$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: zh4oDJ1r7PdwLD1ERjc7wIzYTwB6dt/uNJFPgjz32G4= Subject key identifier: D6:CB:DB:7C:5C:44:A1:E1:FD:AC:7B:54:77:24:14:E0:41:08:7B:40 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019D2816884FC1002676E7F8F802A35C6CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1385 Signing time: Thu 26 Mar 2026 03:00:58 +0000 Manifest this update: Thu 26 Mar 2026 03:00:58 +0000 Manifest next update: Fri 27 Mar 2026 03:00:58 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: BzhippOHk40VPvmg+RgkXsdQmgZ/4wQr6Pi9NjqBkQ0=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:88:4f:c1:00:26:76:e7:f8:f8:02:a3:5c:6c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Mar 26 03:00:58 2026 GMT Not After : Mar 27 03:00:58 2026 GMT Subject: CN=d6cbdb7c5c44a1e1fdac7b54772414e041087b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:cf:8f:6d:af:65:6d:b6:b3:6f:3c:27:b2: dd:89:b7:5b:8e:92:3c:40:ab:5f:49:2e:10:73:e7: 83:5c:a5:fd:44:76:3b:53:65:43:22:fa:f8:fb:91: 05:47:19:df:5b:bb:42:9a:9c:e4:57:69:cf:d0:3d: 82:76:41:2f:4f:9d:5d:05:aa:3e:df:aa:40:f6:40: 55:a7:84:24:c9:93:d3:2a:41:7c:b7:0b:c5:79:f8: a3:cf:37:62:22:1b:43:a4:d8:5e:4c:d5:d1:d1:70: 70:ee:8c:f2:87:e0:57:2d:1f:fd:01:60:44:24:7c: 7e:d8:08:d7:af:28:49:47:36:1f:43:2e:c9:06:2b: bb:a3:0d:7d:28:4a:f7:23:15:41:4f:3f:65:20:b6: 1b:0b:f9:ff:06:1d:24:ad:cc:5f:34:06:bb:b8:c5: 86:63:56:2f:81:e6:86:cf:b7:2d:70:94:ae:75:1a: 5a:d1:70:40:f1:e3:68:d6:42:53:43:d5:9f:91:cc: 7a:f4:a4:60:59:43:89:4e:63:84:f0:0b:a0:14:c4: 59:42:16:c3:ab:5d:47:28:78:86:c9:36:b6:ea:a3: bd:69:b0:08:c0:51:53:fd:c9:e2:37:c3:d4:20:61: 67:1d:82:43:ca:96:ed:5b:2f:c9:e8:ee:85:24:af: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CB:DB:7C:5C:44:A1:E1:FD:AC:7B:54:77:24:14:E0:41:08:7B:40 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:9a:bb:4b:0b:d0:50:c0:34:0f:33:1b:29:12:99:94:ec: e5:5a:58:ae:74:73:08:6a:7c:e4:41:9c:23:08:82:ce:6e:db: 82:48:17:32:2b:f7:50:cb:0d:60:c5:5a:6e:61:3d:46:61:c6: 2e:6e:b9:a5:aa:a0:26:9f:dc:7e:34:48:2a:ce:25:89:8a:29: cc:b9:c1:0d:6f:57:16:d1:9c:5b:49:75:0b:51:4d:22:e1:02: 70:59:6c:01:6a:d9:71:17:ea:a0:a1:3f:87:ad:af:1e:67:3b: bb:d7:d1:85:2e:53:64:a6:77:63:1f:d6:34:e7:8f:43:67:6e: e6:3e:c5:4e:d3:49:fb:01:8c:20:97:07:3f:75:e6:e0:98:74: bd:91:b4:a2:9f:b9:c1:3a:e8:90:7a:90:7b:58:48:f2:c9:34: e0:f7:4c:65:c3:fc:3d:df:07:9b:e9:e4:0e:8a:21:4b:d3:60: f8:19:51:26:52:09:74:73:8e:d2:a6:1d:7d:00:85:00:13:da: 54:72:3c:6a:11:aa:eb:54:b3:d1:78:64:ea:22:66:1e:cf:12: e9:ca:75:45:4e:7b:79:72:a1:76:df:2d:05:a8:65:d5:f6:e2: 7b:71:76:06:3f:e4:d2:be:0a:aa:85:bd:f2:64:56:86:3d:fc: 9a:7c:ee:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFohPwQAmduf4+AKjXGzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMzI2MDMwMDU4WhcNMjYwMzI3MDMwMDU4WjAzMTEwLwYDVQQD EyhkNmNiZGI3YzVjNDRhMWUxZmRhYzdiNTQ3NzI0MTRlMDQxMDg3YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbjPj22vZW22s288J7LdibdbjpI8 QKtfSS4Qc+eDXKX9RHY7U2VDIvr4+5EFRxnfW7tCmpzkV2nP0D2CdkEvT51dBao+ 36pA9kBVp4QkyZPTKkF8twvFefijzzdiIhtDpNheTNXR0XBw7ozyh+BXLR/9AWBE JHx+2AjXryhJRzYfQy7JBiu7ow19KEr3IxVBTz9lILYbC/n/Bh0krcxfNAa7uMWG Y1YvgeaGz7ctcJSudRpa0XBA8eNo1kJTQ9Wfkcx69KRgWUOJTmOE8AugFMRZQhbD q11HKHiGyTa26qO9abAIwFFT/cniN8PUIGFnHYJDypbtWy/J6O6FJK/64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbL23xcRKHh/ax7VHckFOBBCHtAMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/eau0sL 0FDANA8zGykSmZTs5VpYrnRzCGp85EGcIwiCzm7bgkgXMiv3UMsNYMVabmE9RmHG Lm65paqgJp/cfjRIKs4liYopzLnBDW9XFtGcW0l1C1FNIuECcFlsAWrZcRfqoKE/ h62vHmc7u9fRhS5TZKZ3Yx/WNOePQ2du5j7FTtNJ+wGMIJcHP3Xm4Jh0vZG0op+5 wTrokHqQe1hI8sk04PdMZcP8Pd8Hm+nkDoohS9Ng+BlRJlIJdHOO0qYdfQCFABPa VHI8ahGq61Sz0Xhk6iJmHs8S6cp1RU57eXKhdt8tBahl1fbie3F2Bj/k0r4KqoW9 8mRWhj38mnzuGQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:18 2026 by rpki-client