$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: X6g6bu/rmNr97vMdBRasBOvObGuUNzGKcCLiY3r40N4= Subject key identifier: 8A:F2:1B:03:9F:37:20:ED:00:8F:0F:1B:3D:1E:5A:AB:3A:13:04:CB Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019D97E15E89D1BE19DE665CBAF55BAE44D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 112E Signing time: Thu 16 Apr 2026 20:00:22 +0000 Manifest this update: Thu 16 Apr 2026 20:00:22 +0000 Manifest next update: Fri 17 Apr 2026 20:00:22 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: JxL7zPOIUykHCR5DT3N725JfxEREPRML1fhbGcaH3NY=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e1:5e:89:d1:be:19:de:66:5c:ba:f5:5b:ae:44:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Apr 16 20:00:22 2026 GMT Not After : Apr 17 20:00:22 2026 GMT Subject: CN=8af21b039f3720ed008f0f1b3d1e5aab3a1304cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:52:99:c0:ec:af:a1:75:a8:83:5e:74:7d: 64:03:af:7c:50:d4:fc:1f:7f:f3:86:fc:d8:b1:4b: 0a:69:f8:81:12:92:95:d8:56:f5:78:34:ab:2e:9c: 2c:8a:3f:e7:fb:0b:b1:9a:64:97:fd:ec:37:8c:a2: ae:3b:14:27:c5:32:25:0b:39:ec:42:4d:9d:e5:10: 1e:b3:78:cc:d0:29:cf:93:6e:95:4b:32:10:4a:36: ae:35:b9:96:69:ec:e3:14:79:16:69:01:f2:b9:8d: 72:8e:8f:88:ef:ac:09:24:f2:b3:a1:62:3a:08:c2: 89:d6:db:75:c5:9e:08:da:5f:12:c5:c3:52:98:db: a8:8c:46:5f:fc:6a:32:54:37:7e:06:86:cf:bb:c4: 8c:29:98:6d:b5:8f:af:48:c8:a4:01:60:e4:66:e5: c5:18:13:02:44:04:00:5e:df:65:ff:bc:19:62:10: 9e:a5:dc:f9:2f:81:30:bd:11:fc:02:99:9f:1f:6a: 38:5c:89:b0:c9:3a:7b:df:3f:1a:23:6a:d8:48:ef: b5:50:aa:e6:bd:6a:0a:1c:ac:cb:92:84:39:6c:ce: 19:8d:e2:5b:c0:e9:9b:fa:08:da:38:68:e3:bd:6c: cb:db:3b:42:12:d4:2e:6b:ac:c0:1a:95:35:10:88: 1c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:1B:03:9F:37:20:ED:00:8F:0F:1B:3D:1E:5A:AB:3A:13:04:CB X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1d:81:72:f7:16:c8:0d:d6:c8:92:e2:de:bb:0d:db:40:72: 54:2c:9f:ce:bb:62:97:80:23:b2:a2:7a:3c:ee:6c:b2:cc:28: bc:c3:24:07:fe:d8:50:4a:53:16:78:6b:ba:3c:c4:bf:63:b6: a5:3f:da:ff:7f:e6:17:2f:2c:19:76:89:e7:b4:a2:ea:f1:24: c8:71:6b:64:67:bb:93:bb:ea:33:2a:00:62:cc:7b:77:9a:b1: 50:c2:65:a8:d5:3e:fa:00:59:d7:d8:78:8f:50:f7:a8:65:85: 31:f7:73:c1:2b:3a:e4:d9:7a:e2:9c:af:76:47:08:55:6e:b1: 79:18:84:4d:e9:73:0e:4e:a7:b0:ea:36:d8:9e:70:f3:c4:ee: 9a:54:97:be:f4:c6:01:54:36:f4:c9:d7:71:f9:a5:5d:df:60: a6:07:1e:43:c6:71:eb:71:38:62:b9:b3:48:a7:c5:3b:00:07: cf:34:1f:3f:1c:16:c1:ad:a7:df:f5:02:4c:e1:aa:db:52:c1: c4:58:33:32:79:62:83:79:b3:ea:ae:c2:59:a7:44:da:a2:c2: 53:f1:49:d8:90:eb:ed:fc:a1:b5:46:b9:ef:24:1b:e4:99:fa: 1e:78:9c:8a:2e:84:5a:16:7d:78:03:ea:93:0d:aa:b1:13:63: cf:f1:1d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4V6J0b4Z3mZcuvVbrkTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNDE2MjAwMDIyWhcNMjYwNDE3MjAwMDIyWjAzMTEwLwYDVQQD Eyg4YWYyMWIwMzlmMzcyMGVkMDA4ZjBmMWIzZDFlNWFhYjNhMTMwNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3NSmcDsr6F1qINedH1kA698UNT8 H3/zhvzYsUsKafiBEpKV2Fb1eDSrLpwsij/n+wuxmmSX/ew3jKKuOxQnxTIlCzns Qk2d5RAes3jM0CnPk26VSzIQSjauNbmWaezjFHkWaQHyuY1yjo+I76wJJPKzoWI6 CMKJ1tt1xZ4I2l8SxcNSmNuojEZf/GoyVDd+BobPu8SMKZhttY+vSMikAWDkZuXF GBMCRAQAXt9l/7wZYhCepdz5L4EwvRH8ApmfH2o4XImwyTp73z8aI2rYSO+1UKrm vWoKHKzLkoQ5bM4ZjeJbwOmb+gjaOGjjvWzL2ztCEtQua6zAGpU1EIgcWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIryGwOfNyDtAI8PGz0eWqs6EwTLMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR2BcvcW yA3WyJLi3rsN20ByVCyfzrtil4AjsqJ6PO5ssswovMMkB/7YUEpTFnhrujzEv2O2 pT/a/3/mFy8sGXaJ57Si6vEkyHFrZGe7k7vqMyoAYsx7d5qxUMJlqNU++gBZ19h4 j1D3qGWFMfdzwSs65Nl64pyvdkcIVW6xeRiETelzDk6nsOo22J5w88TumlSXvvTG AVQ29MnXcfmlXd9gpgceQ8Zx63E4YrmzSKfFOwAHzzQfPxwWwa2n3/UCTOGq21LB xFgzMnlig3mz6q7CWadE2qLCU/FJ2JDr7fyhtUa57yQb5Jn6Hnicii6EWhZ9eAPq kw2qsRNjz/EdfQ== -----END CERTIFICATE-----Generated at Thu Apr 16 23:55:02 2026 by rpki-client