy1XW6YImJKDHMmUogNXV6diZC97Xoq pJg/An6uwv9vfYLYK2OcnxzhVSDqADOL4culoxfoFfmshQIDwkKScTVjs1+mFg+K hyaT2BaOHIl7pVWSKygp6R0aD/6WGSoQeEYYYvI4M0Onq3oUmRCA9lkwpI+/a35L 6p8mdmd22KR1+w== -----END CERTIFICATE-----Generated at Thu Jul 23 22:44:51 2026 by rpki-client