$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: IkBj2PjASs8JayARzuO3wefexdR+Rrr+Wcxi6dlRubk= Subject key identifier: 16:56:DA:8E:F7:59:03:A3:C2:B1:11:FF:2C:3A:BD:EF:CB:CA:95:2D Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019E1D228FF53AE6C7C14704D6E56DDB418C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1404 Signing time: Tue 12 May 2026 17:01:04 +0000 Manifest this update: Tue 12 May 2026 17:01:04 +0000 Manifest next update: Wed 13 May 2026 17:01:04 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 3neu1X43NX1PIAZ05YzFYOKCo3EfRmo4vK8AOJh0kv4=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:8f:f5:3a:e6:c7:c1:47:04:d6:e5:6d:db:41:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: May 12 17:01:04 2026 GMT Not After : May 13 17:01:04 2026 GMT Subject: CN=1656da8ef75903a3c2b111ff2c3abdefcbca952d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:32:e7:3b:e9:a4:84:a0:36:1e:88:89:23: 3f:d2:01:94:8e:17:5c:e5:a4:8c:b0:5c:33:c1:d8: ca:38:73:92:51:8e:c7:e5:95:c4:5c:31:e5:94:11: 30:06:a3:b8:63:5e:86:d9:ef:17:88:8f:be:04:2d: 69:68:bb:57:f5:8a:cc:87:29:ad:48:46:5e:18:17: 40:28:91:52:43:e2:34:8d:28:b7:fe:6e:ae:95:24: 99:23:bd:1d:78:fd:df:ed:76:39:c8:51:b5:ac:00: 44:c2:25:f1:36:c4:17:ed:4a:ed:c9:06:5f:b7:8f: f9:bc:56:00:99:78:51:b5:1e:08:36:c3:6a:ae:67: 40:5d:d4:fe:57:14:01:16:4f:91:2b:a9:57:9e:53: b7:ee:3e:24:2c:b4:a7:f2:8c:d3:b9:1e:99:cd:13: 31:ad:c6:4d:f6:64:10:6b:2e:30:61:e1:6d:c7:72: 64:95:4b:41:ac:a8:9f:2d:3a:46:12:0b:6d:74:b9: f6:b5:d2:30:d6:ff:dc:d2:2c:a4:2c:eb:07:24:65: 64:e4:fe:d2:1d:38:bb:72:b1:ab:cb:0b:85:ef:d2: a5:11:0d:80:32:69:77:17:91:a1:a1:89:0f:1a:25: b1:69:43:70:56:d6:75:de:21:c0:2b:f0:5c:61:3a: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:56:DA:8E:F7:59:03:A3:C2:B1:11:FF:2C:3A:BD:EF:CB:CA:95:2D X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:e1:16:c1:c5:1a:3e:1a:6b:9c:49:ee:1f:17:ef:db:1e: e2:5e:bd:54:86:5c:e7:f7:d5:5d:e5:84:26:ed:6e:17:b1:79: 9c:11:33:cd:58:da:c6:24:64:c2:fc:8c:ab:9e:e2:a5:53:77: 31:6c:e7:4b:7c:90:e8:cd:54:a5:1b:ae:f7:de:8e:64:05:85: e0:76:99:93:02:f3:d4:11:6e:b0:63:77:7e:cc:cb:00:ae:e4: e5:04:58:1c:f1:df:03:05:4e:55:bc:10:cb:c4:9e:19:dd:c2: 0d:19:55:e5:f9:6c:88:9f:c1:16:52:b2:1b:bd:f1:67:1c:59: 3f:f8:68:66:4f:52:03:73:32:ab:5c:9a:b4:59:6a:fe:7f:22: 02:8a:31:b9:6b:1e:45:3b:63:aa:b8:2b:95:22:94:45:a8:75: 4b:83:f9:23:e5:3b:47:ad:f0:68:19:16:0b:2f:6c:30:60:d1: d3:b6:ab:0e:48:eb:69:fc:1d:73:29:dc:5c:0c:1c:a4:77:6f: 88:56:49:c2:82:9d:20:a7:00:12:9c:9b:cf:30:fc:e5:5c:ee: bf:59:a9:71:dd:27:fa:48:89:da:22:e9:83:0a:c6:50:13:69: 37:e3:a8:7f:fa:d0:ce:7d:ac:2b:df:ba:8c:35:fa:59:cc:41: 1b:96:5a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIo/1OubHwUcE1uVt20GMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwNTEyMTcwMTA0WhcNMjYwNTEzMTcwMTA0WjAzMTEwLwYDVQQD EygxNjU2ZGE4ZWY3NTkwM2EzYzJiMTExZmYyYzNhYmRlZmNiY2E5NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LIy5zvppISgNh6IiSM/0gGUjhdc 5aSMsFwzwdjKOHOSUY7H5ZXEXDHllBEwBqO4Y16G2e8XiI++BC1paLtX9YrMhymt SEZeGBdAKJFSQ+I0jSi3/m6ulSSZI70deP3f7XY5yFG1rABEwiXxNsQX7UrtyQZf t4/5vFYAmXhRtR4INsNqrmdAXdT+VxQBFk+RK6lXnlO37j4kLLSn8ozTuR6ZzRMx rcZN9mQQay4wYeFtx3JklUtBrKifLTpGEgttdLn2tdIw1v/c0iykLOsHJGVk5P7S HTi7crGrywuF79KlEQ2AMml3F5GhoYkPGiWxaUNwVtZ13iHAK/BcYTo79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZW2o73WQOjwrER/yw6ve/LypUtMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpThFsHF Gj4aa5xJ7h8X79se4l69VIZc5/fVXeWEJu1uF7F5nBEzzVjaxiRkwvyMq57ipVN3 MWznS3yQ6M1UpRuu996OZAWF4HaZkwLz1BFusGN3fszLAK7k5QRYHPHfAwVOVbwQ y8SeGd3CDRlV5flsiJ/BFlKyG73xZxxZP/hoZk9SA3Myq1yatFlq/n8iAooxuWse RTtjqrgrlSKURah1S4P5I+U7R63waBkWCy9sMGDR07arDkjrafwdcyncXAwcpHdv iFZJwoKdIKcAEpybzzD85Vzuv1mpcd0n+kiJ2iLpgwrGUBNpN+Oof/rQzn2sK9+6 jDX6WcxBG5Zaog== -----END CERTIFICATE-----Generated at Wed May 13 03:28:57 2026 by rpki-client