$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: 6KdAcACg65Jvz52QtNYAXCutHIcAJRAyRazF/iBWPfM= Subject key identifier: 60:1F:4A:4B:76:76:B6:25:5D:12:D9:0F:A8:BF:5D:0B:5C:0C:75:1A Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01A0C633474AE219E957B12878BFEC7581A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1ABE Signing time: Mon 21 Sep 2026 23:00:44 +0000 Manifest this update: Mon 21 Sep 2026 23:00:44 +0000 Manifest next update: Tue 22 Sep 2026 23:00:44 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: feB7joCVGXp57prhxghBMADO6CKTU8XiiN2eZ56Nx00=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: KkDqDLNE240fCTXz3x0pbuKHvl4.roa (hash: 8CcwM3+dFL+lua0flReoYrUHpd5rKuSGWfX4/qWe1QI=) 7: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 8: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 9: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 10: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 17: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 18: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:33:47:4a:e2:19:e9:57:b1:28:78:bf:ec:75:81:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Sep 21 23:00:44 2026 GMT Not After : Sep 22 23:00:44 2026 GMT Subject: CN=601f4a4b7676b6255d12d90fa8bf5d0b5c0c751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0d:4c:16:cb:d5:cc:d3:55:4d:a5:4d:23:8c: 96:94:d9:9b:86:3f:ae:c5:c8:a0:7e:62:7d:7f:30: 45:10:8b:ef:66:6b:19:8a:3d:2d:1f:32:33:ac:f6: 62:7c:32:5b:aa:b0:eb:81:a4:44:1a:59:cf:0b:02: 71:36:98:40:5f:7b:08:cf:ee:ca:f5:ad:31:4d:9d: 4f:49:c2:f9:95:dc:ea:7e:28:81:d7:48:6f:24:85: 73:a0:4b:a5:87:57:94:87:27:68:59:7c:e6:1a:e6: d0:d6:b3:5f:df:e6:6e:71:41:85:95:f5:4f:28:2e: d2:30:05:a3:87:e5:1b:e6:8e:0c:19:a8:db:6c:81: 8b:07:75:68:99:2e:0d:f6:f1:60:f4:be:b9:fc:d1: bb:58:4a:6d:0c:64:18:a7:e5:b4:b1:25:a0:00:2f: 85:13:51:0d:08:1b:fe:13:15:59:4a:80:00:ff:22: 5d:68:d2:98:e0:2d:20:99:a8:8e:b3:29:d0:d6:b2: fa:18:11:fc:d9:15:49:50:69:9f:c1:4c:8b:fb:91: 20:84:a6:a8:cd:47:f8:07:b0:ba:01:29:8b:58:e4: 1a:ce:87:fa:bb:6b:54:d9:08:2a:8f:7d:a4:3e:d0: 20:b4:c8:3c:05:11:23:a9:5e:c4:85:35:3f:16:bd: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:4A:4B:76:76:B6:25:5D:12:D9:0F:A8:BF:5D:0B:5C:0C:75:1A X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:07:94:38:16:ba:57:95:10:dd:2d:7b:78:ac:fa:26:96:53: d1:f5:cc:55:a2:65:44:d0:1f:5a:08:83:fe:e4:04:46:94:fb: 93:5e:d5:0b:c5:9b:54:3c:0e:77:cd:cd:1e:1f:96:de:e5:4e: a5:b4:27:e9:31:71:9f:6e:87:a5:35:91:7c:16:17:d9:59:3a: a2:c8:dd:90:10:70:26:80:8a:da:e2:a9:40:b8:be:0d:f1:83: ec:fe:2e:38:7e:e4:24:4b:ff:64:44:9c:43:42:40:48:97:a6: 55:bf:78:c0:5d:f7:ae:17:7b:0b:6f:8d:39:22:b1:9b:e6:12: a2:b7:e9:59:3e:8f:43:88:5c:68:bf:c4:51:c8:c4:2b:1f:0b: dc:0b:fa:95:6c:01:e4:26:2b:ad:d0:8f:cc:12:b9:c7:d8:1f: 68:96:dd:75:2f:4a:63:57:b9:54:d3:f1:af:9e:f9:fb:d7:5c: 64:45:98:fb:0d:9b:36:58:2f:ce:7d:05:a7:15:5b:56:77:93: d3:ef:9e:95:9a:30:1f:21:6d:d5:aa:46:af:08:e8:75:33:28: 17:de:e5:57:cf:9c:7c:29:1f:f6:ee:b0:99:5f:7c:1d:d7:82: ab:41:3b:a3:6a:bb:79:90:51:df:d1:fe:02:a3:e1:10:28:f1: 3a:3f:0d:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGM0dK4hnpV7EoeL/sdYGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwOTIxMjMwMDQ0WhcNMjYwOTIyMjMwMDQ0WjAzMTEwLwYDVQQD Eyg2MDFmNGE0Yjc2NzZiNjI1NWQxMmQ5MGZhOGJmNWQwYjVjMGM3NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g1MFsvVzNNVTaVNI4yWlNmbhj+u xcigfmJ9fzBFEIvvZmsZij0tHzIzrPZifDJbqrDrgaREGlnPCwJxNphAX3sIz+7K 9a0xTZ1PScL5ldzqfiiB10hvJIVzoEulh1eUhydoWXzmGubQ1rNf3+ZucUGFlfVP KC7SMAWjh+Ub5o4MGajbbIGLB3VomS4N9vFg9L65/NG7WEptDGQYp+W0sSWgAC+F E1ENCBv+ExVZSoAA/yJdaNKY4C0gmaiOsynQ1rL6GBH82RVJUGmfwUyL+5EghKao zUf4B7C6ASmLWOQazof6u2tU2Qgqj32kPtAgtMg8BREjqV7EhTU/Fr0b/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAfSkt2drYlXRLZD6i/XQtcDHUaMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgeUOBa6 V5UQ3S17eKz6JpZT0fXMVaJlRNAfWgiD/uQERpT7k17VC8WbVDwOd83NHh+W3uVO pbQn6TFxn26HpTWRfBYX2Vk6osjdkBBwJoCK2uKpQLi+DfGD7P4uOH7kJEv/ZESc Q0JASJemVb94wF33rhd7C2+NOSKxm+YSorfpWT6PQ4hcaL/EUcjEKx8L3Av6lWwB 5CYrrdCPzBK5x9gfaJbddS9KY1e5VNPxr575+9dcZEWY+w2bNlgvzn0FpxVbVneT 0++elZowHyFt1apGrwjodTMoF97lV8+cfCkf9u6wmV98HdeCq0E7o2q7eZBR39H+ AqPhECjxOj8NgA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:48:38 2026 by rpki-client