$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: c/A9GI+SOWavGe5u4juRpI+W183Pq/RwHyUx3ujWoFw= Subject key identifier: 0F:AA:D0:76:E0:28:62:C7:CE:7A:95:8C:AF:7E:93:5C:32:85:DE:D6 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 01A0C77CEF3DF217CF0747F7644C45DFAF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1567 Signing time: Tue 22 Sep 2026 05:00:48 +0000 Manifest this update: Tue 22 Sep 2026 05:00:48 +0000 Manifest next update: Wed 23 Sep 2026 05:00:48 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: zKIR+eWsm7yYqmZmv6Zv/kEoglfJrRJqGl/bUhf8D/s=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 8: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 9: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) 18: yamNx3ecIuPVFeX-kSCh8y4Fx_c.roa (hash: 4qY/8GmsvrTI7IdeRHY7SB9zEjFFEMpgAX8FcHmNPXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:7c:ef:3d:f2:17:cf:07:47:f7:64:4c:45:df:af:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Sep 22 05:00:48 2026 GMT Not After : Sep 23 05:00:48 2026 GMT Subject: CN=0faad076e02862c7ce7a958caf7e935c3285ded6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:c0:5c:f2:21:c8:e9:80:36:66:1b:4c:20: 51:aa:5c:d7:08:59:2b:6c:13:db:4c:aa:43:4b:cf: 2f:ed:63:cf:e9:11:8b:84:db:0f:69:4e:5f:1f:f4: a5:8a:49:03:e7:a7:78:f0:2f:e7:4a:28:4d:5e:04: 90:47:47:5c:65:71:ba:60:a2:c9:6a:71:4b:87:f0: 84:4e:7f:5b:2a:25:bb:27:83:8d:4b:77:8a:8f:44: 0c:16:83:bd:61:56:64:7a:54:6f:52:ef:96:17:22: 2a:de:49:bf:b0:e3:29:14:7f:4c:18:a5:2c:9f:d4: e3:5d:61:ad:de:47:8d:ca:78:94:04:95:07:03:ac: 4c:54:6e:9e:81:2a:f9:33:00:a0:80:58:5e:01:7d: 64:18:68:90:34:c9:d6:a4:f0:ed:6e:17:52:65:81: 62:c0:32:84:75:3f:fe:90:4c:7c:70:53:31:9d:ac: ea:ad:e1:67:51:f4:f3:e3:78:28:61:45:73:1c:c1: a4:10:94:4b:14:33:fb:73:2f:27:e2:38:8d:4c:0f: 42:e8:4d:37:02:ad:ee:41:83:70:38:df:fe:70:da: 99:0b:10:dc:62:99:70:a2:00:39:b9:a3:f0:4a:f9: 39:3f:93:ab:66:cf:7e:5f:8e:44:c8:1d:8d:9c:2b: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AA:D0:76:E0:28:62:C7:CE:7A:95:8C:AF:7E:93:5C:32:85:DE:D6 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:9a:4b:5f:6c:92:ea:44:a6:f6:8b:c5:79:64:b6:78:b3:da: 1a:c2:53:a3:a0:29:1f:e1:80:df:3c:ab:11:51:0a:2a:31:8f: 3e:4f:f6:1d:40:c5:e7:e2:1d:0d:05:5c:95:b1:31:7a:19:14: 68:a1:f7:0d:ed:c9:58:e4:5e:09:27:02:dd:da:23:e1:ed:61: 92:2e:c0:f2:d9:17:cb:6f:24:db:c4:e7:fa:0d:a7:bd:d5:d1: 09:3b:de:83:5e:a4:c2:54:04:ea:ce:aa:2c:38:fc:1f:84:df: 14:05:ba:40:74:35:c8:3b:79:56:60:d0:62:7c:86:86:20:36: db:ce:48:c8:b6:b3:f8:38:1b:70:0c:89:ea:39:f1:e5:5c:69: 7a:3b:65:37:a7:ef:d5:18:80:20:1d:1c:7c:bf:5e:98:7c:22: c7:d8:7e:e9:87:27:9f:9f:42:24:67:e2:77:4b:89:27:fc:72: 10:f7:e5:29:d4:c7:9f:87:b9:94:c5:0c:a3:89:cb:8e:4d:0b: a0:55:ca:95:4e:a5:d4:2b:e3:00:0f:75:d7:e8:de:2b:73:b3: 99:f0:00:7e:f3:82:e2:f0:ee:9b:a2:99:b5:2f:d2:06:6e:e8: cd:47:f0:7f:3f:3e:3a:5b:dd:66:66:2c:ea:85:c8:f8:7b:1e: 62:cc:5e:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHfO898hfPB0f3ZExF368pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwOTIyMDUwMDQ4WhcNMjYwOTIzMDUwMDQ4WjAzMTEwLwYDVQQD EygwZmFhZDA3NmUwMjg2MmM3Y2U3YTk1OGNhZjdlOTM1YzMyODVkZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+TAXPIhyOmANmYbTCBRqlzXCFkr bBPbTKpDS88v7WPP6RGLhNsPaU5fH/SlikkD56d48C/nSihNXgSQR0dcZXG6YKLJ anFLh/CETn9bKiW7J4ONS3eKj0QMFoO9YVZkelRvUu+WFyIq3km/sOMpFH9MGKUs n9TjXWGt3keNyniUBJUHA6xMVG6egSr5MwCggFheAX1kGGiQNMnWpPDtbhdSZYFi wDKEdT/+kEx8cFMxnazqreFnUfTz43goYUVzHMGkEJRLFDP7cy8n4jiNTA9C6E03 Aq3uQYNwON/+cNqZCxDcYplwogA5uaPwSvk5P5OrZs9+X45EyB2NnCuJwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+q0HbgKGLHznqVjK9+k1wyhd7WMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ZpLX2yS 6kSm9ovFeWS2eLPaGsJTo6ApH+GA3zyrEVEKKjGPPk/2HUDF5+IdDQVclbExehkU aKH3De3JWOReCScC3doj4e1hki7A8tkXy28k28Tn+g2nvdXRCTveg16kwlQE6s6q LDj8H4TfFAW6QHQ1yDt5VmDQYnyGhiA2285IyLaz+DgbcAyJ6jnx5VxpejtlN6fv 1RiAIB0cfL9emHwix9h+6Ycnn59CJGfid0uJJ/xyEPflKdTHn4e5lMUMo4nLjk0L oFXKlU6l1CvjAA911+jeK3OzmfAAfvOC4vDum6KZtS/SBm7ozUfwfz8+OlvdZmYs 6oXI+HseYsxeRg== -----END CERTIFICATE-----Generated at Tue Sep 22 11:47:19 2026 by rpki-client