$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json) Hash identifier: eSxCX/3xLNGIEmQrfJtDhDaWxvttwZLyF/zD490R994= Subject key identifier: 56:D3:2C:FF:F0:52:D6:FB:AC:4F:E8:42:92:6F:18:F3:4B:EE:00:83 Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019D25BA3A6F60AB4F8B415403FF65B737BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft Manifest number: D2 Signing time: Wed 25 Mar 2026 16:00:54 +0000 Manifest this update: Wed 25 Mar 2026 16:00:54 +0000 Manifest next update: Thu 26 Mar 2026 16:00:54 +0000 Files and hashes: 1: 1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa (hash: iuLlbVe+JPEeIey84sRvj5Y7gApk0UlSqaLt4U2QnZI=) 2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=) 3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=) 4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=) 5: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=) 6: Bt944BayBPUs5tY1-40d44HAARE.roa (hash: zi5M7iQxvBHgvnNeQP8FWxBFiEPXlMuyXlNAQguQJsE=) 7: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: 8dmPnnvM8CJiXjEWlrijLAbzO4qI43juJhj9u58hNgw=) 8: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=) 9: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=) 10: MjH7rYvcoIBIIXOCcWnHyYzaWGU.roa (hash: A7+Nj4h3vWqBFhVvrrR+Y6W3dHM5p+6Sf560u65fizo=) 11: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=) 12: PMbKQ_uUlrPevpZsNx0eXksTqOY.roa (hash: SnQSjPH+aFHvy6nc0KoA3L9eJTHfO0AG19ulVcVHwqI=) 13: SPoau1EEjJNUiDSFgcPH_9bzW2w.roa (hash: b+PGonpxJwjNp5zMPGufmYaRs5LZCyUKEmEsNgj/URY=) 14: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=) 15: Tr0YnxbnlTKJBw3KuPRiQ4WLk4A.roa (hash: fUqzu0DwJKML2PUP+/+0esbF3iP8hAniVL4L3/9u/nk=) 16: VmanDZNFkgEbOQupfK0om4KXePI.roa (hash: mjsJC9NQUJfwnjHZ+fWyZnDY0q9++cAuJDUVwIpX5Qo=) 17: _6ixJuOyBdDWsrg7PfndJ2TSGK0.roa (hash: F0rHZIZZ2rx/QrDQPKEtB+najpsBYGjbpBhGiX4HEZU=) 18: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=) 19: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=) 20: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=) 21: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=) 22: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=) 23: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=) 24: pXQUKLQGLhckSIvpsa2VL54Uxa4.roa (hash: pxVzwowTxbXt7CA8ylAQ8NwPwJGfKJGc5L84cDe95WA=) 25: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=) 26: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=) 27: woRyUDAXu2ll3itSZhcE_qzCHpQ.roa (hash: YiZB9BX69sjWmQksPP2IGJL2U8tsB2a/OXEzKj1z6FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:3a:6f:60:ab:4f:8b:41:54:03:ff:65:b7:37:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Mar 25 16:00:54 2026 GMT Not After : Mar 26 16:00:54 2026 GMT Subject: CN=56d32cfff052d6fbac4fe842926f18f34bee0083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:ca:0b:a0:a6:e0:55:dc:4f:ad:e3:7a:3d: 8b:02:ca:d2:b4:da:24:0c:b1:ff:d7:12:ac:59:3c: 19:0f:08:e3:7e:c0:7b:21:04:6e:a8:51:93:10:c4: b0:91:38:63:26:df:2b:da:99:52:e1:33:ff:87:4e: ac:06:2a:17:b6:a6:26:07:74:87:c8:02:a2:ed:0b: 9b:78:e7:19:3a:23:57:9a:a3:dd:55:27:90:38:e7: 7e:c9:f8:e4:88:74:a9:b8:61:a7:19:22:35:b1:07: ac:7b:70:75:bb:fc:a8:76:66:b1:12:bb:0f:d8:73: 19:19:01:16:ea:15:59:3a:bf:50:52:01:b8:fc:54: 65:46:4c:7b:3f:d9:96:ef:1c:eb:c8:3f:32:53:62: 20:88:af:3c:2b:f8:da:ba:7f:6a:29:e4:a2:bf:7c: a2:ba:59:3e:d1:b7:b7:b0:77:ea:79:19:77:ca:e5: 12:e9:55:56:bb:48:00:5d:fb:b0:38:bd:be:0f:37: 5c:39:44:c9:2e:51:92:b4:4f:91:4e:fb:21:56:6f: fb:ee:3c:de:fa:20:be:1e:70:c4:05:e8:c6:e0:e0: c8:83:ca:bb:a8:25:e7:c7:ba:4a:b4:9b:b1:c0:ba: 44:1c:6a:69:6b:ad:ae:a2:15:54:88:e7:a5:8d:3e: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D3:2C:FF:F0:52:D6:FB:AC:4F:E8:42:92:6F:18:F3:4B:EE:00:83 X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:98:4f:87:e1:ab:3c:57:6d:cb:e6:40:a9:79:de:9b:a9:78: f7:17:13:39:1a:24:e5:4a:de:53:06:66:6a:2a:8f:8a:30:8c: 0e:09:81:ad:9d:05:7a:53:89:32:54:a7:da:db:48:96:97:84: cb:7c:f3:ab:63:f9:05:1b:80:65:82:9e:62:14:d8:d2:04:19: a1:6a:a0:bc:09:9a:d7:9c:c7:39:fa:74:95:ea:95:5c:fb:db: 13:d8:a4:33:fa:09:a7:19:a0:d6:e3:88:65:f6:00:f4:60:87: c6:e1:e3:5e:93:4a:88:4d:ff:2f:97:05:1b:6a:34:ac:da:95: 8a:0c:86:24:42:d9:3c:07:3a:86:7f:56:72:79:8a:ff:f6:c4: fb:19:a6:42:72:52:0d:d6:7e:ef:79:e8:ce:00:fb:50:4a:01: f3:21:50:cb:c0:2f:ef:b3:52:10:c0:5f:01:de:e0:ae:2b:64: e3:59:4c:d3:ac:60:8e:f4:1e:3a:51:f6:92:77:cf:cd:bc:ae: 36:bb:33:d7:6a:ce:2f:30:f9:59:56:bf:7d:a6:d2:24:5e:b9: 02:bc:db:66:3f:3e:81:6c:bd:c6:31:36:a8:9d:84:3e:47:11: b3:09:74:a6:bb:50:d2:27:56:5e:14:04:78:3b:2d:9f:0a:73: 55:77:e8:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lujpvYKtPi0FUA/9ltze+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwMzI1MTYwMDU0WhcNMjYwMzI2MTYwMDU0WjAzMTEwLwYDVQQD Eyg1NmQzMmNmZmYwNTJkNmZiYWM0ZmU4NDI5MjZmMThmMzRiZWUwMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHKC6Cm4FXcT63jej2LAsrStNok DLH/1xKsWTwZDwjjfsB7IQRuqFGTEMSwkThjJt8r2plS4TP/h06sBioXtqYmB3SH yAKi7QubeOcZOiNXmqPdVSeQOOd+yfjkiHSpuGGnGSI1sQese3B1u/yodmaxErsP 2HMZGQEW6hVZOr9QUgG4/FRlRkx7P9mW7xzryD8yU2IgiK88K/jaun9qKeSiv3yi ulk+0be3sHfqeRl3yuUS6VVWu0gAXfuwOL2+DzdcOUTJLlGStE+RTvshVm/77jze +iC+HnDEBejG4ODIg8q7qCXnx7pKtJuxwLpEHGppa62uohVUiOeljT4E/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbTLP/wUtb7rE/oQpJvGPNL7gCDMB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5hPh+Gr PFdty+ZAqXnem6l49xcTORok5UreUwZmaiqPijCMDgmBrZ0FelOJMlSn2ttIlpeE y3zzq2P5BRuAZYKeYhTY0gQZoWqgvAma15zHOfp0leqVXPvbE9ikM/oJpxmg1uOI ZfYA9GCHxuHjXpNKiE3/L5cFG2o0rNqVigyGJELZPAc6hn9WcnmK//bE+xmmQnJS DdZ+73nozgD7UEoB8yFQy8Av77NSEMBfAd7gritk41lM06xgjvQeOlH2knfPzbyu Nrsz12rOLzD5WVa/fabSJF65ArzbZj8+gWy9xjE2qJ2EPkcRswl0prtQ0idWXhQE eDstnwpzVXfogQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:40 2026 by rpki-client