$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: 4hozWVYsOrSE+L5Mv099tItcYQGvx5nXQ3aIOPotPEY= Subject key identifier: 7F:73:0B:4D:53:48:E0:B0:EB:47:E5:2C:E3:80:89:DF:91:C4:45:A1 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 01A1A7B90E8F113CCAD1E40E336B70814BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 15DC Signing time: Wed 04 Nov 2026 18:01:25 +0000 Manifest this update: Wed 04 Nov 2026 18:01:25 +0000 Manifest next update: Thu 05 Nov 2026 18:01:25 +0000 Files and hashes: 1: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 2: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 3: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: dgFhF3D2lQokHHlwUKYn/BumN5Z5N0sUMQaCAE/bAHw=) 5: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 6: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 7: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 8: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 9: MIkWwYKo-lxfdiHQoyUHOQN0PKQ.roa (hash: R96zl5We+R+I1fgfdMcXZTJcEnWItrHSpXn8wNr6fEM=) 10: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 11: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 12: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 13: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 14: XjWVgkpqgTJEW3QJe_cj_gwf1hk.roa (hash: vCxycdFszhKJUIekoNSmU0ToJrI8ivYZ04YKT9vTiOY=) 15: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 16: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 17: pVWhY9bkKFww-tz7SO-RcZ-H6hw.roa (hash: f1XvauoXYBQBdF0otm7MyxvPx6O0oMM7E6upA3xXq6Y=) 18: rVArIBA7c1EQ5lf2j5Tvez2PtHY.roa (hash: cst+4x1gJZFg3aLrODDuAkaxoUmbFxOd2UVrjyQWI8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 17:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a7:b9:0e:8f:11:3c:ca:d1:e4:0e:33:6b:70:81:4b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Nov 4 18:01:25 2026 GMT Not After : Nov 5 18:01:25 2026 GMT Subject: CN=7f730b4d5348e0b0eb47e52ce38089df91c445a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4b:4a:05:92:41:c6:d6:54:29:06:e9:34:58: ef:af:c2:52:d7:bd:36:6b:e6:d5:dd:eb:df:71:42: b0:87:5e:d8:5f:ce:da:bf:a7:a4:50:9d:27:18:5d: bf:54:94:be:57:96:2d:f5:48:7f:98:47:8e:66:eb: 4c:a1:42:ce:3e:a4:20:b0:bc:01:ea:d8:73:b1:24: 7b:bb:7a:1f:62:ab:d8:55:91:46:00:1b:91:44:a8: c1:ed:1c:f3:5a:89:88:20:4d:73:18:b5:2c:49:57: 8a:65:77:b1:40:af:05:e4:5e:49:9b:8c:93:fb:0e: 5d:bc:67:e8:e6:b9:40:68:bd:e9:1a:ad:97:74:ea: 81:d9:fb:92:64:5c:4a:0b:69:46:0d:e0:12:f3:e8: 6d:7b:4e:de:c0:d6:6c:bd:65:e2:e8:31:c8:52:35: 53:29:a3:e3:06:c0:89:94:c1:47:34:0c:1c:66:8b: 32:b7:f9:45:07:20:9a:26:db:2d:24:1d:f1:1f:95: 3c:46:9d:8e:0f:9c:e0:c7:82:37:63:91:89:77:ad: 3f:cd:56:10:14:87:f4:13:0c:dd:8f:d7:1d:65:30: 11:11:c5:3d:00:8b:23:01:70:7a:13:1b:48:7a:33: 6e:e3:e8:3a:8f:c3:7f:b0:71:c0:e8:cc:d2:c4:08: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:0B:4D:53:48:E0:B0:EB:47:E5:2C:E3:80:89:DF:91:C4:45:A1 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:85:05:fa:90:bf:2f:31:31:d3:fc:50:53:8e:3b:4f:52:bf: 5c:70:24:be:38:c3:ca:1b:66:b9:07:64:96:4c:d1:95:b2:cf: 3e:74:ab:20:a7:b9:2d:a9:21:a3:78:1f:7b:b9:d6:d6:26:2d: e7:41:42:68:9f:01:55:e2:1b:00:e5:92:28:0d:b2:54:7f:6b: 3f:3b:dd:49:f8:e8:90:6d:e2:60:2f:dd:39:06:1c:c9:9e:fb: 46:dd:71:fb:72:2c:fa:4e:e5:a6:0b:77:9d:0c:39:9e:52:8d: 1d:49:c5:52:07:cb:45:2f:2b:54:b1:2b:53:7f:4b:2c:a3:86: 70:21:77:1b:77:7a:5f:57:4e:3a:7b:09:6f:9e:f6:ce:c5:38: 88:17:3a:2d:b3:c9:84:2b:2f:d0:66:9a:81:aa:4d:45:36:0b: 66:49:08:36:f1:fe:08:bb:64:91:eb:ee:b9:9f:3e:6c:26:99: 0a:c8:0d:76:04:f0:15:82:80:db:f3:35:b0:29:c0:fa:25:69: b8:52:e6:f8:64:3e:34:83:18:6f:67:d9:f8:39:00:d5:ad:13: f5:04:4a:34:87:90:61:64:91:24:ed:c1:7c:80:64:ca:ed:cb: 78:45:60:31:1b:43:de:fc:14:ff:8e:00:32:2b:82:a7:20:18: 6e:de:f6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGnuQ6PETzK0eQOM2twgUv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYxMTA0MTgwMTI1WhcNMjYxMTA1MTgwMTI1WjAzMTEwLwYDVQQD Eyg3ZjczMGI0ZDUzNDhlMGIwZWI0N2U1MmNlMzgwODlkZjkxYzQ0NWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EtKBZJBxtZUKQbpNFjvr8JS1702 a+bV3evfcUKwh17YX87av6ekUJ0nGF2/VJS+V5Yt9Uh/mEeOZutMoULOPqQgsLwB 6thzsSR7u3ofYqvYVZFGABuRRKjB7RzzWomIIE1zGLUsSVeKZXexQK8F5F5Jm4yT +w5dvGfo5rlAaL3pGq2XdOqB2fuSZFxKC2lGDeAS8+hte07ewNZsvWXi6DHIUjVT KaPjBsCJlMFHNAwcZosyt/lFByCaJtstJB3xH5U8Rp2OD5zgx4I3Y5GJd60/zVYQ FIf0Ewzdj9cdZTAREcU9AIsjAXB6ExtIejNu4+g6j8N/sHHA6MzSxAhyRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9zC01TSOCw60flLOOAid+RxEWhMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5YUF+pC/ LzEx0/xQU447T1K/XHAkvjjDyhtmuQdklkzRlbLPPnSrIKe5Lakho3gfe7nW1iYt 50FCaJ8BVeIbAOWSKA2yVH9rPzvdSfjokG3iYC/dOQYcyZ77Rt1x+3Is+k7lpgt3 nQw5nlKNHUnFUgfLRS8rVLErU39LLKOGcCF3G3d6X1dOOnsJb572zsU4iBc6LbPJ hCsv0GaagapNRTYLZkkINvH+CLtkkevuuZ8+bCaZCsgNdgTwFYKA2/M1sCnA+iVp uFLm+GQ+NIMYb2fZ+DkA1a0T9QRKNIeQYWSRJO3BfIBkyu3LeEVgMRtD3vwU/44A MiuCpyAYbt72CQ== -----END CERTIFICATE-----Generated at Thu Nov 5 01:07:18 2026 by rpki-client