$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: dqbRV93LvzM5LDIx21khmHg+uSgSQGGUpiZJN0d3VoU= Subject key identifier: A5:91:ED:AE:58:DD:13:7B:F5:D2:8F:63:5B:93:78:AA:63:B5:DF:AF Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019E1D2302FB5E03A62A5923919125AA67C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1927 Signing time: Tue 12 May 2026 17:01:34 +0000 Manifest this update: Tue 12 May 2026 17:01:34 +0000 Manifest next update: Wed 13 May 2026 17:01:34 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=) 3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=) 4: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: 4sR5MwhbgYpRoHqJNwv/hdvqKa6npVh17Ss9tGZMaYk=) 6: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 7: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 8: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 9: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=) 10: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=) 17: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:23:02:fb:5e:03:a6:2a:59:23:91:91:25:aa:67:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: May 12 17:01:34 2026 GMT Not After : May 13 17:01:34 2026 GMT Subject: CN=a591edae58dd137bf5d28f635b9378aa63b5dfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:01:22:f5:95:db:b1:0f:cb:44:6a:a7:ec: 09:66:2c:9e:2e:ec:d9:39:fd:b2:cc:2f:3b:20:25: 1c:cb:d4:31:2c:44:04:7a:e6:1d:cb:ed:2f:b7:f0: 10:e1:77:18:95:0c:b0:ad:70:6d:48:06:37:ac:4d: 85:a3:9e:f1:bd:24:13:78:52:32:40:f0:c4:6f:59: 2e:97:61:04:0d:e1:9a:b0:98:be:f1:fa:9d:dd:c8: c5:f8:c6:5a:4a:cc:8a:87:22:cb:1a:58:cd:5d:75: db:b6:8f:68:73:ac:bf:b1:82:66:3c:6e:3e:86:85: 55:6e:d9:99:ab:b1:b2:36:94:af:ac:1d:77:0e:99: f6:30:74:1e:5a:c9:19:c8:12:64:c0:b4:b7:5e:2d: 37:b0:e1:39:dc:11:99:7c:8f:fb:73:26:cc:79:77: 80:9c:d4:f9:d9:4d:6a:04:01:7e:5d:f3:ab:89:f5: c9:37:e9:79:dc:ed:f9:fc:83:2e:44:12:68:72:04: e2:42:d5:cf:e1:3b:80:15:2f:b3:ee:52:99:fe:1a: a4:97:c9:cf:73:ff:e0:af:ad:4e:74:69:b1:77:73: 05:c3:0e:a3:08:1d:a0:4e:48:65:4e:ed:06:5f:1a: c6:29:b8:79:5f:cd:e1:e0:35:35:d2:bc:01:c1:d1: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:91:ED:AE:58:DD:13:7B:F5:D2:8F:63:5B:93:78:AA:63:B5:DF:AF X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:fa:3d:fa:76:d3:66:03:09:a7:e8:01:6a:f2:c9:e7:3e: 8c:f0:3a:0d:2a:55:cb:46:07:f0:d8:4a:32:45:89:06:d8:21: ae:6b:b0:99:90:18:be:01:b1:85:f0:65:64:5c:b7:09:79:ad: 93:a6:a0:0b:10:4b:92:1c:bd:56:58:91:d2:fd:95:fe:7c:ac: 91:08:24:d9:10:0f:9e:d3:a9:3c:92:d5:05:34:cf:45:da:2b: 8e:95:79:c8:65:12:4c:bc:f3:8c:c2:2a:28:93:76:d2:2f:a0: 3e:0b:ee:c2:de:40:2c:45:a7:12:e8:ce:dd:92:78:1d:51:a4: 14:28:cd:36:05:14:26:9f:ba:ae:b7:49:e4:33:47:c6:97:42: 15:f3:85:6f:1c:ef:9a:58:6e:e5:16:13:2b:e9:c4:3c:60:e6: 3a:79:c8:ec:66:0c:84:f0:8c:ee:4a:ff:1f:04:0e:cb:11:2c: 44:07:9f:ce:b8:0b:49:f9:60:5a:00:30:0c:64:11:50:2d:64: ae:9e:a4:1e:09:d7:a2:76:7f:83:c8:4e:fa:78:ff:89:0d:4d: 43:2d:8f:a6:3a:63:35:ab:75:a9:40:44:6f:06:d7:c9:da:fe: ca:89:5b:6d:43:75:70:8a:0d:57:c6:33:c6:4c:ea:d4:46:d7: ab:fb:b4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIwL7XgOmKlkjkZElqmfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwNTEyMTcwMTM0WhcNMjYwNTEzMTcwMTM0WjAzMTEwLwYDVQQD EyhhNTkxZWRhZTU4ZGQxMzdiZjVkMjhmNjM1YjkzNzhhYTYzYjVkZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt00BIvWV27EPy0Rqp+wJZiyeLuzZ Of2yzC87ICUcy9QxLEQEeuYdy+0vt/AQ4XcYlQywrXBtSAY3rE2Fo57xvSQTeFIy QPDEb1kul2EEDeGasJi+8fqd3cjF+MZaSsyKhyLLGljNXXXbto9oc6y/sYJmPG4+ hoVVbtmZq7GyNpSvrB13Dpn2MHQeWskZyBJkwLS3Xi03sOE53BGZfI/7cybMeXeA nNT52U1qBAF+XfOrifXJN+l53O35/IMuRBJocgTiQtXP4TuAFS+z7lKZ/hqkl8nP c//gr61OdGmxd3MFww6jCB2gTkhlTu0GXxrGKbh5X83h4DU10rwBwdH3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWR7a5Y3RN79dKPY1uTeKpjtd+vMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfr6Pfp2 02YDCafoAWryyec+jPA6DSpVy0YH8NhKMkWJBtghrmuwmZAYvgGxhfBlZFy3CXmt k6agCxBLkhy9VliR0v2V/nyskQgk2RAPntOpPJLVBTTPRdorjpV5yGUSTLzzjMIq KJN20i+gPgvuwt5ALEWnEujO3ZJ4HVGkFCjNNgUUJp+6rrdJ5DNHxpdCFfOFbxzv mlhu5RYTK+nEPGDmOnnI7GYMhPCM7kr/HwQOyxEsRAefzrgLSflgWgAwDGQRUC1k rp6kHgnXonZ/g8hO+nj/iQ1NQy2PpjpjNat1qUBEbwbXydr+yolbbUN1cIoNV8Yz xkzq1EbXq/u0Zw== -----END CERTIFICATE-----Generated at Tue May 12 21:16:53 2026 by rpki-client