$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: pj8EZ9Azwd9AXd4rTIbUVqy2+/ES93SQwCFTZGOx+Uo= Subject key identifier: FA:30:05:F0:9B:30:30:99:5B:AC:AE:4F:72:ED:55:B1:13:C7:6C:1E Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019D981859B5C8FDB91C36DC610E11C7D9DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 13BF Signing time: Thu 16 Apr 2026 21:00:25 +0000 Manifest this update: Thu 16 Apr 2026 21:00:25 +0000 Manifest next update: Fri 17 Apr 2026 21:00:25 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: Mo5XGVgxamCHyI5pEHJNHogJ4GK5mId6dYmDoKwMPcE=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:18:59:b5:c8:fd:b9:1c:36:dc:61:0e:11:c7:d9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Apr 16 21:00:25 2026 GMT Not After : Apr 17 21:00:25 2026 GMT Subject: CN=fa3005f09b3030995bacae4f72ed55b113c76c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:40:09:b6:ce:36:84:2f:79:2a:92:d4:c9: 5d:c5:dd:17:7c:4e:62:88:ce:c9:fa:09:4b:a6:0e: 71:44:c5:1d:7c:7f:2a:43:9b:aa:fd:c1:07:76:71: 68:6d:09:47:65:02:a0:a7:d3:fc:36:c7:d1:0b:df: 29:ea:32:31:8e:fe:6f:76:ba:bc:a0:79:3f:61:a3: 53:bd:c2:95:51:e4:5e:ef:ad:4c:17:3d:b5:bb:78: 82:79:c7:60:ce:02:4a:bd:3d:c4:22:79:24:b3:06: 41:f5:41:78:af:20:8d:56:4b:6d:c5:bc:a5:90:36: f6:dc:b4:52:de:0d:13:41:28:87:b5:b1:73:59:34: 6c:76:9a:68:14:a4:b1:82:f5:c1:9b:26:ee:70:03: 4b:af:14:82:5c:51:67:f1:79:ae:15:ad:96:c0:b0: b9:05:4e:0e:20:60:09:c2:f2:da:d2:54:65:62:3f: 6f:a0:1b:ec:3c:aa:82:e5:0d:fc:3c:41:7d:4a:32: 91:2e:91:33:46:98:b4:0f:8d:db:ab:2e:1b:6a:d0: 2a:f0:96:0a:0a:70:4a:ef:b3:89:67:f1:10:47:f6: 6e:f7:dd:a7:a4:c3:17:d6:12:24:8c:de:74:2f:e0: 9f:a7:5b:ec:90:94:7d:be:88:67:22:e8:5f:f6:d0: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:30:05:F0:9B:30:30:99:5B:AC:AE:4F:72:ED:55:B1:13:C7:6C:1E X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:94:a4:be:f1:5f:ac:dd:50:be:0e:d0:46:68:3a:f8:a3:af: 1a:72:e7:58:7f:bc:f0:39:a7:ab:de:d3:72:0e:f8:96:97:ee: 9e:16:ff:56:f7:97:08:3a:0d:69:48:05:9b:39:a0:17:d5:6f: 0f:0e:c5:a5:9a:92:b1:56:4c:0a:4b:f5:c6:c1:fd:c8:3a:b1: 80:d6:f0:34:fc:ba:cf:ff:bc:49:01:94:ab:16:65:5e:14:e4: b0:87:11:87:2d:2d:67:5a:0c:01:14:54:dc:dc:a9:48:96:30: b2:c8:dc:22:eb:33:90:77:a3:c2:a6:60:a2:ce:12:fc:71:ee: 47:38:52:ac:a0:d2:af:9a:be:97:f2:d3:39:85:a2:eb:f0:0b: 62:c5:a9:c7:ed:a4:a0:62:ba:b3:02:e1:e9:7d:50:4d:08:71: ef:69:b1:7a:86:71:18:4b:a9:d2:01:76:47:bc:79:b0:23:8d: 02:58:ee:16:38:6b:55:d4:69:04:f2:5f:61:0b:4b:7d:97:87: b8:32:dd:2e:5d:6d:46:cd:00:04:94:05:8f:c5:fc:68:b6:7b: c5:75:b4:4b:01:d6:63:53:c2:39:b6:26:aa:84:9d:25:d5:25: bb:b7:4f:85:d3:eb:70:c0:5e:2b:f4:98:72:77:ab:ae:f1:8a: 57:35:04:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGFm1yP25HDbcYQ4Rx9ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwNDE2MjEwMDI1WhcNMjYwNDE3MjEwMDI1WjAzMTEwLwYDVQQD EyhmYTMwMDVmMDliMzAzMDk5NWJhY2FlNGY3MmVkNTViMTEzYzc2YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z1ACbbONoQveSqS1Mldxd0XfE5i iM7J+glLpg5xRMUdfH8qQ5uq/cEHdnFobQlHZQKgp9P8NsfRC98p6jIxjv5vdrq8 oHk/YaNTvcKVUeRe761MFz21u3iCecdgzgJKvT3EInkkswZB9UF4ryCNVkttxbyl kDb23LRS3g0TQSiHtbFzWTRsdppoFKSxgvXBmybucANLrxSCXFFn8XmuFa2WwLC5 BU4OIGAJwvLa0lRlYj9voBvsPKqC5Q38PEF9SjKRLpEzRpi0D43bqy4batAq8JYK CnBK77OJZ/EQR/Zu992npMMX1hIkjN50L+Cfp1vskJR9vohnIuhf9tDjcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPowBfCbMDCZW6yuT3LtVbETx2weMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJSkvvFf rN1Qvg7QRmg6+KOvGnLnWH+88Dmnq97Tcg74lpfunhb/VveXCDoNaUgFmzmgF9Vv Dw7FpZqSsVZMCkv1xsH9yDqxgNbwNPy6z/+8SQGUqxZlXhTksIcRhy0tZ1oMARRU 3NypSJYwssjcIuszkHejwqZgos4S/HHuRzhSrKDSr5q+l/LTOYWi6/ALYsWpx+2k oGK6swLh6X1QTQhx72mxeoZxGEup0gF2R7x5sCONAljuFjhrVdRpBPJfYQtLfZeH uDLdLl1tRs0ABJQFj8X8aLZ7xXW0SwHWY1PCObYmqoSdJdUlu7dPhdPrcMBeK/SY cnerrvGKVzUEMQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:10:01 2026 by rpki-client