$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: kzxyismzuuuGmm+YGLZvgKaZ5B5HYUbLvLuHJmF8VwM= Subject key identifier: 33:81:10:E4:93:19:ED:14:D5:CD:E1:D8:B9:5E:7B:64:27:F9:85:C7 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 01A0BC545BF74EAA410E6CF50E3C304318E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 12CF Signing time: Sun 20 Sep 2026 01:00:40 +0000 Manifest this update: Sun 20 Sep 2026 01:00:40 +0000 Manifest next update: Mon 21 Sep 2026 01:00:40 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: Wd9QpjoLiV8B4C7+z1uAMnjFvcBRmcZLjr2/j0MLUdQ=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bc:54:5b:f7:4e:aa:41:0e:6c:f5:0e:3c:30:43:18:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Sep 20 01:00:40 2026 GMT Not After : Sep 21 01:00:40 2026 GMT Subject: CN=338110e49319ed14d5cde1d8b95e7b6427f985c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:b2:96:ec:15:88:9a:80:64:c5:fd:4d:89: 54:a6:40:ef:46:5a:c2:3d:41:2c:da:ed:88:43:a3: 52:3c:ed:f6:22:af:48:f7:37:d4:b0:b3:40:8d:e7: 35:5d:1a:5f:9c:cd:c9:91:2f:63:04:c6:61:f3:02: 62:ed:f4:10:a8:c2:00:61:40:2d:b1:25:0f:ec:72: 08:6d:41:93:c3:a0:da:25:01:93:a3:0d:f2:92:42: 88:b0:87:5e:08:b2:b5:eb:85:19:64:75:4c:d0:04: d0:80:18:f7:12:d3:cd:84:aa:a3:0d:6d:0f:7b:07: 3e:50:b4:67:ce:15:aa:e5:ee:17:82:33:aa:3a:58: 86:e7:ca:66:3e:16:42:24:f9:48:8a:f9:ee:d7:b3: d7:a9:6e:6d:79:2f:be:a5:8d:3c:50:1e:10:ff:b5: 96:42:1c:16:b7:92:2e:09:33:8a:78:31:77:a6:2c: 90:53:47:96:36:61:6b:81:fb:23:27:6d:14:e3:34: a6:1c:7c:84:50:aa:ad:25:ca:87:45:ff:11:ea:d8: a8:92:2a:13:70:84:a4:6d:ba:f7:1e:7b:6a:13:86: 8f:6f:e2:f0:0a:35:23:3f:79:7b:22:14:1f:ac:ca: f6:87:fd:3f:d4:3c:b1:75:51:b4:2e:8c:86:4e:56: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:81:10:E4:93:19:ED:14:D5:CD:E1:D8:B9:5E:7B:64:27:F9:85:C7 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:34:07:ed:78:32:6f:01:19:58:5c:14:dd:52:40:26:10:6d: 24:7c:94:35:66:87:c4:05:48:25:26:1b:c0:71:a7:bb:0a:ff: 07:5f:c8:52:7c:a9:ac:df:f8:3d:61:cc:5e:39:11:aa:a7:65: a9:e3:56:96:33:97:1d:ac:da:55:5b:44:6c:6c:48:3e:3c:4d: 5d:18:ad:d0:25:30:99:bc:f1:20:a7:cf:56:e8:1a:86:db:f9: ac:26:fb:c1:5f:f5:1b:54:5a:2e:f4:6a:1f:8a:49:62:b4:da: d3:89:61:77:72:36:ef:40:1c:9e:fc:4a:06:7d:8e:0b:82:ad: 7d:72:e2:6b:a8:70:34:c5:a0:09:d9:53:b9:c0:fd:1c:1a:65: 39:b7:98:a2:74:48:25:9b:16:6f:5c:8d:1f:e0:6f:d4:d4:6a: aa:3f:2f:8d:54:10:61:13:85:c4:0a:5a:ab:b0:63:1c:a3:b4: 53:f6:ec:54:73:a8:83:68:98:09:75:40:cc:ac:2f:76:bb:0e: 63:77:ed:11:3a:57:9d:54:49:c8:43:7f:28:8a:5d:88:4b:32: dd:bd:21:5e:4d:f8:68:1b:f1:05:dd:c4:65:d9:f9:a9:4e:f9: 13:b0:94:a6:02:20:d0:9b:b3:2d:32:89:bb:25:20:25:17:5f: 2b:26:b6:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC8VFv3TqpBDmz1DjwwQxjoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwOTIwMDEwMDQwWhcNMjYwOTIxMDEwMDQwWjAzMTEwLwYDVQQD EygzMzgxMTBlNDkzMTllZDE0ZDVjZGUxZDhiOTVlN2I2NDI3Zjk4NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8+yluwViJqAZMX9TYlUpkDvRlrC PUEs2u2IQ6NSPO32Iq9I9zfUsLNAjec1XRpfnM3JkS9jBMZh8wJi7fQQqMIAYUAt sSUP7HIIbUGTw6DaJQGTow3ykkKIsIdeCLK164UZZHVM0ATQgBj3EtPNhKqjDW0P ewc+ULRnzhWq5e4XgjOqOliG58pmPhZCJPlIivnu17PXqW5teS++pY08UB4Q/7WW QhwWt5IuCTOKeDF3piyQU0eWNmFrgfsjJ20U4zSmHHyEUKqtJcqHRf8R6tiokioT cISkbbr3HntqE4aPb+LwCjUjP3l7IhQfrMr2h/0/1DyxdVG0LoyGTlaeywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOBEOSTGe0U1c3h2Llee2Qn+YXHMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjQH7Xgy bwEZWFwU3VJAJhBtJHyUNWaHxAVIJSYbwHGnuwr/B1/IUnyprN/4PWHMXjkRqqdl qeNWljOXHazaVVtEbGxIPjxNXRit0CUwmbzxIKfPVugahtv5rCb7wV/1G1RaLvRq H4pJYrTa04lhd3I270AcnvxKBn2OC4KtfXLia6hwNMWgCdlTucD9HBplObeYonRI JZsWb1yNH+Bv1NRqqj8vjVQQYROFxApaq7BjHKO0U/bsVHOog2iYCXVAzKwvdrsO Y3ftETpXnVRJyEN/KIpdiEsy3b0hXk34aBvxBd3EZdn5qU75E7CUpgIg0JuzLTKJ uyUgJRdfKya21g== -----END CERTIFICATE-----Generated at Sun Sep 20 12:47:05 2026 by rpki-client