$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: ITjiFtxfsD0FSySK4eY0QGm/cReKpZVrWYPCEVnRrKc= Subject key identifier: 47:A1:2A:6D:5B:39:EC:E2:97:C6:7A:22:C4:92:7B:59:C8:48:00:B5 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019D97E15C9673BE95EB3AAB81E588A96BBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 18E2 Signing time: Thu 16 Apr 2026 20:00:21 +0000 Manifest this update: Thu 16 Apr 2026 20:00:21 +0000 Manifest next update: Fri 17 Apr 2026 20:00:21 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=) 3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=) 4: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: u2TnepRKNbLLqTIaFQ/WK1VQR2L8RxM5Gah7SpybTQM=) 6: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 7: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 8: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 9: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=) 10: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=) 17: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e1:5c:96:73:be:95:eb:3a:ab:81:e5:88:a9:6b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Apr 16 20:00:21 2026 GMT Not After : Apr 17 20:00:21 2026 GMT Subject: CN=47a12a6d5b39ece297c67a22c4927b59c84800b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:16:8b:23:8d:ea:f0:7c:2e:ec:14:37:09: 14:dc:b5:95:46:3c:cd:29:dd:b6:f4:47:c8:b4:f5: d6:91:18:ab:82:c2:76:41:b2:00:28:86:b9:5c:bb: be:61:90:e3:87:dc:b6:16:5c:90:70:ea:2c:08:f7: 5f:62:f5:db:ed:27:1b:4d:b1:9b:c5:c5:30:59:c4: c3:f7:69:e1:0e:a7:a1:e6:42:18:d4:ca:4d:d4:8e: aa:74:a1:55:82:ea:30:a7:76:1e:18:2e:df:2e:b3: 6f:9b:06:84:f0:be:84:53:b4:b0:17:bc:06:03:4b: 47:fb:fd:36:5c:f0:1a:38:78:9d:54:dc:d8:ac:89: a7:05:93:ce:73:06:3c:ac:9b:8d:de:e9:08:3a:30: 85:1b:92:a8:21:ea:b5:e1:de:3b:fb:b1:7e:97:72: ba:72:f0:15:ed:28:9a:f0:ea:8b:b5:39:3b:56:97: 53:7a:14:38:31:c8:de:02:9a:da:74:b3:bf:fb:2f: 14:e8:f3:14:90:a1:6e:7e:3f:ff:26:17:a6:64:bd: a1:5a:5e:df:d2:41:29:81:61:f3:7c:aa:5c:2e:fc: 0c:a6:cd:9b:f1:cd:0e:d7:c2:c4:dc:41:08:4d:b2: d3:e0:a7:26:b8:3d:ab:6d:31:e1:5a:65:f1:20:f8: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:2A:6D:5B:39:EC:E2:97:C6:7A:22:C4:92:7B:59:C8:48:00:B5 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:14:34:20:e1:cc:2b:e9:21:24:62:12:9f:63:08:ef:2f:3e: 3c:01:3a:cd:c5:0a:c1:13:bd:a6:81:d6:fa:a4:a5:d2:60:9a: d5:97:9d:3b:d3:5a:4f:c9:97:9f:01:94:63:9a:48:37:29:7b: 18:33:f8:02:49:3f:06:34:0c:0c:e9:1b:ae:a0:00:a3:2a:70: 14:54:2f:30:73:a7:f5:ef:7f:96:43:b2:94:21:49:72:5b:ad: b9:b4:fc:2d:85:e4:28:24:e1:fb:e7:0a:ef:67:18:17:73:85: 50:d3:ed:c2:21:d9:9e:e9:73:15:47:8d:26:e2:23:59:3f:f5: 20:56:86:59:c0:c3:15:f4:2b:0f:2b:6d:a1:e5:33:71:4f:42: 79:58:3d:d2:60:a3:5e:4d:95:1c:58:e0:90:76:5c:09:a6:85: 8b:40:0f:24:cc:a5:93:e8:37:ac:dc:f2:84:02:5d:e9:08:8c: 5f:7f:49:5a:d1:24:a8:61:2d:89:21:00:33:cc:9c:4d:44:98: 79:d7:24:21:64:4f:80:6d:6d:da:b8:0a:d3:fa:e6:07:4b:59: 46:27:ba:65:37:84:73:af:1b:c6:0e:fe:ae:37:dd:eb:77:45: 71:56:ff:c3:a1:ca:1c:17:85:31:99:46:e3:ce:c9:97:86:8b: 89:ed:09:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4VyWc76V6zqrgeWIqWu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwNDE2MjAwMDIxWhcNMjYwNDE3MjAwMDIxWjAzMTEwLwYDVQQD Eyg0N2ExMmE2ZDViMzllY2UyOTdjNjdhMjJjNDkyN2I1OWM4NDgwMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNIWiyON6vB8LuwUNwkU3LWVRjzN Kd229EfItPXWkRirgsJ2QbIAKIa5XLu+YZDjh9y2FlyQcOosCPdfYvXb7ScbTbGb xcUwWcTD92nhDqeh5kIY1MpN1I6qdKFVguowp3YeGC7fLrNvmwaE8L6EU7SwF7wG A0tH+/02XPAaOHidVNzYrImnBZPOcwY8rJuN3ukIOjCFG5KoIeq14d47+7F+l3K6 cvAV7Sia8OqLtTk7VpdTehQ4McjeApradLO/+y8U6PMUkKFufj//JhemZL2hWl7f 0kEpgWHzfKpcLvwMps2b8c0O18LE3EEITbLT4KcmuD2rbTHhWmXxIPiwbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEehKm1bOezil8Z6IsSSe1nISAC1MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhQ0IOHM K+khJGISn2MI7y8+PAE6zcUKwRO9poHW+qSl0mCa1ZedO9NaT8mXnwGUY5pINyl7 GDP4Akk/BjQMDOkbrqAAoypwFFQvMHOn9e9/lkOylCFJclutubT8LYXkKCTh++cK 72cYF3OFUNPtwiHZnulzFUeNJuIjWT/1IFaGWcDDFfQrDyttoeUzcU9CeVg90mCj Xk2VHFjgkHZcCaaFi0APJMylk+g3rNzyhAJd6QiMX39JWtEkqGEtiSEAM8ycTUSY edckIWRPgG1t2rgK0/rmB0tZRie6ZTeEc68bxg7+rjfd63dFcVb/w6HKHBeFMZlG 487Jl4aLie0JEw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:22:12 2026 by rpki-client