$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: hJVlMMdq6f7PRfcxvNwo/b6HmClXk/nHAsXBI0YRH2I= Subject key identifier: 1C:A7:2A:EB:9A:59:F6:70:49:95:56:C4:5E:3C:D3:7E:DC:F1:7C:4C Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 01A0D5026F833D6743FCA9831407412C1A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 156E Signing time: Thu 24 Sep 2026 20:01:41 +0000 Manifest this update: Thu 24 Sep 2026 20:01:41 +0000 Manifest next update: Fri 25 Sep 2026 20:01:41 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: fAxKCYZNZ3TQtD4a3T3yulB1Y1N8ClbOFH6bqby3zWM=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 8: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 9: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) 18: yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa (hash: 4qY/8GmsvrTI7IdeRHY7SB9zEjFFEMpgAX8FcHmNPXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:02:6f:83:3d:67:43:fc:a9:83:14:07:41:2c:1a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Sep 24 20:01:41 2026 GMT Not After : Sep 25 20:01:41 2026 GMT Subject: CN=1ca72aeb9a59f670499556c45e3cd37edcf17c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:4f:b1:ae:23:f1:a6:3e:ba:ed:6f:58:32: b0:ae:76:1d:c8:7a:00:50:76:97:8a:be:93:f5:a4: 92:81:b2:fd:98:a2:ca:e3:3e:aa:10:4f:0e:d4:0a: 6d:0e:b5:e0:f7:5a:59:f0:09:4b:0f:bd:f9:71:85: 73:0c:ba:ff:73:20:a4:42:7c:52:4f:07:c4:e8:34: c9:66:44:c6:07:62:c7:7e:98:8b:58:7c:41:1b:6b: c7:2b:b8:1b:49:8d:f6:d5:ba:a2:fd:42:3c:4a:ba: 08:70:f5:46:19:ce:f4:b1:31:44:ac:1b:5d:31:69: 8b:d5:d7:40:4f:c4:42:3c:f4:ea:2e:75:98:85:e1: ad:0b:4e:b3:41:b9:7c:d7:41:fd:1e:92:50:b5:77: 6b:14:02:de:30:3f:1d:30:c7:cb:a5:76:7a:66:32: 43:23:52:68:24:fb:49:17:e2:85:eb:90:72:40:20: 06:e7:1f:35:78:39:fd:50:27:b2:d6:65:34:39:8a: 9a:23:68:d2:06:0a:c0:ec:50:61:aa:9b:f4:e6:a5: d1:c4:6e:01:a4:03:87:56:39:1a:3b:b7:24:a5:ab: 08:c5:17:5b:b4:34:3e:3e:e0:3c:bf:93:41:a6:1d: 4e:45:2e:fb:a0:92:1c:3a:47:a2:5b:f7:33:98:f2: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:2A:EB:9A:59:F6:70:49:95:56:C4:5E:3C:D3:7E:DC:F1:7C:4C X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:40:fa:cc:10:0f:47:9c:f6:0d:65:e1:72:99:0c:c2:e8:83: 84:4f:a0:57:ca:13:dc:72:dc:15:96:6a:b7:92:8b:cc:bc:cc: ff:5a:72:c3:78:5c:6c:47:76:23:4f:17:73:19:41:dc:1a:c3: 98:31:24:94:b7:f0:47:ce:ce:cc:3f:f0:53:70:e1:a2:fb:be: df:91:5e:7c:3e:80:a3:e4:7e:f2:80:34:73:3e:1a:39:e9:c0: b2:f9:c9:0e:dd:6e:4e:ac:ab:e0:63:f1:65:2b:5a:e6:b1:56: e2:86:a1:2c:d9:33:d1:5c:d2:da:b8:a9:31:9d:1b:2f:81:ad: 27:2f:1d:5c:bc:68:d6:e9:d9:6b:45:dd:7a:5d:8f:bc:08:e0: 75:1d:c2:93:a5:21:b6:f0:a1:87:97:bd:93:c2:cd:e5:f2:1f: 83:85:93:ca:7b:c4:0b:43:bc:be:be:d4:4f:bf:83:0f:47:0d: 09:f1:94:ca:ba:f8:72:6d:72:2c:8c:7a:5b:b7:f5:28:ba:e5: 86:3c:14:a5:13:bc:e6:57:13:8e:ec:5c:c7:cd:12:16:12:8c: 0e:da:54:23:8b:00:de:f9:42:bd:53:28:3e:2b:26:bb:6e:a3: a4:d0:99:4a:79:f6:3b:6e:ca:e0:14:89:d5:c4:0a:2d:8e:db: 00:88:f1:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAm+DPWdD/KmDFAdBLBoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwOTI0MjAwMTQxWhcNMjYwOTI1MjAwMTQxWjAzMTEwLwYDVQQD EygxY2E3MmFlYjlhNTlmNjcwNDk5NTU2YzQ1ZTNjZDM3ZWRjZjE3YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S1Psa4j8aY+uu1vWDKwrnYdyHoA UHaXir6T9aSSgbL9mKLK4z6qEE8O1AptDrXg91pZ8AlLD735cYVzDLr/cyCkQnxS TwfE6DTJZkTGB2LHfpiLWHxBG2vHK7gbSY321bqi/UI8SroIcPVGGc70sTFErBtd MWmL1ddAT8RCPPTqLnWYheGtC06zQbl810H9HpJQtXdrFALeMD8dMMfLpXZ6ZjJD I1JoJPtJF+KF65ByQCAG5x81eDn9UCey1mU0OYqaI2jSBgrA7FBhqpv05qXRxG4B pAOHVjkaO7ckpasIxRdbtDQ+PuA8v5NBph1ORS77oJIcOkeiW/czmPJETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBynKuuaWfZwSZVWxF48037c8XxMMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUD6zBAP R5z2DWXhcpkMwuiDhE+gV8oT3HLcFZZqt5KLzLzM/1pyw3hcbEd2I08XcxlB3BrD mDEklLfwR87OzD/wU3Dhovu+35FefD6Ao+R+8oA0cz4aOenAsvnJDt1uTqyr4GPx ZSta5rFW4oahLNkz0VzS2ripMZ0bL4GtJy8dXLxo1unZa0Xdel2PvAjgdR3Ck6Uh tvChh5e9k8LN5fIfg4WTynvEC0O8vr7UT7+DD0cNCfGUyrr4cm1yLIx6W7f1KLrl hjwUpRO85lcTjuxcx80SFhKMDtpUI4sA3vlCvVMoPismu26jpNCZSnn2O27K4BSJ 1cQKLY7bAIjx2Q== -----END CERTIFICATE-----Generated at Fri Sep 25 06:27:25 2026 by rpki-client