$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: RTNhmrQPQFuMksxQoEFymV8QP3j4Ji+PfaIfscSZ2qM= Subject key identifier: DE:6A:78:AB:07:19:44:13:AC:36:32:02:3A:88:84:E3:B8:C3:35:65 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019CAC7E5EF11B242701CD2116C1A3D0D3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1345 Signing time: Mon 02 Mar 2026 03:01:28 +0000 Manifest this update: Mon 02 Mar 2026 03:01:28 +0000 Manifest next update: Tue 03 Mar 2026 03:01:28 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 6nOR0s7cxBAXp+cfZadHr20pjfQVCk3fVHD7jUASxoI=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:7e:5e:f1:1b:24:27:01:cd:21:16:c1:a3:d0:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Mar 2 03:01:28 2026 GMT Not After : Mar 3 03:01:28 2026 GMT Subject: CN=de6a78ab07194413ac3632023a8884e3b8c33565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:1a:73:46:db:0d:3e:04:38:6d:08:71:24: b1:8a:34:48:bd:3c:d7:b1:f8:d8:9a:d5:f2:8d:e0: 62:bc:54:7e:75:64:50:38:12:6c:1a:70:b7:92:f1: 0b:92:04:40:15:34:92:70:13:57:3f:9b:22:06:03: 91:6c:6d:46:ea:65:be:8c:7a:5b:42:c7:a6:e5:9b: d5:c2:0e:04:80:51:c0:42:21:75:4d:1c:fb:f6:6f: 58:c5:71:c4:ef:a7:cc:29:0f:48:3e:04:6d:90:78: 5f:89:57:2d:93:0f:d6:b2:8a:8d:d0:b0:54:96:a0: 07:72:93:b6:ee:a1:56:4a:e7:c3:d0:6d:87:30:8a: 64:68:59:5c:2e:75:c1:c7:76:0f:8d:56:61:7a:5e: 6c:e0:b1:6d:88:71:e1:6f:dc:5c:31:bd:b4:ea:a0: fb:55:01:bd:f0:17:fd:af:55:0e:da:45:7b:e9:a8: c2:6b:14:f0:5d:19:4b:60:2a:a6:e8:dd:00:69:d2: 50:dd:b4:12:f1:b7:1c:e6:4b:30:18:cc:21:fb:f5: bb:b7:10:9f:53:e1:a3:88:73:f4:53:e1:7f:a2:d1: 88:25:52:22:c2:93:6c:d2:16:5e:64:2e:c0:81:f5: b3:fb:e4:31:26:a6:1e:d4:d3:a7:5e:12:dd:b6:bf: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:78:AB:07:19:44:13:AC:36:32:02:3A:88:84:E3:B8:C3:35:65 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5c:0b:ed:4c:e4:46:32:a7:74:14:34:ba:f5:bb:f2:67:40: 36:e3:16:ae:77:e5:c2:b2:e2:06:14:3e:27:e5:1d:ff:0a:a1: b5:f1:55:86:ab:80:a8:d4:14:29:f4:65:99:b0:d8:2e:9e:43: 21:5b:52:b4:d6:fa:ae:d1:c6:32:23:56:b8:3b:9b:36:b8:15: 29:5a:71:5c:83:08:ed:31:22:4f:79:cd:e1:02:7e:04:66:f8: 47:12:0f:42:73:a6:88:e8:a0:06:32:8b:1f:7e:e7:49:e7:45: 3c:0c:bc:fb:be:61:e8:8e:5e:28:6b:87:c1:a6:54:7f:55:8b: f9:78:cf:69:ed:f0:1a:45:42:ef:66:fc:1d:0e:48:9b:fe:be: 04:3b:c4:0a:8b:a1:fa:80:77:36:b8:11:10:4c:6c:0e:a3:be: bb:d7:73:b0:a5:1a:e1:3b:b4:25:e7:40:f5:ab:38:9a:67:2e: ed:fe:77:10:69:c6:01:18:b5:98:8d:ff:e4:ad:bd:6d:6c:97: 01:bd:6c:73:98:29:7e:82:6f:76:06:a6:b5:a2:47:27:94:27: 54:cc:8b:14:81:a7:7e:88:c1:0f:b9:44:fc:ab:ee:05:32:6e: e4:0c:0e:94:7c:1d:2d:d1:f1:36:14:ac:2c:67:63:84:a5:ef: d6:35:e1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysfl7xGyQnAc0hFsGj0NO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMzAyMDMwMTI4WhcNMjYwMzAzMDMwMTI4WjAzMTEwLwYDVQQD EyhkZTZhNzhhYjA3MTk0NDEzYWMzNjMyMDIzYTg4ODRlM2I4YzMzNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEac0bbDT4EOG0IcSSxijRIvTzX sfjYmtXyjeBivFR+dWRQOBJsGnC3kvELkgRAFTSScBNXP5siBgORbG1G6mW+jHpb Qsem5ZvVwg4EgFHAQiF1TRz79m9YxXHE76fMKQ9IPgRtkHhfiVctkw/WsoqN0LBU lqAHcpO27qFWSufD0G2HMIpkaFlcLnXBx3YPjVZhel5s4LFtiHHhb9xcMb206qD7 VQG98Bf9r1UO2kV76ajCaxTwXRlLYCqm6N0AadJQ3bQS8bcc5kswGMwh+/W7txCf U+GjiHP0U+F/otGIJVIiwpNs0hZeZC7AgfWz++QxJqYe1NOnXhLdtr/0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5qeKsHGUQTrDYyAjqIhOO4wzVlMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlwL7Uzk RjKndBQ0uvW78mdANuMWrnflwrLiBhQ+J+Ud/wqhtfFVhquAqNQUKfRlmbDYLp5D IVtStNb6rtHGMiNWuDubNrgVKVpxXIMI7TEiT3nN4QJ+BGb4RxIPQnOmiOigBjKL H37nSedFPAy8+75h6I5eKGuHwaZUf1WL+XjPae3wGkVC72b8HQ5Im/6+BDvECouh +oB3NrgREExsDqO+u9dzsKUa4Tu0JedA9as4mmcu7f53EGnGARi1mI3/5K29bWyX Ab1sc5gpfoJvdgamtaJHJ5QnVMyLFIGnfojBD7lE/KvuBTJu5AwOlHwdLdHxNhSs LGdjhKXv1jXhSw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:05 2026 by rpki-client