$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json) Hash identifier: e94EBh9fsA+1J31IK3NHKu7GXELpNRM0gxTfBaHu0n4= Subject key identifier: 60:4E:C1:61:63:FB:A4:51:BD:52:F9:8A:A3:94:B8:B1:F2:9B:93:61 Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019DA341360B00F73716028D47A5ED869425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft Manifest number: 011A Signing time: Sun 19 Apr 2026 01:00:53 +0000 Manifest this update: Sun 19 Apr 2026 01:00:53 +0000 Manifest next update: Mon 20 Apr 2026 01:00:53 +0000 Files and hashes: 1: 1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa (hash: iuLlbVe+JPEeIey84sRvj5Y7gApk0UlSqaLt4U2QnZI=) 2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=) 3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=) 4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=) 5: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=) 6: AXN9IfFxwxJxmSciUO562i03GBQ.roa (hash: aE9WRbqK5RvY1U9hnYBJDivpu+TeAOIFVcCzqHQcPew=) 7: Bt944BayBPUs5tY1-40d44HAARE.roa (hash: zi5M7iQxvBHgvnNeQP8FWxBFiEPXlMuyXlNAQguQJsE=) 8: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: /ZxFBdLjXsdEtdxpfiw8bpSBKvrjDjt4UIFA1mWNKlo=) 9: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=) 10: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=) 11: H8iBI3oxi9mzced7XKm6sNzu2b0.roa (hash: Eg4AzBzQ/I1unxdwVQekHYusJF4JhPkZ22ij6AU935E=) 12: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=) 13: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=) 14: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=) 15: NmijAg95xBjUfN3MLDCEUJYkcxk.roa (hash: gkAuQmHMahHJ5Ycz4AzRoin+osgCl2hGtjLbCF1r+qw=) 16: PMbKQ_uUlrPevpZsNx0eXksTqOY.roa (hash: SnQSjPH+aFHvy6nc0KoA3L9eJTHfO0AG19ulVcVHwqI=) 17: QWQzSQz2V6lQKwS5w_B7gdQ0YOo.roa (hash: yE2uYXhDEG79dZrAksSgkow9Cy2/lssGdxe0iEuUEIw=) 18: SPoau1EEjJNUiDSFgcPH_9bzW2w.roa (hash: b+PGonpxJwjNp5zMPGufmYaRs5LZCyUKEmEsNgj/URY=) 19: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=) 20: VmanDZNFkgEbOQupfK0om4KXePI.roa (hash: mjsJC9NQUJfwnjHZ+fWyZnDY0q9++cAuJDUVwIpX5Qo=) 21: WvwVjJHMOPWNlxS8HTbROtz0-MU.roa (hash: eOtN3+OEhxMDpWk6PNAgFifujhWFTlA2nbdD568BWFg=) 22: XBjUsIUdtfMfXNPtxRxnlXCXuqo.roa (hash: OdSad9cay8Q55ufXpYXELSuBNbMggt6reqV2Jp/e8p0=) 23: _6ixJuOyBdDWsrg7PfndJ2TSGK0.roa (hash: F0rHZIZZ2rx/QrDQPKEtB+najpsBYGjbpBhGiX4HEZU=) 24: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=) 25: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=) 26: fJ4RTkcAcu1_glmVBKsTaz8-VOw.roa (hash: ylSEi7ocQYsHPL2vorGa5RyfsK8vM+dH8wAx4Jn5w88=) 27: fJT7ZR4HIwjMx2AyBAlwz5coIHk.roa (hash: ZwS002nsxCyO55gY22WEARcRjDqtil9M7noG6u5dJ8Y=) 28: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=) 29: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=) 30: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=) 31: k74BDLFkQaEyMgBj0_QPCwyAzlc.roa (hash: iiBwXpUAvsSJCATNg/4pa+YR5V2BOLH1mYLLHWG9FIc=) 32: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=) 33: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=) 34: pI7qSTRgzUbS2Ns1jYeSqs3KHYk.roa (hash: CJwtXB13zqfWZMwNNbpQuNFzVQMOSfT6be7u6Jwlr8I=) 35: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=) 36: qPtqN5TxQfjdDYdkssZvq4hWtuI.roa (hash: Z1jY4qgVDn7xNOA1Yj5uRwpDL3uyZsxT5mIjhA9AC8A=) 37: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=) 38: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=) 39: whpQUi_QNVNPFxF5YN0U-Z4CJl8.roa (hash: j/vGUE59TZltmJLF+biW83xG7UAq25/opkA46PKZ2AA=) 40: woRyUDAXu2ll3itSZhcE_qzCHpQ.roa (hash: YiZB9BX69sjWmQksPP2IGJL2U8tsB2a/OXEzKj1z6FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:41:36:0b:00:f7:37:16:02:8d:47:a5:ed:86:94:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Apr 19 01:00:53 2026 GMT Not After : Apr 20 01:00:53 2026 GMT Subject: CN=604ec16163fba451bd52f98aa394b8b1f29b9361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:c9:4e:fa:97:bf:0c:67:3d:23:c4:18:e0: 39:54:c1:72:ca:8c:ee:a5:54:3d:e3:67:23:61:b1: 1a:70:6f:8a:db:0d:a5:25:29:59:97:04:d8:37:b4: 5a:3b:c5:86:8b:f8:84:ed:e1:e6:03:3b:54:08:8d: 60:0b:63:4b:7a:5e:70:8b:49:aa:bb:1a:63:b4:53: 36:92:b6:78:b8:d2:ee:d0:53:31:ae:5e:fd:54:40: fa:f5:45:d9:12:61:7b:d8:de:41:42:5d:70:a5:98: 61:85:2a:f6:30:5d:b6:19:6b:25:1c:99:7c:3c:f1: 1f:b3:ca:17:5a:2b:54:43:7f:5c:72:cf:60:54:6a: e3:cc:d5:92:0d:8e:3c:b5:23:b3:70:23:dc:1c:8d: d4:e5:8d:0e:db:fc:78:2f:0d:32:c9:bd:fd:95:f1: 54:46:e6:37:6f:f4:be:59:1d:4f:21:e3:1e:2a:53: 1d:96:34:f5:d9:7d:d1:7a:5d:49:68:cb:7b:4f:3a: 45:83:a4:eb:bd:e1:09:ef:6f:74:3e:f3:56:10:b7: 74:cf:4d:86:ff:97:df:69:08:24:61:9c:26:fe:da: 93:84:61:52:7a:a6:6b:85:44:d7:cd:f8:c9:d0:58: 0a:48:1c:25:1e:95:ea:02:5f:91:9d:85:56:53:de: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4E:C1:61:63:FB:A4:51:BD:52:F9:8A:A3:94:B8:B1:F2:9B:93:61 X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d7:d9:5a:f2:ac:e5:21:25:12:46:e1:c6:f2:e2:3a:d6:f4: 24:d4:46:16:d1:88:b5:94:2f:e0:9d:d9:1e:60:88:f4:ca:71: a3:77:67:8f:2c:9c:9d:0f:17:c7:e8:eb:ce:2f:03:b9:d5:d4: a0:9e:fa:cb:dc:29:12:a5:ee:74:33:f5:7c:23:68:84:36:5c: 4a:f2:5d:77:12:9d:d3:ab:49:73:18:64:fc:30:a0:d4:34:65: a9:2a:49:5a:d5:6f:99:6c:3a:0c:b0:3d:69:2d:2d:9e:50:db: 57:1e:63:01:72:6a:5c:ee:31:e9:59:ec:d0:cf:c5:b9:b3:35: c7:b6:78:0d:af:04:67:72:2e:71:9c:e9:17:a7:74:5a:c0:63: 76:58:6f:c5:d1:f0:b4:20:3f:66:ea:a7:e3:51:c4:b0:dd:38: b2:3c:0e:50:aa:87:bb:64:96:6b:24:a5:c6:64:66:b8:85:4d: ef:07:72:7f:2b:d6:01:05:a2:ee:6f:fe:9c:fa:be:43:64:17: d8:5e:0e:f3:a7:d4:82:eb:9c:30:b6:29:be:1c:f2:38:9f:08: 0f:78:55:cd:1d:15:be:61:1b:89:13:0c:e4:91:9a:ff:92:87: 7b:3d:1e:42:ae:89:d8:e4:a7:6d:9b:cb:92:95:23:67:71:ec: 1b:1e:46:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jQTYLAPc3FgKNR6XthpQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwNDE5MDEwMDUzWhcNMjYwNDIwMDEwMDUzWjAzMTEwLwYDVQQD Eyg2MDRlYzE2MTYzZmJhNDUxYmQ1MmY5OGFhMzk0YjhiMWYyOWI5MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozvJTvqXvwxnPSPEGOA5VMFyyozu pVQ942cjYbEacG+K2w2lJSlZlwTYN7RaO8WGi/iE7eHmAztUCI1gC2NLel5wi0mq uxpjtFM2krZ4uNLu0FMxrl79VED69UXZEmF72N5BQl1wpZhhhSr2MF22GWslHJl8 PPEfs8oXWitUQ39ccs9gVGrjzNWSDY48tSOzcCPcHI3U5Y0O2/x4Lw0yyb39lfFU RuY3b/S+WR1PIeMeKlMdljT12X3Rel1JaMt7TzpFg6TrveEJ7290PvNWELd0z02G /5ffaQgkYZwm/tqThGFSeqZrhUTXzfjJ0FgKSBwlHpXqAl+RnYVWU976NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBOwWFj+6RRvVL5iqOUuLHym5NhMB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtfZWvKs 5SElEkbhxvLiOtb0JNRGFtGItZQv4J3ZHmCI9Mpxo3dnjyycnQ8Xx+jrzi8DudXU oJ76y9wpEqXudDP1fCNohDZcSvJddxKd06tJcxhk/DCg1DRlqSpJWtVvmWw6DLA9 aS0tnlDbVx5jAXJqXO4x6Vns0M/FubM1x7Z4Da8EZ3IucZzpF6d0WsBjdlhvxdHw tCA/Zuqn41HEsN04sjwOUKqHu2SWaySlxmRmuIVN7wdyfyvWAQWi7m/+nPq+Q2QX 2F4O86fUguucMLYpvhzyOJ8ID3hVzR0VvmEbiRMM5JGa/5KHez0eQq6J2OSnbZvL kpUjZ3HsGx5GsA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:49:27 2026 by rpki-client