$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: mxdlxNLLisXKgXHjGEPV1X92lsPZHhvqalPOzuybI+Y= Subject key identifier: FD:4D:63:D3:10:D6:8E:90:98:5A:30:8B:73:18:17:CF:0C:E1:5F:2B Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019CAE3509C3AC2209F830B84715D46D86C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1869 Signing time: Mon 02 Mar 2026 11:00:37 +0000 Manifest this update: Mon 02 Mar 2026 11:00:37 +0000 Manifest next update: Tue 03 Mar 2026 11:00:37 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=) 3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=) 4: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: 7MC8GOux68QPdmcRDn9hShcbnIgzISP1/Rd/3VrLUNQ=) 6: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 7: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 8: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 9: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=) 10: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=) 17: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:35:09:c3:ac:22:09:f8:30:b8:47:15:d4:6d:86:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Mar 2 11:00:37 2026 GMT Not After : Mar 3 11:00:37 2026 GMT Subject: CN=fd4d63d310d68e90985a308b731817cf0ce15f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:df:42:99:32:a5:81:f6:0a:36:89:a4:fa: a6:3a:7b:88:19:a1:11:ef:3c:a2:80:61:8f:e5:4f: cf:cf:21:06:11:04:02:b7:07:e1:34:c1:c0:70:57: 0b:f8:f1:ad:45:2d:66:19:58:e2:ba:74:66:5a:5a: 4c:de:9e:bb:ea:ac:03:a7:3a:a9:85:2d:34:a8:a2: 98:ac:0d:cb:19:47:18:3b:53:d7:cf:e8:ca:a5:ce: 2b:21:24:37:8d:87:35:43:66:bf:66:3a:09:a0:4b: b6:2b:1f:ff:80:48:55:35:0a:db:64:d6:bd:06:64: 68:f6:b7:86:ef:7d:3f:c2:2b:db:11:92:87:49:ce: 59:65:c5:81:21:76:55:5c:a5:c7:ba:56:62:d1:1a: 75:59:bf:b7:73:00:c9:63:54:a3:f5:5e:5d:ff:d4: 19:2e:f6:b9:73:a0:89:ac:ac:4f:d8:5d:5f:2f:98: cf:5e:61:d7:28:73:4c:1e:72:d7:bb:7f:e0:ad:dd: bd:7f:52:39:0d:65:52:64:c2:45:0a:ba:a1:23:ad: 7a:21:d3:f7:3a:96:09:ed:a3:91:38:be:a9:3b:46: ef:ec:80:df:24:5f:3d:b8:0f:77:de:dc:36:b3:4f: 8c:bb:8b:27:ad:ef:c4:23:a3:4c:38:f7:02:5a:48: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:63:D3:10:D6:8E:90:98:5A:30:8B:73:18:17:CF:0C:E1:5F:2B X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f7:2b:b4:26:48:e8:9a:00:ad:7c:48:ad:4a:38:ae:35:c5: c1:6c:a3:2d:c8:48:1c:f8:b9:a0:fa:92:86:30:2c:95:e6:ca: fa:f5:2f:2f:0e:70:97:e1:93:6e:e6:5c:79:a5:10:be:3a:8c: 4c:de:46:f6:45:f4:28:fd:6d:fb:ad:69:ab:67:80:84:39:c8: 4a:68:30:38:00:9b:f4:de:7e:e0:ee:21:c7:76:39:f8:b0:73: 52:5c:51:db:42:b1:38:69:9f:cd:d0:cd:4d:8d:28:81:61:46: 8f:a3:a0:a5:42:f6:91:92:ad:64:ef:89:3b:dc:4d:5b:ad:93: 3c:c1:81:73:fa:60:7d:61:ab:9c:d2:5c:23:f8:3b:19:3e:28: ec:ed:9d:ce:78:b9:b8:80:c9:bf:4b:08:ef:10:75:3c:bb:1e: e3:d3:9a:c2:7d:7c:b6:9c:77:9f:02:28:a7:19:11:0c:50:79: 10:39:f3:79:a6:62:53:32:a9:e0:d2:a6:c1:5d:36:d2:c8:13: 05:8b:cd:bb:01:32:8f:bf:42:ba:4c:8b:e6:10:70:27:db:55: 7b:86:a7:dd:ef:ac:c9:86:55:3f:95:51:a8:fd:76:54:52:87: c1:51:31:4c:dd:9a:36:16:14:4e:ae:0a:70:9b:39:12:90:c8: aa:3b:50:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuNQnDrCIJ+DC4RxXUbYbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMzAyMTEwMDM3WhcNMjYwMzAzMTEwMDM3WjAzMTEwLwYDVQQD EyhmZDRkNjNkMzEwZDY4ZTkwOTg1YTMwOGI3MzE4MTdjZjBjZTE1ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcrfQpkypYH2CjaJpPqmOnuIGaER 7zyigGGP5U/PzyEGEQQCtwfhNMHAcFcL+PGtRS1mGVjiunRmWlpM3p676qwDpzqp hS00qKKYrA3LGUcYO1PXz+jKpc4rISQ3jYc1Q2a/ZjoJoEu2Kx//gEhVNQrbZNa9 BmRo9reG730/wivbEZKHSc5ZZcWBIXZVXKXHulZi0Rp1Wb+3cwDJY1Sj9V5d/9QZ Lva5c6CJrKxP2F1fL5jPXmHXKHNMHnLXu3/grd29f1I5DWVSZMJFCrqhI616IdP3 OpYJ7aOROL6pO0bv7IDfJF89uA933tw2s0+Mu4snre/EI6NMOPcCWkhYDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1NY9MQ1o6QmFowi3MYF88M4V8rMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfcrtCZI 6JoArXxIrUo4rjXFwWyjLchIHPi5oPqShjAslebK+vUvLw5wl+GTbuZceaUQvjqM TN5G9kX0KP1t+61pq2eAhDnISmgwOACb9N5+4O4hx3Y5+LBzUlxR20KxOGmfzdDN TY0ogWFGj6OgpUL2kZKtZO+JO9xNW62TPMGBc/pgfWGrnNJcI/g7GT4o7O2dzni5 uIDJv0sI7xB1PLse49Oawn18tpx3nwIopxkRDFB5EDnzeaZiUzKp4NKmwV020sgT BYvNuwEyj79CukyL5hBwJ9tVe4an3e+syYZVP5VRqP12VFKHwVExTN2aNhYUTq4K cJs5EpDIqjtQYw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:22 2026 by rpki-client