$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: rx4w+4gG05DmMPQ9CmOgc08aN97vqXljyLriVsrynxw= Subject key identifier: 51:B7:BE:C6:53:F4:45:12:5F:3F:AA:07:14:31:91:A3:B6:F9:6D:D4 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019D2A0474FDCBC15F654CCCBDFDE4C0E7F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1386 Signing time: Thu 26 Mar 2026 12:00:28 +0000 Manifest this update: Thu 26 Mar 2026 12:00:28 +0000 Manifest next update: Fri 27 Mar 2026 12:00:28 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: CFyhXEMfTTvcVLCHvdSQMvwSaWq0HF8swlenVF1GjeY=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:04:74:fd:cb:c1:5f:65:4c:cc:bd:fd:e4:c0:e7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Mar 26 12:00:28 2026 GMT Not After : Mar 27 12:00:28 2026 GMT Subject: CN=51b7bec653f445125f3faa07143191a3b6f96dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f1:9d:f3:64:ee:2a:de:43:5c:a1:b5:76:4a: 25:4e:44:dc:ea:93:15:8e:41:42:cc:8a:1f:42:66: 54:1d:9a:d0:a1:1f:f8:de:f9:e5:37:c8:01:3e:67: 09:12:c5:01:53:61:d3:8b:fc:08:f9:d0:e6:0d:4a: 8e:93:f7:18:80:01:3a:66:8f:1d:e7:2b:f2:27:28: 75:ce:85:c4:1e:02:e1:2d:9b:e1:68:16:74:4d:b1: e9:22:6f:03:92:17:0b:53:5b:78:7c:8c:b8:c3:cc: 77:94:e7:e4:90:51:75:33:cd:b4:5a:8b:23:46:a8: 40:ad:89:4c:61:7b:4d:a7:d6:13:6f:d0:d1:a4:36: 21:b9:31:2c:77:75:2f:a5:f5:96:d2:79:1e:24:ca: 7e:40:f2:91:59:68:7c:f0:37:93:4a:13:e4:ee:62: ca:04:61:ae:24:15:72:37:d1:6e:53:5a:5d:bb:a7: b4:71:5a:22:ab:a8:0a:bc:66:69:be:38:a2:e2:78: 48:ad:ab:18:23:06:8c:c0:76:ff:c5:05:a5:3c:83: 2b:b0:fc:9e:72:7b:34:f0:55:0f:2a:70:95:86:51: a4:5d:36:e0:81:86:b7:f5:72:ec:86:7d:7b:f3:cb: 18:7b:43:b4:82:a6:5e:a5:b1:76:8a:a8:4b:88:39: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B7:BE:C6:53:F4:45:12:5F:3F:AA:07:14:31:91:A3:B6:F9:6D:D4 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:18:84:32:6a:64:51:7b:20:1d:3b:84:d5:70:48:ce:76:6d: 92:93:73:03:40:14:17:ec:eb:92:6b:a9:dc:96:b6:49:0d:cb: ca:c4:9c:5c:00:99:92:72:8f:10:43:64:78:0b:01:65:70:47: 13:89:f3:25:92:76:3e:1c:b8:e8:d8:f7:02:50:2e:80:94:08: 10:05:5c:31:02:7b:96:e9:75:ee:46:70:13:dd:f4:fc:01:10: c3:0f:4a:66:0e:ed:53:f7:37:a1:15:42:7b:a5:aa:68:c6:9a: 28:69:f1:8e:1d:63:2b:5c:0d:0f:c2:23:76:4c:28:c8:8c:4e: 0b:3d:de:71:65:9a:fb:55:ec:1d:55:9b:1f:f8:7f:4a:26:73: b0:e2:2c:a1:1c:77:04:1e:64:3e:a5:39:aa:c2:d8:b6:04:ba: 1f:cd:15:5b:6a:f3:48:bb:3f:a3:3f:8f:79:ca:b1:94:19:6b: 89:ac:d0:36:a3:07:f1:ec:4d:0d:aa:06:02:84:d5:50:3f:8b: d8:c5:ba:38:cf:f4:f3:32:78:0f:36:3d:ce:4a:8a:8e:2c:40: 32:21:92:54:68:fc:0d:b0:af:5b:a6:8c:0a:2d:9b:91:80:a7: df:72:c4:50:0f:62:c5:65:ca:0e:ef:e2:55:47:5d:ed:2e:3c: 85:75:14:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qBHT9y8FfZUzMvf3kwOfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMzI2MTIwMDI4WhcNMjYwMzI3MTIwMDI4WjAzMTEwLwYDVQQD Eyg1MWI3YmVjNjUzZjQ0NTEyNWYzZmFhMDcxNDMxOTFhM2I2Zjk2ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fGd82TuKt5DXKG1dkolTkTc6pMV jkFCzIofQmZUHZrQoR/43vnlN8gBPmcJEsUBU2HTi/wI+dDmDUqOk/cYgAE6Zo8d 5yvyJyh1zoXEHgLhLZvhaBZ0TbHpIm8DkhcLU1t4fIy4w8x3lOfkkFF1M820Wosj RqhArYlMYXtNp9YTb9DRpDYhuTEsd3UvpfWW0nkeJMp+QPKRWWh88DeTShPk7mLK BGGuJBVyN9FuU1pdu6e0cVoiq6gKvGZpvjii4nhIrasYIwaMwHb/xQWlPIMrsPye cns08FUPKnCVhlGkXTbggYa39XLshn1788sYe0O0gqZepbF2iqhLiDkk6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG3vsZT9EUSXz+qBxQxkaO2+W3UMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxiEMmpk UXsgHTuE1XBIznZtkpNzA0AUF+zrkmup3Ja2SQ3LysScXACZknKPEENkeAsBZXBH E4nzJZJ2Phy46Nj3AlAugJQIEAVcMQJ7lul17kZwE930/AEQww9KZg7tU/c3oRVC e6WqaMaaKGnxjh1jK1wND8IjdkwoyIxOCz3ecWWa+1XsHVWbH/h/SiZzsOIsoRx3 BB5kPqU5qsLYtgS6H80VW2rzSLs/oz+PecqxlBlriazQNqMH8exNDaoGAoTVUD+L 2MW6OM/08zJ4DzY9zkqKjixAMiGSVGj8DbCvW6aMCi2bkYCn33LEUA9ixWXKDu/i VUdd7S48hXUUcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:40 2026 by rpki-client