$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: D4dxb+490q+utzKvt9loWAlL/AtUmD9+ISSnWgJommo= Subject key identifier: D1:F1:C8:97:30:ED:B5:B5:83:EB:1E:ED:2E:5D:06:6F:F4:12:E5:89 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019FA82C2B8AA77BF00DE4D6A90158EAB9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 1240 Signing time: Tue 28 Jul 2026 10:01:34 +0000 Manifest this update: Tue 28 Jul 2026 10:01:34 +0000 Manifest next update: Wed 29 Jul 2026 10:01:34 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 08ZdJkTnQkfw58oVLdAY3etd3CbDF9jTK0V134aQt5s=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2c:2b:8a:a7:7b:f0:0d:e4:d6:a9:01:58:ea:b9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jul 28 10:01:34 2026 GMT Not After : Jul 29 10:01:34 2026 GMT Subject: CN=d1f1c89730edb5b583eb1eed2e5d066ff412e589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:86:09:76:58:33:fd:e2:8f:88:e2:2f:7c: 0d:05:c2:ed:79:cd:db:cf:ad:8e:f1:0f:e4:6d:79: 3a:bf:db:d9:2f:58:35:86:41:97:0f:57:4b:db:05: 44:c7:b4:b0:5c:0c:9b:c0:a0:d0:de:6b:35:38:06: 40:8c:82:38:be:c8:d9:bb:88:5e:5f:13:b0:c4:94: 41:7b:b7:3c:1d:dc:5b:5e:4e:d8:8a:06:f5:a3:7c: 7d:7b:a1:f9:0f:a6:18:5a:a3:3e:00:b7:ee:f3:45: ee:da:02:b8:45:e2:db:ae:a0:f6:20:7c:c4:eb:60: f0:0d:69:a7:ab:32:70:95:77:16:53:eb:c6:85:8f: f3:08:4f:fd:ae:c6:c7:20:db:8b:29:1c:44:8d:6e: d3:f7:cb:1d:db:e2:cf:e3:13:ee:27:f6:48:2f:a4: c7:9c:bc:cc:09:0a:6b:83:5d:46:51:99:e5:73:40: 91:77:50:25:f2:73:60:dd:40:11:a4:f8:8d:98:79: 60:f4:a8:81:14:39:42:7a:c0:66:bb:39:b1:a9:1a: 75:cc:30:0d:e4:c1:79:64:0d:9a:9d:fe:54:35:dd: e1:40:32:05:a4:3d:11:42:cb:d6:aa:3a:d4:f2:e8: 1e:94:01:39:22:d1:ab:7f:7a:50:14:b8:a1:af:b9: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:C8:97:30:ED:B5:B5:83:EB:1E:ED:2E:5D:06:6F:F4:12:E5:89 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:47:a6:fe:bc:34:5b:a0:a4:32:33:2d:30:f2:e8:bc:d5: f8:96:47:5d:f1:af:07:b5:47:f5:c2:cf:18:06:43:60:2b:af: 4a:6b:bc:6e:d1:84:b2:12:db:09:ad:19:86:bc:fb:4e:22:f4: 6c:14:6f:48:f0:61:43:82:80:9a:81:af:10:a0:a9:60:22:f1: 64:e8:e5:49:5a:c8:c9:c2:1c:68:50:7a:e0:38:15:16:6d:7d: c1:ce:dd:33:b4:4b:93:35:a7:fb:dc:f6:02:73:b1:d4:c2:3d: 3e:ab:5e:3e:c6:e8:82:18:09:c1:0c:2d:e1:76:c3:73:3f:ae: 6b:6b:bb:54:b4:ff:ba:68:77:8d:ad:55:d7:a3:c3:28:0b:3e: ff:5b:77:58:13:95:fc:f3:8c:5d:c8:c7:70:18:0e:f1:c4:9e: 7d:55:18:46:82:78:46:fd:47:7b:56:9f:9e:9f:6f:53:b5:26: df:a0:15:c0:63:4b:69:cc:36:1d:22:46:2d:3f:cc:bb:02:0a: c3:53:8f:ca:66:cc:16:4c:b2:20:6c:d0:95:20:cb:5e:22:a9: 82:ed:10:1a:59:cb:66:e5:30:89:cd:64:90:4b:f7:eb:82:22: 34:8d:5b:fa:b6:f2:9b:56:d8:e4:54:3f:ce:40:d4:63:8c:c3: 49:fc:38:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oLCuKp3vwDeTWqQFY6rnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNzI4MTAwMTM0WhcNMjYwNzI5MTAwMTM0WjAzMTEwLwYDVQQD EyhkMWYxYzg5NzMwZWRiNWI1ODNlYjFlZWQyZTVkMDY2ZmY0MTJlNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLuGCXZYM/3ij4jiL3wNBcLtec3b z62O8Q/kbXk6v9vZL1g1hkGXD1dL2wVEx7SwXAybwKDQ3ms1OAZAjII4vsjZu4he XxOwxJRBe7c8HdxbXk7Yigb1o3x9e6H5D6YYWqM+ALfu80Xu2gK4ReLbrqD2IHzE 62DwDWmnqzJwlXcWU+vGhY/zCE/9rsbHINuLKRxEjW7T98sd2+LP4xPuJ/ZIL6TH nLzMCQprg11GUZnlc0CRd1Al8nNg3UARpPiNmHlg9KiBFDlCesBmuzmxqRp1zDAN 5MF5ZA2anf5UNd3hQDIFpD0RQsvWqjrU8ugelAE5ItGrf3pQFLihr7lzawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHxyJcw7bW1g+se7S5dBm/0EuWJMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV9Hpv68 NFugpDIzLTDy6LzV+JZHXfGvB7VH9cLPGAZDYCuvSmu8btGEshLbCa0Zhrz7TiL0 bBRvSPBhQ4KAmoGvEKCpYCLxZOjlSVrIycIcaFB64DgVFm19wc7dM7RLkzWn+9z2 AnOx1MI9PqtePsboghgJwQwt4XbDcz+ua2u7VLT/umh3ja1V16PDKAs+/1t3WBOV /POMXcjHcBgO8cSefVUYRoJ4Rv1He1afnp9vU7Um36AVwGNLacw2HSJGLT/MuwIK w1OPymbMFkyyIGzQlSDLXiKpgu0QGlnLZuUwic1kkEv364IiNI1b+rbym1bY5FQ/ zkDUY4zDSfw4Jw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:24:23 2026 by rpki-client