$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: clFVPmGYfbAd0fbPeQbQ5jDhRDm9OJzdMxbqOCSG9sU= Subject key identifier: 55:CF:65:36:9B:07:EA:94:20:ED:46:74:75:E1:FD:89:8F:4C:73:7A Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01A102ED8D5C40311FFF2AAED0643FFD3771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1ADE Signing time: Sat 03 Oct 2026 18:01:24 +0000 Manifest this update: Sat 03 Oct 2026 18:01:24 +0000 Manifest next update: Sun 04 Oct 2026 18:01:24 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: IyYEokrX4FY/+DoNKUrY0ounH8/KRyX2Jo7IGGrIKk0=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 7: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 8: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 9: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 10: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 11: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 12: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 13: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 14: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 15: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 16: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 17: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) 18: zZ5FzDx5r94DHz5RCT2Alf8TUjo.roa (hash: gM7F7qwmwQieS17kUSf9sVT/GPAoYrfsduMF3EwlYsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:02:ed:8d:5c:40:31:1f:ff:2a:ae:d0:64:3f:fd:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Oct 3 18:01:24 2026 GMT Not After : Oct 4 18:01:24 2026 GMT Subject: CN=55cf65369b07ea9420ed467475e1fd898f4c737a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:b8:62:aa:2b:cf:b5:c3:ce:0d:38:3b:a9: 1a:11:87:2a:b9:aa:f9:4f:38:d3:87:19:00:9d:d1: 2e:04:e2:7c:bf:74:cb:fd:c4:ac:7c:85:6f:a3:a4: 04:78:05:a9:e3:3a:09:b4:4f:31:3f:7c:8b:ac:aa: 43:e0:39:47:62:ce:28:8c:5d:8e:ae:89:4c:db:69: e1:2a:94:35:63:5b:04:6d:47:f0:dc:4b:25:1e:57: 68:91:ed:df:1e:94:02:c2:29:6f:4e:22:fc:6b:ed: 40:be:bb:95:4e:56:47:1d:68:8f:95:b6:fd:1d:2f: 14:18:a9:16:1a:eb:e7:b2:9b:23:2e:0c:5e:49:01: 04:75:58:11:2b:4e:53:e8:31:20:b1:0d:df:db:d2: a2:43:81:b3:c9:5a:ab:95:90:14:4a:c7:cc:e5:d8: 04:2c:cb:5c:99:18:cf:78:00:b4:8f:73:c4:2d:ae: 0e:c7:87:7c:f5:d6:ca:26:34:55:cf:ca:c7:43:5c: 36:1f:8c:96:8b:76:b2:f0:1a:a7:b1:07:70:bc:f1: 69:dc:fd:9a:a9:ac:af:af:d6:cb:b3:34:c8:9e:87: 4f:0b:d2:4c:06:97:24:d7:60:9d:16:ec:40:7f:0e: 0d:af:7b:76:fa:f0:a4:aa:d5:6c:9a:7d:6b:e9:e6: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CF:65:36:9B:07:EA:94:20:ED:46:74:75:E1:FD:89:8F:4C:73:7A X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fa:c1:05:a7:89:4b:f5:68:e6:6f:79:a5:07:45:e1:1d:2e: f4:27:56:9f:91:d9:65:24:b6:12:b1:43:f8:a4:ea:30:2b:b2: 81:35:30:d8:2f:78:91:d1:11:2e:82:3b:57:e9:a7:f3:65:f8: b5:3a:c2:89:d9:e8:cf:9d:0b:d0:d6:64:09:76:3d:82:17:00: cb:1d:7b:bf:de:b1:3a:2c:1a:31:e4:51:8d:57:35:47:e7:ff: 6e:dc:12:ae:b2:3e:36:dd:c6:37:94:30:5b:e5:a4:a0:ac:d4: 43:90:dc:80:8d:ed:f1:77:fc:6a:2c:8b:70:b5:6f:b8:ea:28: ab:0a:9a:84:ed:28:d3:b0:66:91:3a:ea:02:79:46:e8:5d:0a: 1e:08:ca:fb:2c:19:72:3a:f1:00:b0:61:71:a6:a4:29:17:45: 31:88:ed:d7:9c:48:83:07:ef:5d:76:a6:cc:a7:8d:86:13:6d: b9:32:cf:26:b3:ac:27:56:47:1c:7f:66:b9:57:44:fd:8d:ac: 72:a6:50:43:e8:f5:ee:2c:c4:05:ad:bc:1b:cc:f0:0e:48:5a: 3a:10:eb:f1:27:d2:fd:91:de:f9:2c:7e:ad:05:db:b8:25:f2: 7c:5f:f4:e1:14:29:23:a4:bf:05:cf:29:ed:b3:d2:cf:e1:da: 0d:d8:13:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEC7Y1cQDEf/yqu0GQ//TdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYxMDAzMTgwMTI0WhcNMjYxMDA0MTgwMTI0WjAzMTEwLwYDVQQD Eyg1NWNmNjUzNjliMDdlYTk0MjBlZDQ2NzQ3NWUxZmQ4OThmNGM3MzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzu4Yqorz7XDzg04O6kaEYcquar5 TzjThxkAndEuBOJ8v3TL/cSsfIVvo6QEeAWp4zoJtE8xP3yLrKpD4DlHYs4ojF2O rolM22nhKpQ1Y1sEbUfw3EslHldoke3fHpQCwilvTiL8a+1AvruVTlZHHWiPlbb9 HS8UGKkWGuvnspsjLgxeSQEEdVgRK05T6DEgsQ3f29KiQ4GzyVqrlZAUSsfM5dgE LMtcmRjPeAC0j3PELa4Ox4d89dbKJjRVz8rHQ1w2H4yWi3ay8BqnsQdwvPFp3P2a qayvr9bLszTInodPC9JMBpck12CdFuxAfw4Nr3t2+vCkqtVsmn1r6eZJvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXPZTabB+qUIO1GdHXh/YmPTHN6MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPrBBaeJ S/Vo5m95pQdF4R0u9CdWn5HZZSS2ErFD+KTqMCuygTUw2C94kdERLoI7V+mn82X4 tTrCidnoz50L0NZkCXY9ghcAyx17v96xOiwaMeRRjVc1R+f/btwSrrI+Nt3GN5Qw W+WkoKzUQ5DcgI3t8Xf8aiyLcLVvuOooqwqahO0o07BmkTrqAnlG6F0KHgjK+ywZ cjrxALBhcaakKRdFMYjt15xIgwfvXXamzKeNhhNtuTLPJrOsJ1ZHHH9muVdE/Y2s cqZQQ+j17izEBa28G8zwDkhaOhDr8SfS/ZHe+Sx+rQXbuCXyfF/04RQpI6S/Bc8p 7bPSz+HaDdgTcg== -----END CERTIFICATE-----Generated at Sun Oct 4 05:27:26 2026 by rpki-client