$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: AcFdmjxr8KR6HboDrtvG2vXzu8mwG6tRRFhm//UEn6s= Subject key identifier: E6:77:8C:55:1B:EE:32:91:BC:6B:8E:47:0E:F1:A2:B5:E1:21:1E:CA Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019D2BBCB07AC4CF074B0C90B1A873FF5D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 18AA Signing time: Thu 26 Mar 2026 20:01:19 +0000 Manifest this update: Thu 26 Mar 2026 20:01:19 +0000 Manifest next update: Fri 27 Mar 2026 20:01:19 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=) 3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=) 4: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: CWAAtwPhu4JMAnyv6whV/dzn/31SqxEKfc4md7fcNs8=) 6: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 7: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 8: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 9: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=) 10: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=) 17: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:bc:b0:7a:c4:cf:07:4b:0c:90:b1:a8:73:ff:5d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Mar 26 20:01:19 2026 GMT Not After : Mar 27 20:01:19 2026 GMT Subject: CN=e6778c551bee3291bc6b8e470ef1a2b5e1211eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:44:98:26:0b:d6:79:06:3a:ff:e0:fb:96: 1f:4c:b0:73:96:54:97:be:1b:af:0e:b6:9c:b7:e2: 01:af:0f:da:d8:13:40:2c:4c:24:28:77:2e:04:93: bb:9a:85:19:1a:33:c9:a1:a5:dd:d3:5b:ea:2e:3a: 5f:ec:54:b9:82:f5:b4:9f:c3:08:16:73:9c:ef:bf: ec:ad:7a:0d:9e:13:56:6d:0c:fa:37:1e:bf:6b:e5: 8e:df:19:64:f5:a3:da:f3:23:8f:25:54:bb:72:9d: a9:e6:96:d4:1f:cd:99:61:df:3b:a2:24:3b:b2:ff: bb:17:ef:6d:c8:0c:7d:aa:3c:81:09:fd:42:cc:1f: 15:a3:c6:ae:79:7c:92:07:0a:6f:82:83:bc:25:5d: 2f:dc:3d:da:2b:f6:b0:6a:e1:d6:6f:8f:d4:39:7b: 6e:0c:40:12:67:89:41:33:ed:f4:78:a0:4d:f9:16: b3:92:af:34:6b:2e:d5:7c:aa:33:0f:bd:d7:de:9c: b5:e4:74:cf:17:ea:27:72:59:78:6a:d0:b9:5a:ea: 4b:5c:cb:f4:51:a8:7b:18:95:e0:86:d6:f4:e3:98: d5:08:4e:d4:7e:20:66:f5:d4:46:cc:34:8d:d2:46: 63:3a:43:67:95:32:0e:5c:a1:51:5f:d5:48:d5:08: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:8C:55:1B:EE:32:91:BC:6B:8E:47:0E:F1:A2:B5:E1:21:1E:CA X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:35:9b:e6:64:74:4a:4d:54:f0:a0:d9:a4:b0:6e:bf:f0:f3: a6:52:58:c0:41:32:f4:09:6a:7c:6f:c3:3c:d5:28:d5:53:02: b8:ff:1b:7c:ac:40:ac:fc:9d:75:10:08:45:52:d0:8d:7c:2a: 7b:d6:70:34:f4:6e:94:e1:e0:66:5f:e5:bd:29:6d:e5:0e:63: 47:60:ea:53:bc:8c:57:56:92:ab:3d:13:a0:e3:27:af:2a:70: 26:95:89:7a:ce:ff:a3:60:97:cc:f1:f7:49:2c:19:f6:70:13: 1f:b7:67:e8:2b:53:1e:32:8a:44:61:41:95:21:b3:cf:80:9e: ab:cb:8c:fa:67:78:7d:90:4e:ea:26:7c:03:a6:a6:58:4c:60: 39:e4:63:91:1e:42:69:45:7e:57:94:0f:16:e1:30:b8:46:99: 14:d4:6b:c0:59:06:6d:1b:8d:26:86:0a:3f:91:bd:7a:19:2c: 8d:90:89:21:a2:e9:04:16:9e:da:83:81:16:f2:dd:b1:0c:9e: e3:84:cd:c5:5a:91:ef:53:73:13:5b:a9:44:79:43:b2:b4:ae: 50:7d:ff:a2:26:47:00:e9:02:9d:c6:a8:ab:10:b9:d7:97:c0: 64:c9:af:56:fb:2b:db:f9:46:37:22:cd:c5:19:c6:f3:04:3c: 6d:04:c9:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rvLB6xM8HSwyQsahz/10KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMzI2MjAwMTE5WhcNMjYwMzI3MjAwMTE5WjAzMTEwLwYDVQQD EyhlNjc3OGM1NTFiZWUzMjkxYmM2YjhlNDcwZWYxYTJiNWUxMjExZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmxEmCYL1nkGOv/g+5YfTLBzllSX vhuvDract+IBrw/a2BNALEwkKHcuBJO7moUZGjPJoaXd01vqLjpf7FS5gvW0n8MI FnOc77/srXoNnhNWbQz6Nx6/a+WO3xlk9aPa8yOPJVS7cp2p5pbUH82ZYd87oiQ7 sv+7F+9tyAx9qjyBCf1CzB8Vo8aueXySBwpvgoO8JV0v3D3aK/awauHWb4/UOXtu DEASZ4lBM+30eKBN+Razkq80ay7VfKozD73X3py15HTPF+oncll4atC5WupLXMv0 Uah7GJXghtb045jVCE7UfiBm9dRGzDSN0kZjOkNnlTIOXKFRX9VI1QiEqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ3jFUb7jKRvGuORw7xorXhIR7KMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDWb5mR0 Sk1U8KDZpLBuv/DzplJYwEEy9AlqfG/DPNUo1VMCuP8bfKxArPyddRAIRVLQjXwq e9ZwNPRulOHgZl/lvSlt5Q5jR2DqU7yMV1aSqz0ToOMnrypwJpWJes7/o2CXzPH3 SSwZ9nATH7dn6CtTHjKKRGFBlSGzz4Ceq8uM+md4fZBO6iZ8A6amWExgOeRjkR5C aUV+V5QPFuEwuEaZFNRrwFkGbRuNJoYKP5G9ehksjZCJIaLpBBae2oOBFvLdsQye 44TNxVqR71NzE1upRHlDsrSuUH3/oiZHAOkCncaoqxC515fAZMmvVvsr2/lGNyLN xRnG8wQ8bQTJfw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:50:29 2026 by rpki-client