$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: HlTSk7onzxSLcWnrIkyEjia+ohuTpnu+IaLgjk4E630= Subject key identifier: B2:F9:DA:0B:A2:71:10:8D:84:08:90:2F:50:1D:7A:67:60:8C:23:EF Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019CB023F849AAB1A453F7B62F167F0D13AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 186A Signing time: Mon 02 Mar 2026 20:01:13 +0000 Manifest this update: Mon 02 Mar 2026 20:01:13 +0000 Manifest next update: Tue 03 Mar 2026 20:01:13 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=) 3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=) 4: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: qC/XqevHdUPAmv+KLGypSCGvC4ErTwDyhuUXecQGdX4=) 6: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 7: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 8: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 9: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=) 10: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=) 17: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b0:23:f8:49:aa:b1:a4:53:f7:b6:2f:16:7f:0d:13:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Mar 2 20:01:13 2026 GMT Not After : Mar 3 20:01:13 2026 GMT Subject: CN=b2f9da0ba271108d8408902f501d7a67608c23ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:be:a4:80:84:70:c5:75:20:94:39:83:46: c0:a2:6f:2e:4c:a7:e4:85:6f:83:9b:93:a4:91:7d: ec:b0:e8:4e:25:31:2f:46:22:2b:fe:11:90:ea:fa: 82:75:36:a6:6e:19:9d:95:3d:7c:c7:92:78:eb:7d: 56:64:eb:13:eb:09:6b:23:b8:76:ac:f3:cb:f1:8d: f3:32:10:09:a2:b1:98:e9:f4:e4:f6:a3:83:16:91: 09:04:c2:28:f2:6e:10:72:52:f3:59:0c:f9:c6:9b: ef:ac:58:98:57:20:7e:53:66:c9:ea:2e:d0:07:d3: 80:d4:35:ef:d7:4d:a1:d3:32:6f:50:11:20:9e:10: 96:cc:0c:a8:24:e8:f1:e5:03:94:5b:92:d7:b2:fe: d9:53:27:0c:86:a3:97:66:5a:69:53:a4:93:89:0e: d6:f4:8c:45:d6:3c:6b:41:58:5d:ea:f6:98:e7:67: 2e:f3:91:3f:96:a1:ec:9f:20:3e:99:ca:1b:89:a0: 73:f6:16:27:5a:f9:1b:f0:b9:63:e1:9d:4f:48:fe: 0b:ce:90:1b:fb:b8:5a:ef:f6:ac:12:db:96:88:96: 62:8c:ba:f6:8e:d1:92:c2:13:53:23:a4:6b:1c:44: 53:7d:48:57:80:03:f0:b4:97:84:4d:09:96:68:b2: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:DA:0B:A2:71:10:8D:84:08:90:2F:50:1D:7A:67:60:8C:23:EF X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:cf:c4:a9:d4:50:01:42:be:61:bd:19:ec:e3:a7:be:f8:f1: 18:7a:33:62:f5:ba:11:b4:f4:09:57:2b:dc:b6:58:dd:89:d8: 12:51:08:b1:45:6f:42:20:c2:19:7e:b0:ec:f2:a0:32:07:cf: 29:2a:17:a7:31:14:8b:a6:0e:51:5f:27:a4:c3:97:ad:fe:be: 34:e5:b6:c7:fd:0a:59:18:05:c5:ba:74:eb:94:5e:a2:a9:36: 9d:1c:c3:40:7b:5f:66:8a:75:f0:81:f3:99:7e:de:76:3c:53: 71:81:62:87:ff:3e:ba:c4:f8:51:03:e1:15:18:4a:72:09:92: f1:36:f5:ab:8a:77:72:fe:d8:b5:82:1c:49:ee:7f:08:1b:cc: 45:73:52:97:1f:79:ad:cd:2f:71:18:b5:f0:14:45:89:be:06: d2:1b:f1:3f:6b:80:7c:7e:a5:a0:99:51:77:65:d2:6b:f1:7e: 3d:f6:5c:10:32:39:b3:de:c0:09:48:29:f3:d4:66:5f:4a:8a: 8a:8a:d8:d0:1b:aa:21:71:99:d8:20:e7:8d:58:42:5b:f9:11: 1d:62:bd:61:5f:24:d0:df:8d:db:6f:e6:bb:ef:5a:34:ca:76: 84:15:bc:30:f2:fd:b1:db:5d:58:4c:9f:2d:de:d3:6e:5e:51: 35:27:9f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZywI/hJqrGkU/e2LxZ/DROqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMzAyMjAwMTEzWhcNMjYwMzAzMjAwMTEzWjAzMTEwLwYDVQQD EyhiMmY5ZGEwYmEyNzExMDhkODQwODkwMmY1MDFkN2E2NzYwOGMyM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnC+pICEcMV1IJQ5g0bAom8uTKfk hW+Dm5OkkX3ssOhOJTEvRiIr/hGQ6vqCdTambhmdlT18x5J4631WZOsT6wlrI7h2 rPPL8Y3zMhAJorGY6fTk9qODFpEJBMIo8m4QclLzWQz5xpvvrFiYVyB+U2bJ6i7Q B9OA1DXv102h0zJvUBEgnhCWzAyoJOjx5QOUW5LXsv7ZUycMhqOXZlppU6STiQ7W 9IxF1jxrQVhd6vaY52cu85E/lqHsnyA+mcobiaBz9hYnWvkb8Llj4Z1PSP4LzpAb +7ha7/asEtuWiJZijLr2jtGSwhNTI6RrHERTfUhXgAPwtJeETQmWaLJVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL52guicRCNhAiQL1AdemdgjCPvMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAts/EqdRQ AUK+Yb0Z7OOnvvjxGHozYvW6EbT0CVcr3LZY3YnYElEIsUVvQiDCGX6w7PKgMgfP KSoXpzEUi6YOUV8npMOXrf6+NOW2x/0KWRgFxbp065Reoqk2nRzDQHtfZop18IHz mX7edjxTcYFih/8+usT4UQPhFRhKcgmS8Tb1q4p3cv7YtYIcSe5/CBvMRXNSlx95 rc0vcRi18BRFib4G0hvxP2uAfH6loJlRd2XSa/F+PfZcEDI5s97ACUgp89RmX0qK iorY0BuqIXGZ2CDnjVhCW/kRHWK9YV8k0N+N22/mu+9aNMp2hBW8MPL9sdtdWEyf Ld7Tbl5RNSef1w== -----END CERTIFICATE-----Generated at Tue Mar 3 00:58:28 2026 by rpki-client