$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: 1ikrNV5lfPwtussfzgcknv+sme8LtklOUcWE0Tih+Gc= Subject key identifier: 5B:DA:3B:B9:11:A5:9B:F6:1D:05:2A:75:F5:0A:0B:80:82:2F:5F:CA Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019DCFE3C9B855077794BC1A054FAC34E060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 114B Signing time: Mon 27 Apr 2026 17:01:45 +0000 Manifest this update: Mon 27 Apr 2026 17:01:45 +0000 Manifest next update: Tue 28 Apr 2026 17:01:45 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: i6zzK/Xb0LRTK+E139Qn+HzNQ0i4KQTsHocoh6QXwPE=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:e3:c9:b8:55:07:77:94:bc:1a:05:4f:ac:34:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Apr 27 17:01:45 2026 GMT Not After : Apr 28 17:01:45 2026 GMT Subject: CN=5bda3bb911a59bf61d052a75f50a0b80822f5fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:06:af:5b:f0:b2:b4:3e:fe:c5:3a:be:f9: 73:b0:f3:d8:28:36:5a:1e:64:4c:c4:a0:09:bd:54: 8e:22:14:41:95:27:6e:8d:60:4f:10:fa:bb:4c:84: f4:1d:83:2e:08:24:44:b5:55:24:c5:d1:de:69:1a: 69:33:ea:a4:41:8f:73:da:9d:6d:21:8e:55:22:a5: 87:de:4d:17:ac:68:1f:a1:cb:fd:d9:f3:3b:be:a0: cb:9d:d5:4c:0d:49:92:11:7e:a0:80:e3:ff:62:e4: 19:44:df:a2:d7:10:a7:3f:22:c4:c6:78:f2:6b:68: e7:35:ac:c0:b2:aa:0f:d5:c0:ab:46:f1:50:26:17: 34:af:db:3f:17:13:77:80:c6:a3:80:51:2a:9f:f6: 14:2e:14:f6:42:8c:8d:04:32:bf:c6:96:37:58:88: f9:73:77:bd:74:d7:e1:f3:60:40:7a:7b:99:20:f4: 37:77:bf:c8:20:4e:fc:ca:ea:d2:3f:18:8f:3e:c6: bc:e7:8e:67:06:b4:70:ff:94:3a:5a:ae:94:0b:79: ab:fd:75:92:8a:b1:0d:70:24:ee:5a:4d:e2:88:7d: 9e:0e:dc:c5:6d:dc:76:55:c9:bc:f0:11:3e:f4:6d: fc:44:d3:ce:fd:47:45:9c:59:6a:00:37:47:25:90: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DA:3B:B9:11:A5:9B:F6:1D:05:2A:75:F5:0A:0B:80:82:2F:5F:CA X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:56:80:c2:c7:b8:b9:bd:ba:f2:aa:d5:00:f9:02:8c:ba:a9: b2:28:55:1f:35:1a:49:fa:6c:b7:a2:e4:63:b1:66:f9:66:32: da:31:b9:b5:1a:3e:69:dc:c6:11:93:8e:0f:05:d3:d5:b7:8b: 71:8c:30:47:12:a2:3e:f3:b9:ca:69:41:cb:13:68:8e:65:1a: 82:e2:69:75:b6:fb:11:27:bb:c8:4e:a4:f2:c2:5e:51:ff:bf: f1:06:77:e6:87:06:bd:23:a5:c0:7a:ac:3d:8b:91:26:23:ec: a4:ea:03:9c:a6:63:c3:21:e8:77:64:0b:d5:90:48:ff:bf:c0: f8:00:ab:d0:25:c2:e8:0d:ef:df:96:1b:b0:8f:48:25:8d:86: ef:3c:b5:99:75:86:65:fd:43:a8:b6:dd:6c:7a:da:25:30:c6: 29:ce:fe:1b:b5:df:e0:98:c6:fb:e7:ad:97:80:29:4d:86:e7: 59:f4:33:8e:6d:20:e4:42:82:98:10:c7:ee:fe:60:f3:d3:64: 01:8a:1d:8f:ae:93:98:10:22:e4:47:ff:79:7f:e8:bd:77:0f: 42:78:e6:c4:3b:73:38:9e:d9:24:19:0f:b8:c8:01:c0:db:27: 19:a9:ab:2d:ef:f7:50:48:4c:4c:a5:72:0c:de:c8:36:e9:48: 9d:e5:db:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3P48m4VQd3lLwaBU+sNOBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNDI3MTcwMTQ1WhcNMjYwNDI4MTcwMTQ1WjAzMTEwLwYDVQQD Eyg1YmRhM2JiOTExYTU5YmY2MWQwNTJhNzVmNTBhMGI4MDgyMmY1ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu94Gr1vwsrQ+/sU6vvlzsPPYKDZa HmRMxKAJvVSOIhRBlSdujWBPEPq7TIT0HYMuCCREtVUkxdHeaRppM+qkQY9z2p1t IY5VIqWH3k0XrGgfocv92fM7vqDLndVMDUmSEX6ggOP/YuQZRN+i1xCnPyLExnjy a2jnNazAsqoP1cCrRvFQJhc0r9s/FxN3gMajgFEqn/YULhT2QoyNBDK/xpY3WIj5 c3e9dNfh82BAenuZIPQ3d7/IIE78yurSPxiPPsa8545nBrRw/5Q6Wq6UC3mr/XWS irENcCTuWk3iiH2eDtzFbdx2Vcm88BE+9G38RNPO/UdFnFlqADdHJZADDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvaO7kRpZv2HQUqdfUKC4CCL1/KMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFaAwse4 ub268qrVAPkCjLqpsihVHzUaSfpst6LkY7Fm+WYy2jG5tRo+adzGEZOODwXT1beL cYwwRxKiPvO5ymlByxNojmUaguJpdbb7ESe7yE6k8sJeUf+/8QZ35ocGvSOlwHqs PYuRJiPspOoDnKZjwyHod2QL1ZBI/7/A+ACr0CXC6A3v35YbsI9IJY2G7zy1mXWG Zf1DqLbdbHraJTDGKc7+G7Xf4JjG++etl4ApTYbnWfQzjm0g5EKCmBDH7v5g89Nk AYodj66TmBAi5Ef/eX/ovXcPQnjmxDtzOJ7ZJBkPuMgBwNsnGamrLe/3UEhMTKVy DN7INulIneXbIw== -----END CERTIFICATE-----Generated at Mon Apr 27 18:25:16 2026 by rpki-client