$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: gj+yKEL9gionctI/ItBv6d9J8U6bbWKp6HyZwbJ+F4c= Subject key identifier: 11:65:D0:EB:87:EE:78:91:94:CF:51:2D:41:AC:0B:60:83:9E:26:C1 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019FA9AC508E4409FC361DE7FF2124106D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 14D3 Signing time: Tue 28 Jul 2026 17:01:10 +0000 Manifest this update: Tue 28 Jul 2026 17:01:10 +0000 Manifest next update: Wed 29 Jul 2026 17:01:10 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: GaOpqJ/vlGfQfsbh1rw9LhDh4R90CVuPYswsVOnDymE=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 8: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 9: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) 18: yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa (hash: 4qY/8GmsvrTI7IdeRHY7SB9zEjFFEMpgAX8FcHmNPXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:50:8e:44:09:fc:36:1d:e7:ff:21:24:10:6d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jul 28 17:01:10 2026 GMT Not After : Jul 29 17:01:10 2026 GMT Subject: CN=1165d0eb87ee789194cf512d41ac0b60839e26c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:6e:d3:af:7e:e6:73:65:a0:ef:db:b8:50: b2:4a:76:f3:26:4f:ef:4a:cb:a6:28:17:fe:ff:91: 50:2b:2a:f3:98:77:18:02:0a:1b:9c:77:20:9e:3e: 11:51:e7:61:1a:6a:58:aa:5a:3e:4b:82:11:9a:b9: 05:e3:1c:93:c7:8c:87:57:ed:a6:d8:ed:c1:c0:99: c4:e5:e1:21:97:d9:6f:bc:bb:06:8b:55:cb:fd:d5: 0f:40:34:cd:fd:c8:f6:eb:dc:5a:96:e6:e1:a2:b3: 80:0a:43:22:96:f6:b4:e0:5f:2f:59:23:67:a7:e2: 16:4e:05:fd:80:e5:8e:cd:fe:19:44:7b:c9:6a:6d: d3:8b:95:12:55:d3:e5:7e:16:a8:9e:83:6f:92:83: 15:0a:19:99:9f:9a:ef:80:5b:d1:d0:fd:00:59:50: 6a:8f:9c:b3:ec:df:b2:34:6f:d2:43:d3:a7:a9:bb: 30:e3:fa:71:e4:01:b4:6e:f3:09:ee:4e:a7:da:6b: fb:af:41:d6:86:43:e3:90:ec:ac:e0:c8:e4:2c:7f: a6:62:e7:7f:90:31:6c:f8:2a:ec:33:69:ba:03:96: 72:5e:c4:32:82:b1:ce:56:53:a1:10:bf:d0:d3:41: 4f:3d:89:10:6d:e7:11:aa:80:4c:71:c6:5c:be:f1: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:65:D0:EB:87:EE:78:91:94:CF:51:2D:41:AC:0B:60:83:9E:26:C1 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8c:75:04:fa:2b:17:0f:4e:db:ff:2f:5e:4b:f0:20:e4:13: c0:0b:65:5f:c8:01:e3:c9:5e:f0:17:c7:43:b2:ba:df:a8:a6: 7e:2e:9f:df:62:c1:90:b4:2d:42:dc:d5:93:ce:77:e3:e0:b5: ba:81:3f:e6:3a:fd:22:30:a1:4d:15:dc:e9:84:cc:ff:a9:1a: 26:3a:cc:ae:ba:96:c4:bb:ce:e9:b0:49:09:39:0b:4d:dc:3e: ed:87:7f:ca:33:b5:8e:60:5a:fb:ad:3a:d0:0e:cc:01:e9:ae: db:30:5c:b9:30:8b:11:c7:0a:70:55:ee:1a:16:50:47:8f:ce: 28:28:66:42:e8:35:62:7d:83:c9:37:78:eb:49:c0:72:66:03: d4:c1:59:a7:c9:51:41:2d:41:aa:c4:d6:59:38:8d:ed:ff:29: 6d:fd:84:4f:33:cd:72:e7:98:5f:a9:3e:8e:d5:be:4a:38:1c: 4e:ad:41:39:16:f3:1e:db:80:85:d9:64:17:da:51:11:56:06: f9:8e:c1:20:19:1f:db:58:b7:dd:25:4f:42:94:64:fc:99:70: 74:11:ec:c2:06:f8:a8:7c:b0:48:d8:1b:e7:5f:de:40:5c:29: cf:ae:9a:b0:51:e5:06:67:26:77:fd:e9:ff:1d:7c:fd:03:18: f1:db:ae:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prFCORAn8Nh3n/yEkEG1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwNzI4MTcwMTEwWhcNMjYwNzI5MTcwMTEwWjAzMTEwLwYDVQQD EygxMTY1ZDBlYjg3ZWU3ODkxOTRjZjUxMmQ0MWFjMGI2MDgzOWUyNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzNu069+5nNloO/buFCySnbzJk/v SsumKBf+/5FQKyrzmHcYAgobnHcgnj4RUedhGmpYqlo+S4IRmrkF4xyTx4yHV+2m 2O3BwJnE5eEhl9lvvLsGi1XL/dUPQDTN/cj269xalubhorOACkMilva04F8vWSNn p+IWTgX9gOWOzf4ZRHvJam3Ti5USVdPlfhaonoNvkoMVChmZn5rvgFvR0P0AWVBq j5yz7N+yNG/SQ9Onqbsw4/px5AG0bvMJ7k6n2mv7r0HWhkPjkOys4MjkLH+mYud/ kDFs+CrsM2m6A5ZyXsQygrHOVlOhEL/Q00FPPYkQbecRqoBMccZcvvEsYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFl0OuH7niRlM9RLUGsC2CDnibBMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIx1BPor Fw9O2/8vXkvwIOQTwAtlX8gB48le8BfHQ7K636imfi6f32LBkLQtQtzVk8534+C1 uoE/5jr9IjChTRXc6YTM/6kaJjrMrrqWxLvO6bBJCTkLTdw+7Yd/yjO1jmBa+606 0A7MAemu2zBcuTCLEccKcFXuGhZQR4/OKChmQug1Yn2DyTd460nAcmYD1MFZp8lR QS1BqsTWWTiN7f8pbf2ETzPNcueYX6k+jtW+SjgcTq1BORbzHtuAhdlkF9pREVYG +Y7BIBkf21i33SVPQpRk/JlwdBHswgb4qHywSNgb51/eQFwpz66asFHlBmcmd/3p /x18/QMY8duuVg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:43:12 2026 by rpki-client