$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: cckUJk73Vva1WZ8aq0G5v9i9UZaIsligNGY24kquJS0= Subject key identifier: 59:9E:36:E3:7A:3D:08:04:CC:95:E6:67:0B:20:97:85:E0:66:73:2D Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019ED318C5A566153C45B6D70FBC9484590B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 19BA Signing time: Wed 17 Jun 2026 01:01:16 +0000 Manifest this update: Wed 17 Jun 2026 01:01:16 +0000 Manifest next update: Thu 18 Jun 2026 01:01:16 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: nXLF/yIPc6+pRpGddIDH+kGaBi1UUfFHGCdMyVSwGdM=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: KkDqDLNE240fCTXz3x0pbuKHvl4.roa (hash: 8CcwM3+dFL+lua0flReoYrUHpd5rKuSGWfX4/qWe1QI=) 7: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 8: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 9: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 10: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 17: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 18: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:d3:18:c5:a5:66:15:3c:45:b6:d7:0f:bc:94:84:59:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jun 17 01:01:16 2026 GMT Not After : Jun 18 01:01:16 2026 GMT Subject: CN=599e36e37a3d0804cc95e6670b209785e066732d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:57:fb:c4:bc:de:80:a3:2f:2f:d4:b2:f7: 12:c1:0c:39:af:26:1a:71:af:43:cd:a9:0e:58:66: 5d:18:83:67:92:13:94:bb:dd:2a:98:f5:8e:3d:75: 61:dc:b9:23:e2:b0:9a:75:64:92:68:ab:21:aa:eb: c5:5b:ac:cc:c3:60:c4:ab:05:23:4f:82:80:5b:57: 79:97:84:be:06:2f:7a:e3:36:2e:26:ea:4b:3e:ae: 40:9a:fe:3c:02:08:75:38:a8:7a:a2:2c:91:5f:dc: 69:25:c2:61:da:b9:66:db:a8:30:7d:d8:f7:86:0b: 46:42:4d:c6:99:79:bc:7b:75:03:7d:77:9a:ac:ca: 5e:33:5c:a3:ac:1b:36:44:db:41:1f:bc:52:ce:9e: 2b:fc:c1:53:bb:43:31:e0:d7:14:c6:7d:0e:db:60: fd:fb:24:e3:90:e6:b9:af:ef:06:c1:f1:ac:64:01: b0:34:bc:0c:4d:94:77:2c:2d:11:27:e5:d4:6d:ab: 6f:34:ec:30:2b:24:e1:b6:c1:92:78:75:a3:e6:6a: c2:59:19:e3:dc:2c:5e:e3:2d:51:0f:f2:89:b1:07: 18:95:ee:03:1a:23:c3:2b:db:90:36:25:cd:30:f4: 03:6a:eb:99:bf:10:be:dd:37:9d:ae:8c:89:e5:89: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:36:E3:7A:3D:08:04:CC:95:E6:67:0B:20:97:85:E0:66:73:2D X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3b:da:16:70:f5:31:f8:b2:f1:79:b1:69:e1:97:fb:21:a7: 96:e8:f8:81:c7:75:56:87:84:47:1e:b3:0d:2c:14:cb:fd:a9: 0f:69:9d:cb:90:37:c5:b0:b6:6b:c9:c3:8c:db:22:b0:c4:9b: 9c:f3:3c:bb:a3:ac:72:d1:ad:c6:a0:60:b8:e7:d1:5b:1d:86: ab:c9:66:40:fd:ca:e9:1b:c1:7f:bc:f2:73:8f:96:5a:31:6b: 06:c6:56:06:06:0f:83:ea:88:93:1c:55:ee:02:6d:91:2c:fe: a1:a4:3a:88:bc:06:01:02:eb:2f:ff:54:9b:24:c6:53:78:a4: bf:8c:53:6f:14:22:bb:c1:9f:6e:84:68:95:42:11:bf:66:a9: 5c:f4:75:ca:8a:b6:b2:00:9f:08:f0:c8:a0:b8:a5:e4:c0:0f: 49:d8:a6:9a:1e:69:17:61:4e:48:7a:ce:e7:09:10:39:65:bc: cc:53:f9:b9:44:3a:2b:b3:e6:5e:f2:16:6a:8a:d0:54:61:08: 22:c6:35:4d:c7:33:d4:81:71:80:51:f5:aa:da:4c:dd:cf:f6: a0:8d:aa:bd:c8:b7:8d:10:f6:3e:89:16:02:d4:ac:dc:37:8a: 4a:38:f4:a5:59:6e:6e:ee:6b:ce:72:85:20:0a:a8:ac:0e:d9: 81:13:39:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7TGMWlZhU8RbbXD7yUhFkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwNjE3MDEwMTE2WhcNMjYwNjE4MDEwMTE2WjAzMTEwLwYDVQQD Eyg1OTllMzZlMzdhM2QwODA0Y2M5NWU2NjcwYjIwOTc4NWUwNjY3MzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreNX+8S83oCjLy/UsvcSwQw5ryYa ca9DzakOWGZdGINnkhOUu90qmPWOPXVh3Lkj4rCadWSSaKshquvFW6zMw2DEqwUj T4KAW1d5l4S+Bi964zYuJupLPq5Amv48Agh1OKh6oiyRX9xpJcJh2rlm26gwfdj3 hgtGQk3GmXm8e3UDfXearMpeM1yjrBs2RNtBH7xSzp4r/MFTu0Mx4NcUxn0O22D9 +yTjkOa5r+8GwfGsZAGwNLwMTZR3LC0RJ+XUbatvNOwwKyThtsGSeHWj5mrCWRnj 3Cxe4y1RD/KJsQcYle4DGiPDK9uQNiXNMPQDauuZvxC+3TedroyJ5YlNoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmeNuN6PQgEzJXmZwsgl4XgZnMtMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTvaFnD1 Mfiy8XmxaeGX+yGnluj4gcd1VoeERx6zDSwUy/2pD2mdy5A3xbC2a8nDjNsisMSb nPM8u6OsctGtxqBguOfRWx2Gq8lmQP3K6RvBf7zyc4+WWjFrBsZWBgYPg+qIkxxV 7gJtkSz+oaQ6iLwGAQLrL/9UmyTGU3ikv4xTbxQiu8GfboRolUIRv2apXPR1yoq2 sgCfCPDIoLil5MAPSdimmh5pF2FOSHrO5wkQOWW8zFP5uUQ6K7PmXvIWaorQVGEI IsY1Tccz1IFxgFH1qtpM3c/2oI2qvci3jRD2PokWAtSs3DeKSjj0pVlubu5rznKF IAqorA7ZgRM5ow== -----END CERTIFICATE-----Generated at Wed Jun 17 09:03:17 2026 by rpki-client