$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: KlVhCuuHTRqdEV4BFXepra29dFY4biQLgXl83dqOQKE= Subject key identifier: 9B:BB:73:15:49:41:AC:9E:FD:EA:3F:58:AE:5F:55:2F:FF:EC:89:07 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 01A1DDCB9A7E6FC8EC12EF3079B447763143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 15F8 Signing time: Sun 15 Nov 2026 06:01:10 +0000 Manifest this update: Sun 15 Nov 2026 06:01:10 +0000 Manifest next update: Mon 16 Nov 2026 06:01:10 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: LjXGV4hYG5/ncR0D5ME4yap7MFv8Hrk2lZ4ce5PhaYc=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 8: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 9: MIkWwYKo-lxfdiHQoyUHOQN0PKQ.roa (hash: R96zl5We+R+I1fgfdMcXZTJcEnWItrHSpXn8wNr6fEM=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: pVWhY9bkKFww-tz7SO-RcZ-H6hw.roa (hash: f1XvauoXYBQBdF0otm7MyxvPx6O0oMM7E6upA3xXq6Y=) 18: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:cb:9a:7e:6f:c8:ec:12:ef:30:79:b4:47:76:31:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Nov 15 06:01:10 2026 GMT Not After : Nov 16 06:01:10 2026 GMT Subject: CN=9bbb73154941ac9efdea3f58ae5f552fffec8907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:ca:a2:14:cf:cb:60:49:84:36:4d:5f:22: 06:b6:d9:d0:1d:29:27:52:37:fe:ee:5c:f5:cd:10: 30:d4:46:78:9d:ba:e2:73:53:85:d2:e9:eb:1f:9e: 25:55:c5:5c:2c:09:b3:30:fc:d4:9d:61:8b:ac:01: 0b:65:64:99:4c:52:ef:84:e4:47:94:18:30:66:a6: c4:87:35:ca:63:d1:fc:cd:47:eb:ec:e4:07:1a:f6: 6a:f6:59:c0:fb:d4:40:0f:16:15:3a:f9:ff:22:97: de:10:cd:c0:70:c8:37:1c:9c:5a:bf:e7:e6:9b:20: a1:43:94:69:ab:67:ac:ef:14:1f:3c:b4:f4:d6:f7: b0:0a:3c:86:7a:0d:a6:6b:1e:26:67:a9:8b:f0:32: f5:96:d5:67:72:38:d3:2a:b9:01:34:4e:e1:70:67: 28:c2:a9:d7:d5:9c:4f:82:49:e5:98:c7:ff:8f:f4: 5e:bc:26:32:3f:0c:49:d1:89:fd:41:90:e2:ed:dc: 9b:fc:c1:41:9e:16:d1:c1:bf:0b:94:8c:ba:bb:bd: b9:97:1d:1e:9d:2b:29:15:e0:92:ab:87:d7:5d:18: cf:8e:73:60:68:26:04:1c:12:d2:78:01:d8:c1:cd: da:40:99:25:32:ac:e8:5a:6a:e0:90:67:be:4a:41: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:73:15:49:41:AC:9E:FD:EA:3F:58:AE:5F:55:2F:FF:EC:89:07 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:38:ed:75:f6:f9:cd:58:1b:0a:7a:8a:d8:b5:88:1e:b7:a6: 5b:02:fe:da:18:0e:45:94:8a:5d:80:49:06:2a:aa:c2:b5:64: 17:82:eb:b4:71:43:af:dd:6a:cf:0c:49:1a:e6:2e:f6:b7:ac: db:0d:da:75:85:9c:fb:8a:66:42:a5:9b:62:56:e3:58:b8:61: 1e:52:e0:93:9b:ed:8f:13:0a:db:50:60:2d:be:b7:87:09:67: d4:52:21:fe:0c:9d:8e:09:72:c6:13:85:24:1e:9f:7e:9b:8c: c9:e0:f4:0c:93:08:29:ca:13:60:77:e1:13:6c:0d:2a:ec:d0: e5:2e:71:15:c9:7b:86:97:6f:0c:43:a1:31:12:65:29:05:ab: 5f:2d:1e:87:52:90:7a:d4:5e:a8:3f:0f:97:21:af:5a:d9:1a: 52:26:cd:17:b0:44:ec:44:8b:9b:0d:76:08:4f:1c:fa:86:94: c3:8f:4a:d0:ed:35:43:4e:2f:03:d9:44:0e:d5:97:e6:22:bc: 98:04:e7:e3:27:fe:52:9a:33:6a:e5:d8:5e:24:90:57:9f:2c: ef:0a:1b:da:fb:8f:44:31:a4:42:d9:4c:3f:38:e2:34:98:d2: fd:50:23:01:fe:e5:8a:24:56:38:32:4e:4c:c6:c5:30:02:6b: 5d:b8:3a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdy5p+b8jsEu8webRHdjFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYxMTE1MDYwMTEwWhcNMjYxMTE2MDYwMTEwWjAzMTEwLwYDVQQD Eyg5YmJiNzMxNTQ5NDFhYzllZmRlYTNmNThhZTVmNTUyZmZmZWM4OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr97KohTPy2BJhDZNXyIGttnQHSkn Ujf+7lz1zRAw1EZ4nbric1OF0unrH54lVcVcLAmzMPzUnWGLrAELZWSZTFLvhORH lBgwZqbEhzXKY9H8zUfr7OQHGvZq9lnA+9RADxYVOvn/IpfeEM3AcMg3HJxav+fm myChQ5Rpq2es7xQfPLT01vewCjyGeg2max4mZ6mL8DL1ltVncjjTKrkBNE7hcGco wqnX1ZxPgknlmMf/j/RevCYyPwxJ0Yn9QZDi7dyb/MFBnhbRwb8LlIy6u725lx0e nSspFeCSq4fXXRjPjnNgaCYEHBLSeAHYwc3aQJklMqzoWmrgkGe+SkEgRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu7cxVJQaye/eo/WK5fVS//7IkHMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjjtdfb5 zVgbCnqK2LWIHremWwL+2hgORZSKXYBJBiqqwrVkF4LrtHFDr91qzwxJGuYu9res 2w3adYWc+4pmQqWbYlbjWLhhHlLgk5vtjxMK21BgLb63hwln1FIh/gydjglyxhOF JB6ffpuMyeD0DJMIKcoTYHfhE2wNKuzQ5S5xFcl7hpdvDEOhMRJlKQWrXy0eh1KQ etReqD8PlyGvWtkaUibNF7BE7ESLmw12CE8c+oaUw49K0O01Q04vA9lEDtWX5iK8 mATn4yf+UpozauXYXiSQV58s7wob2vuPRDGkQtlMPzjiNJjS/VAjAf7liiRWODJO TMbFMAJrXbg6OQ== -----END CERTIFICATE-----Generated at Sun Nov 15 14:04:04 2026 by rpki-client