$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: NK0+zcuIdqPU+rGsz2v37enThOP0p5RC1QLN5m0PUr0= Subject key identifier: 0F:7F:2A:DB:CD:18:35:EB:07:E1:92:1B:C2:EB:88:CD:55:23:81:9A Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019EBF5B1E10264A8859E84B4AC2F8DEADA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1458 Signing time: Sat 13 Jun 2026 05:01:20 +0000 Manifest this update: Sat 13 Jun 2026 05:01:20 +0000 Manifest next update: Sun 14 Jun 2026 05:01:20 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: ZioYZ40AESEQfYX6CgV2rSxXLR3PVJPHPJSUeePVg1Q=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:5b:1e:10:26:4a:88:59:e8:4b:4a:c2:f8:de:ad:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jun 13 05:01:20 2026 GMT Not After : Jun 14 05:01:20 2026 GMT Subject: CN=0f7f2adbcd1835eb07e1921bc2eb88cd5523819a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:88:9d:2e:c9:e9:b6:ba:d2:54:a3:79:d7: f4:61:61:37:56:15:87:2e:17:91:bd:62:ad:8e:0d: 2d:75:15:36:97:6f:34:4e:26:6f:85:0a:94:45:2f: 27:17:f1:c5:08:14:52:d4:ad:1f:79:8b:ca:0f:9a: 1c:d1:48:33:0d:28:bc:d6:9b:a4:3f:64:74:61:53: 13:9e:ba:95:26:ae:c8:1d:4e:4c:a9:08:e6:02:19: a1:1d:6f:99:65:0e:79:af:88:f9:56:c2:78:75:a8: cf:41:70:78:3f:c1:d8:91:f4:24:84:9f:ed:39:9b: ff:08:d2:49:4c:66:62:19:34:40:dc:62:ae:61:91: f0:c9:cc:8c:a6:0c:c6:f8:f7:85:eb:1f:ba:92:ee: 47:43:b7:ed:fd:cd:2f:3e:c2:b0:6f:fc:30:38:fd: 07:2e:13:7e:ed:4a:03:9b:c0:7e:50:99:ac:7f:71: 29:6d:6f:35:f9:35:d0:8b:8d:2f:15:0c:11:d7:d1: b7:31:ac:93:34:2f:3e:56:4f:f3:df:f4:22:b6:85: 4c:18:98:6c:42:fd:7d:1c:25:42:65:02:b7:da:fa: 52:ee:48:96:3c:8e:3e:ef:87:1e:bf:f1:a4:26:5e: 3b:00:7e:2a:e9:54:18:b8:83:ab:86:11:69:9e:09: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7F:2A:DB:CD:18:35:EB:07:E1:92:1B:C2:EB:88:CD:55:23:81:9A X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7f:59:2c:db:24:24:68:75:d6:13:01:40:cf:69:87:b3:d4: 6e:a3:3b:ec:9b:c6:aa:c3:e2:56:33:a2:23:85:a3:03:25:46: e8:c3:6d:8d:ba:ac:f9:70:3d:86:3c:f7:c2:63:e1:9c:41:04: a4:a6:69:9b:cc:9b:38:19:fe:b6:5c:cf:71:19:c8:29:ab:ca: 3f:3f:86:a9:f7:37:05:99:d9:86:38:cb:30:84:1c:39:3d:94: f4:a5:ac:02:24:a3:6e:46:b1:05:d8:4a:a4:39:83:fb:65:9a: 91:78:8b:7b:dc:93:ca:4c:6d:5d:b1:7e:f9:d0:5d:37:c4:74: dc:68:a8:db:34:8a:c8:eb:dd:b3:ff:2c:72:c8:ec:c3:94:66: 84:44:cd:6d:1e:df:06:c9:28:3b:43:9f:91:46:c1:f2:55:b8: a5:ca:e0:7b:4f:63:10:74:f1:85:39:14:88:a9:1e:b4:09:ba: 69:e4:12:20:be:16:f1:ad:58:67:5d:a6:d2:5f:46:ea:56:52: 6b:de:e2:ac:a4:44:19:f7:e8:c8:a9:0d:ea:1e:f1:66:09:ef: 35:76:52:a3:61:41:d1:a7:42:c3:e7:59:21:78:f2:97:3c:03: 67:71:eb:29:93:3d:b9:5d:ce:b3:a1:f9:3e:4d:6b:26:df:6a: 77:1d:29:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/Wx4QJkqIWehLSsL43q2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwNjEzMDUwMTIwWhcNMjYwNjE0MDUwMTIwWjAzMTEwLwYDVQQD EygwZjdmMmFkYmNkMTgzNWViMDdlMTkyMWJjMmViODhjZDU1MjM4MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTiInS7J6ba60lSjedf0YWE3VhWH LheRvWKtjg0tdRU2l280TiZvhQqURS8nF/HFCBRS1K0feYvKD5oc0UgzDSi81puk P2R0YVMTnrqVJq7IHU5MqQjmAhmhHW+ZZQ55r4j5VsJ4dajPQXB4P8HYkfQkhJ/t OZv/CNJJTGZiGTRA3GKuYZHwycyMpgzG+PeF6x+6ku5HQ7ft/c0vPsKwb/wwOP0H LhN+7UoDm8B+UJmsf3EpbW81+TXQi40vFQwR19G3MayTNC8+Vk/z3/QitoVMGJhs Qv19HCVCZQK32vpS7kiWPI4+74cev/GkJl47AH4q6VQYuIOrhhFpngkV9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9/KtvNGDXrB+GSG8LriM1VI4GaMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH9ZLNsk JGh11hMBQM9ph7PUbqM77JvGqsPiVjOiI4WjAyVG6MNtjbqs+XA9hjz3wmPhnEEE pKZpm8ybOBn+tlzPcRnIKavKPz+Gqfc3BZnZhjjLMIQcOT2U9KWsAiSjbkaxBdhK pDmD+2WakXiLe9yTykxtXbF++dBdN8R03Gio2zSKyOvds/8scsjsw5RmhETNbR7f BskoO0OfkUbB8lW4pcrge09jEHTxhTkUiKketAm6aeQSIL4W8a1YZ12m0l9G6lZS a97irKREGffoyKkN6h7xZgnvNXZSo2FB0adCw+dZIXjylzwDZ3HrKZM9uV3Os6H5 Pk1rJt9qdx0pww== -----END CERTIFICATE-----Generated at Sat Jun 13 08:37:43 2026 by rpki-client