$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: ZSH6AQpxc1B6HnzCta74+PuqV4b5gxYSzza76k5X8cE= Subject key identifier: 60:A6:6D:1B:25:25:2F:07:33:34:4E:19:EE:EC:B0:89:E9:E4:BF:21 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019CAE6C75A145D45A6681207124D03BFB6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1346 Signing time: Mon 02 Mar 2026 12:01:09 +0000 Manifest this update: Mon 02 Mar 2026 12:01:09 +0000 Manifest next update: Tue 03 Mar 2026 12:01:09 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: fSQt8PZXGjGM4rkqmzB1aXfnkW3G6dARrqXLAc8SoxM=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:6c:75:a1:45:d4:5a:66:81:20:71:24:d0:3b:fb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Mar 2 12:01:09 2026 GMT Not After : Mar 3 12:01:09 2026 GMT Subject: CN=60a66d1b25252f0733344e19eeecb089e9e4bf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:c6:ea:e3:a3:6f:26:08:07:10:e6:bf:3d: 06:ae:82:d2:00:28:73:a9:f3:e0:6c:9d:7c:3b:58: 5b:13:2e:71:0e:46:10:a6:c5:a5:6c:ed:09:14:68: c9:d0:28:ee:ee:b0:3b:be:eb:49:e0:77:8d:a2:07: e8:aa:c6:86:68:4b:a6:59:c3:76:83:7d:b4:25:28: ab:62:f9:bc:96:67:5e:de:bb:99:30:8d:1b:c2:0f: fb:c6:f7:59:4f:0e:1f:4f:93:60:58:de:09:cd:e2: c6:23:f9:89:72:96:5d:20:c4:ca:6d:85:76:b1:5f: 1e:03:ed:04:84:42:6f:81:45:62:bc:5c:cc:72:65: 98:2b:4c:30:cf:2c:a8:23:8d:f3:d7:e8:84:40:46: 70:0f:9e:60:cb:e3:0d:f8:b6:d9:05:b6:75:46:42: 78:28:1b:88:0d:cd:e0:7e:10:47:06:d8:21:c0:37: d1:5c:95:ba:78:71:0c:4d:f7:84:97:a9:65:8d:cc: 4a:aa:f3:4e:40:05:ac:91:48:52:03:00:d1:49:d7: 16:58:2a:87:7e:24:b2:0c:5d:a9:37:3a:b7:4c:fc: 8e:9a:2e:b7:df:e6:8d:06:62:bd:08:79:40:9e:0b: e5:41:bf:bb:4d:42:27:17:34:49:d8:d6:27:51:14: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A6:6D:1B:25:25:2F:07:33:34:4E:19:EE:EC:B0:89:E9:E4:BF:21 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1e:52:90:15:a2:1a:09:03:c6:ba:93:2f:13:da:49:07:0b: 2d:19:9a:1c:83:3b:79:f9:a8:d9:76:85:8b:51:ee:1d:ba:a7: 52:89:b8:1c:12:93:8f:b6:5d:db:9f:6d:4b:82:1a:b8:dd:e4: e4:fc:00:c0:51:a5:b6:8d:58:87:4c:94:c6:ce:cf:05:f5:4c: cf:ca:93:60:34:c8:ac:de:85:e9:a8:09:6d:1e:5d:32:b9:53: 2d:31:58:15:88:21:dd:01:c4:0b:e1:90:33:ec:d9:99:cd:9c: dd:4e:02:f6:4b:91:23:de:d0:1b:33:2b:d8:91:a1:07:d9:d4: 50:71:02:09:44:d9:28:a7:75:0c:d9:85:fd:9c:a2:5b:f9:35: ba:c5:64:39:89:d8:b5:7b:49:37:01:95:6f:b0:52:2c:4e:6d: ba:b2:6f:89:36:ca:9c:47:e2:dd:ac:2b:ac:ca:fa:2e:9a:88: 40:ab:f7:90:8a:29:dc:e1:6b:36:b4:71:95:28:df:86:64:62: 50:8f:ad:3b:ea:1b:c8:65:76:c1:ca:93:a1:e4:d2:bf:c6:47: 66:64:b3:84:5d:bb:b4:e7:80:2d:fe:29:32:d3:3b:bf:f1:80: 41:19:14:46:b6:32:24:b6:fd:1d:20:53:ca:80:55:10:9e:63: 03:62:4a:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyubHWhRdRaZoEgcSTQO/tuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMzAyMTIwMTA5WhcNMjYwMzAzMTIwMTA5WjAzMTEwLwYDVQQD Eyg2MGE2NmQxYjI1MjUyZjA3MzMzNDRlMTllZWVjYjA4OWU5ZTRiZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlvG6uOjbyYIBxDmvz0GroLSAChz qfPgbJ18O1hbEy5xDkYQpsWlbO0JFGjJ0Cju7rA7vutJ4HeNogfoqsaGaEumWcN2 g320JSirYvm8lmde3ruZMI0bwg/7xvdZTw4fT5NgWN4JzeLGI/mJcpZdIMTKbYV2 sV8eA+0EhEJvgUVivFzMcmWYK0wwzyyoI43z1+iEQEZwD55gy+MN+LbZBbZ1RkJ4 KBuIDc3gfhBHBtghwDfRXJW6eHEMTfeEl6lljcxKqvNOQAWskUhSAwDRSdcWWCqH fiSyDF2pNzq3TPyOmi633+aNBmK9CHlAngvlQb+7TUInFzRJ2NYnURRd8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCmbRslJS8HMzROGe7ssInp5L8hMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR5SkBWi GgkDxrqTLxPaSQcLLRmaHIM7efmo2XaFi1HuHbqnUom4HBKTj7Zd259tS4IauN3k 5PwAwFGlto1Yh0yUxs7PBfVMz8qTYDTIrN6F6agJbR5dMrlTLTFYFYgh3QHEC+GQ M+zZmc2c3U4C9kuRI97QGzMr2JGhB9nUUHECCUTZKKd1DNmF/ZyiW/k1usVkOYnY tXtJNwGVb7BSLE5turJviTbKnEfi3awrrMr6LpqIQKv3kIop3OFrNrRxlSjfhmRi UI+tO+obyGV2wcqToeTSv8ZHZmSzhF27tOeALf4pMtM7v/GAQRkURrYyJLb9HSBT yoBVEJ5jA2JKhA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:06 2026 by rpki-client