$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json) Hash identifier: M03uAnBBHJ2J91IF+gPV4WgoLn/+0y6Wpao7wh2g7II= Subject key identifier: 7D:B8:95:27:2C:05:0E:8D:4C:5A:4C:D9:85:36:F2:CD:09:5F:7C:5B Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019CA9457D44CA325593A3023C615A3F4EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft Manifest number: 8B Signing time: Sun 01 Mar 2026 12:00:29 +0000 Manifest this update: Sun 01 Mar 2026 12:00:29 +0000 Manifest next update: Mon 02 Mar 2026 12:00:29 +0000 Files and hashes: 1: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=) 2: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=) 3: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: BUCje5Fyjj8JDfIhLShPzL/q+i5/skTRX5SfQpKFjV8=) 4: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=) 5: D7vB6QBvIYmkuKgJexKoP7rMKRQ.roa (hash: qZyOv2Gb3Yc8d2ppE8LjMRwjXi+sbeF9izWkejUX++E=) 6: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=) 7: PMbKQ_uUlrPevpZsNx0eXksTqOY.roa (hash: SnQSjPH+aFHvy6nc0KoA3L9eJTHfO0AG19ulVcVHwqI=) 8: S8PzIg4pqZQJxbfXXjQnUb_2M8Q.roa (hash: CNkfucWcSgO8VA4IAaZhnR8d+jLYpoDQG7f+Rihwkvc=) 9: USubDOC3xDx87K_ZTK3Z8oHsnzk.roa (hash: 9vyXWFhXgTXFACbWChjUbuv0OPwPRlxioKYF+gj4N1w=) 10: VmanDZNFkgEbOQupfK0om4KXePI.roa (hash: mjsJC9NQUJfwnjHZ+fWyZnDY0q9++cAuJDUVwIpX5Qo=) 11: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=) 12: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=) 13: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=) 14: nVtVrlWVO6-BB0kLGx-GtQPawcM.roa (hash: MxpF4UAnKSFZ2sxK+iSk252AT48ndRK1EDRB7adFJRM=) 15: oEzd70GBc89wuPrghjleeGdo8sA.roa (hash: XTx9ORtlLm/ABttZFmHynm9a1AsxWcX+O0c3olAJQ7A=) 16: pXQUKLQGLhckSIvpsa2VL54Uxa4.roa (hash: pxVzwowTxbXt7CA8ylAQ8NwPwJGfKJGc5L84cDe95WA=) 17: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:45:7d:44:ca:32:55:93:a3:02:3c:61:5a:3f:4e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Mar 1 12:00:29 2026 GMT Not After : Mar 2 12:00:29 2026 GMT Subject: CN=7db895272c050e8d4c5a4cd98536f2cd095f7c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:2f:46:87:f8:be:09:82:d0:35:38:bd:de: da:d0:0e:22:60:b9:2d:ca:d7:2c:47:70:88:63:7c: b7:d3:ad:e4:fa:25:4d:82:e7:bb:e3:5f:48:fb:ef: c7:7c:f3:af:43:87:40:e4:c5:0a:45:25:7f:56:7e: db:5c:b1:a8:00:f3:7a:e0:ba:9e:56:ce:b0:74:9a: e3:70:66:35:db:94:a5:a7:0d:6a:1d:5a:a7:a7:92: 27:13:7c:bb:a8:40:4b:5c:70:d4:98:cf:42:ac:b4: 63:2c:17:91:36:39:40:b0:7a:e1:ea:8f:ca:fa:af: 1a:e7:92:1c:19:5a:c9:a1:35:2e:31:fa:e1:8e:2f: 38:2d:11:67:10:a2:3b:2d:8b:3d:c5:ef:e4:bf:2a: 93:25:56:c5:98:11:7b:45:52:f4:9c:b8:05:2d:df: 62:11:39:d0:64:9e:8e:65:e8:99:19:e7:f3:32:d9: 2b:1b:26:34:fc:4a:bd:b9:66:24:48:98:86:7f:4f: 96:bb:c4:26:29:aa:4b:f8:6b:d3:28:92:57:1a:e2: 2f:21:5c:24:23:3b:cf:07:4f:90:03:fe:f7:22:39: 2a:bb:0d:b9:4c:1a:e6:1d:49:3c:2a:78:89:a3:a6: cd:9b:60:1b:e1:8d:e1:ea:11:01:6b:c6:1d:6c:34: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B8:95:27:2C:05:0E:8D:4C:5A:4C:D9:85:36:F2:CD:09:5F:7C:5B X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:35:a5:ff:cf:a8:dd:0c:41:f7:8d:6d:c3:04:83:4c:97:7f: d6:1e:f7:cc:d5:c0:58:0e:b0:47:5d:7a:5d:ac:ca:13:0c:99: d3:c3:83:de:c3:3d:03:cc:46:87:cc:c8:e6:ee:6f:fd:e2:00: d4:bb:77:e1:39:15:fe:0e:8c:d2:8e:01:dc:ed:e4:3e:c6:43: 0c:87:16:01:d9:f4:18:9e:b7:f2:b0:30:b4:52:f2:07:ce:34: 98:fb:93:8f:f1:3f:20:5a:e0:94:ed:d3:ec:80:9c:81:b5:8c: 07:93:e1:26:83:55:df:ae:6b:da:1c:a2:cb:e1:4e:4c:64:1c: ed:39:4f:5b:2f:f8:1e:d1:4e:75:4f:46:92:0b:ce:d3:60:8a: a0:79:58:2c:0a:6b:a0:90:43:95:00:e7:2e:32:26:37:d2:5e: af:2d:a0:d6:08:18:73:b2:06:31:d4:d8:c5:d6:10:5f:71:fd: cd:e5:41:30:1b:a9:ac:33:fc:43:09:70:c4:71:cd:78:fc:0a: f7:4c:e2:50:58:9e:d1:d6:1b:c4:3e:7c:36:18:6f:9e:0b:15: 03:8a:ad:c3:b1:d8:7a:c0:78:53:39:39:6f:3a:78:56:3c:87: cb:eb:7b:7e:70:e7:6c:74:2a:b5:43:9d:05:05:d8:9c:07:59: a4:dd:4e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypRX1EyjJVk6MCPGFaP06rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwMzAxMTIwMDI5WhcNMjYwMzAyMTIwMDI5WjAzMTEwLwYDVQQD Eyg3ZGI4OTUyNzJjMDUwZThkNGM1YTRjZDk4NTM2ZjJjZDA5NWY3YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk4vRof4vgmC0DU4vd7a0A4iYLkt ytcsR3CIY3y3063k+iVNgue7419I++/HfPOvQ4dA5MUKRSV/Vn7bXLGoAPN64Lqe Vs6wdJrjcGY125Slpw1qHVqnp5InE3y7qEBLXHDUmM9CrLRjLBeRNjlAsHrh6o/K +q8a55IcGVrJoTUuMfrhji84LRFnEKI7LYs9xe/kvyqTJVbFmBF7RVL0nLgFLd9i ETnQZJ6OZeiZGefzMtkrGyY0/Eq9uWYkSJiGf0+Wu8QmKapL+GvTKJJXGuIvIVwk IzvPB0+QA/73Ijkquw25TBrmHUk8KniJo6bNm2Ab4Y3h6hEBa8YdbDSt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH24lScsBQ6NTFpM2YU28s0JX3xbMB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDWl/8+o 3QxB941twwSDTJd/1h73zNXAWA6wR116XazKEwyZ08OD3sM9A8xGh8zI5u5v/eIA 1Lt34TkV/g6M0o4B3O3kPsZDDIcWAdn0GJ638rAwtFLyB840mPuTj/E/IFrglO3T 7ICcgbWMB5PhJoNV365r2hyiy+FOTGQc7TlPWy/4HtFOdU9GkgvO02CKoHlYLApr oJBDlQDnLjImN9Jery2g1ggYc7IGMdTYxdYQX3H9zeVBMBuprDP8QwlwxHHNePwK 90ziUFie0dYbxD58NhhvngsVA4qtw7HYesB4Uzk5bzp4VjyHy+t7fnDnbHQqtUOd BQXYnAdZpN1O8w== -----END CERTIFICATE-----Generated at Sun Mar 1 23:51:52 2026 by rpki-client