
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json)
Hash identifier: zh4oDJ1r7PdwLD1ERjc7wIzYTwB6dt/uNJFPgjz32G4=
Subject key identifier: D6:CB:DB:7C:5C:44:A1:E1:FD:AC:7B:54:77:24:14:E0:41:08:7B:40
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019D2816884FC1002676E7F8F802A35C6CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
Manifest number: 1385
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=)
2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=)
3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=)
4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=)
5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: BzhippOHk40VPvmg+RgkXsdQmgZ/4wQr6Pi9NjqBkQ0=)
6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=)
7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=)
8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=)
9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=)
10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=)
11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=)
12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=)
13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=)
14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=)
15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=)
16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=)
17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=)
18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:88:4f:c1:00:26:76:e7:f8:f8:02:a3:5c:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=d6cbdb7c5c44a1e1fdac7b54772414e041087b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:cf:8f:6d:af:65:6d:b6:b3:6f:3c:27:b2:
dd:89:b7:5b:8e:92:3c:40:ab:5f:49:2e:10:73:e7:
83:5c:a5:fd:44:76:3b:53:65:43:22:fa:f8:fb:91:
05:47:19:df:5b:bb:42:9a:9c:e4:57:69:cf:d0:3d:
82:76:41:2f:4f:9d:5d:05:aa:3e:df:aa:40:f6:40:
55:a7:84:24:c9:93:d3:2a:41:7c:b7:0b:c5:79:f8:
a3:cf:37:62:22:1b:43:a4:d8:5e:4c:d5:d1:d1:70:
70:ee:8c:f2:87:e0:57:2d:1f:fd:01:60:44:24:7c:
7e:d8:08:d7:af:28:49:47:36:1f:43:2e:c9:06:2b:
bb:a3:0d:7d:28:4a:f7:23:15:41:4f:3f:65:20:b6:
1b:0b:f9:ff:06:1d:24:ad:cc:5f:34:06:bb:b8:c5:
86:63:56:2f:81:e6:86:cf:b7:2d:70:94:ae:75:1a:
5a:d1:70:40:f1:e3:68:d6:42:53:43:d5:9f:91:cc:
7a:f4:a4:60:59:43:89:4e:63:84:f0:0b:a0:14:c4:
59:42:16:c3:ab:5d:47:28:78:86:c9:36:b6:ea:a3:
bd:69:b0:08:c0:51:53:fd:c9:e2:37:c3:d4:20:61:
67:1d:82:43:ca:96:ed:5b:2f:c9:e8:ee:85:24:af:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:DB:7C:5C:44:A1:E1:FD:AC:7B:54:77:24:14:E0:41:08:7B:40
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f7:9a:bb:4b:0b:d0:50:c0:34:0f:33:1b:29:12:99:94:ec:
e5:5a:58:ae:74:73:08:6a:7c:e4:41:9c:23:08:82:ce:6e:db:
82:48:17:32:2b:f7:50:cb:0d:60:c5:5a:6e:61:3d:46:61:c6:
2e:6e:b9:a5:aa:a0:26:9f:dc:7e:34:48:2a:ce:25:89:8a:29:
cc:b9:c1:0d:6f:57:16:d1:9c:5b:49:75:0b:51:4d:22:e1:02:
70:59:6c:01:6a:d9:71:17:ea:a0:a1:3f:87:ad:af:1e:67:3b:
bb:d7:d1:85:2e:53:64:a6:77:63:1f:d6:34:e7:8f:43:67:6e:
e6:3e:c5:4e:d3:49:fb:01:8c:20:97:07:3f:75:e6:e0:98:74:
bd:91:b4:a2:9f:b9:c1:3a:e8:90:7a:90:7b:58:48:f2:c9:34:
e0:f7:4c:65:c3:fc:3d:df:07:9b:e9:e4:0e:8a:21:4b:d3:60:
f8:19:51:26:52:09:74:73:8e:d2:a6:1d:7d:00:85:00:13:da:
54:72:3c:6a:11:aa:eb:54:b3:d1:78:64:ea:22:66:1e:cf:12:
e9:ca:75:45:4e:7b:79:72:a1:76:df:2d:05:a8:65:d5:f6:e2:
7b:71:76:06:3f:e4:d2:be:0a:aa:85:bd:f2:64:56:86:3d:fc:
9a:7c:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:18 2026 by rpki-client