$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: hig3zyckMYbftVSoJeEVsg2fVgPL9NPbgGrNTxWoz2c= Subject key identifier: 71:1B:C3:0C:F1:E2:6E:41:A7:55:E1:03:8B:BA:35:E2:FF:AD:7C:03 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019DCDF51968BF114AE6999950FF1C16471B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 114A Signing time: Mon 27 Apr 2026 08:01:25 +0000 Manifest this update: Mon 27 Apr 2026 08:01:25 +0000 Manifest next update: Tue 28 Apr 2026 08:01:25 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: bdRJ4b/BxDhnJlQuTI1K85n5Ae2zjxCiP3gfQYjiSt8=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:f5:19:68:bf:11:4a:e6:99:99:50:ff:1c:16:47:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Apr 27 08:01:25 2026 GMT Not After : Apr 28 08:01:25 2026 GMT Subject: CN=711bc30cf1e26e41a755e1038bba35e2ffad7c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:a0:93:48:a6:e5:5d:57:67:7d:d7:60:3a: 8a:c6:9c:63:9a:ab:e8:33:34:34:47:20:94:75:45: 7e:94:72:bc:b5:9c:43:57:89:82:b1:20:66:7e:81: a7:8e:13:e6:34:52:25:cd:9a:f4:25:08:a0:cd:b6: 4c:13:37:66:23:d1:49:63:bf:19:c6:da:90:49:6d: a6:90:98:8d:1c:cb:0c:4b:05:78:7d:01:65:09:9e: 82:79:58:11:67:84:c5:d9:1d:84:10:ab:13:72:d4: b3:f7:fe:ff:c6:f4:80:0c:65:06:66:94:97:04:55: c5:70:db:dc:39:3b:df:e5:d7:5f:ec:67:99:71:0a: 79:f7:cf:a2:ac:49:d1:45:cc:31:43:bc:e3:8d:67: 8f:4b:9f:a2:9d:71:e0:5e:4c:b3:e9:84:cf:bc:da: 3a:84:17:7f:e9:fa:70:24:63:08:99:fc:c0:04:7f: b1:87:cc:a8:ac:88:28:4c:dc:1a:19:98:be:f7:ad: 3c:db:34:3a:9f:8d:87:b9:ce:89:45:7b:74:ae:f3: fb:31:7a:f4:e9:e0:5f:f0:ce:da:59:e1:f4:9a:f6: dd:9c:06:a5:3f:61:e7:84:9f:b9:a4:ea:85:43:8b: 61:bd:e6:13:e2:e4:07:27:cc:21:bb:54:26:39:78: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1B:C3:0C:F1:E2:6E:41:A7:55:E1:03:8B:BA:35:E2:FF:AD:7C:03 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f5:ad:01:77:c7:8d:25:83:c5:07:22:61:e7:53:4e:78:41: e2:5f:f5:65:d9:28:ec:67:18:de:97:08:66:08:95:27:d3:38: f9:dd:4e:cf:43:88:41:07:78:75:06:e3:89:1b:57:04:cd:a9: e2:e8:15:7d:a6:88:11:7d:66:0b:6a:ce:21:97:20:00:94:25: 7d:48:cc:82:55:f3:0d:5d:2c:8f:38:f0:13:a7:dc:6e:c1:c9: ac:c6:bc:f4:f9:0e:d3:93:9b:be:17:c2:db:15:e8:4d:0f:05: 09:40:79:86:ec:fd:e1:15:4f:f1:c4:45:09:d1:89:d6:7a:8b: 06:31:0b:5d:fb:6c:8c:b6:55:ea:97:1c:e3:cd:87:03:5a:2d: 57:55:52:d1:45:0f:6f:bc:95:b1:4e:fe:1d:e6:d1:0b:b2:77: 77:a3:96:8c:3e:3e:e0:61:e8:76:1b:cb:56:f8:46:e8:3c:f6: fb:d0:5d:20:00:1c:ba:35:e7:4e:02:e1:03:f2:f2:21:41:b2: 47:f8:57:02:a5:46:1d:d0:cd:d4:50:c4:db:ec:7f:00:39:c4: 6f:4c:98:97:1f:3f:f5:ae:20:3e:0c:1d:c5:93:a9:0e:cc:e3: 24:31:66:89:2d:35:aa:8e:52:cd:cb:4e:98:24:bc:2a:03:3f: d7:24:43:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3N9RlovxFK5pmZUP8cFkcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwNDI3MDgwMTI1WhcNMjYwNDI4MDgwMTI1WjAzMTEwLwYDVQQD Eyg3MTFiYzMwY2YxZTI2ZTQxYTc1NWUxMDM4YmJhMzVlMmZmYWQ3YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDigk0im5V1XZ33XYDqKxpxjmqvo MzQ0RyCUdUV+lHK8tZxDV4mCsSBmfoGnjhPmNFIlzZr0JQigzbZMEzdmI9FJY78Z xtqQSW2mkJiNHMsMSwV4fQFlCZ6CeVgRZ4TF2R2EEKsTctSz9/7/xvSADGUGZpSX BFXFcNvcOTvf5ddf7GeZcQp598+irEnRRcwxQ7zjjWePS5+inXHgXkyz6YTPvNo6 hBd/6fpwJGMImfzABH+xh8yorIgoTNwaGZi+96082zQ6n42Huc6JRXt0rvP7MXr0 6eBf8M7aWeH0mvbdnAalP2HnhJ+5pOqFQ4thveYT4uQHJ8whu1QmOXhI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEbwwzx4m5Bp1XhA4u6NeL/rXwDMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfWtAXfH jSWDxQciYedTTnhB4l/1Zdko7GcY3pcIZgiVJ9M4+d1Oz0OIQQd4dQbjiRtXBM2p 4ugVfaaIEX1mC2rOIZcgAJQlfUjMglXzDV0sjzjwE6fcbsHJrMa89PkO05ObvhfC 2xXoTQ8FCUB5huz94RVP8cRFCdGJ1nqLBjELXftsjLZV6pcc482HA1otV1VS0UUP b7yVsU7+HebRC7J3d6OWjD4+4GHodhvLVvhG6Dz2+9BdIAAcujXnTgLhA/LyIUGy R/hXAqVGHdDN1FDE2+x/ADnEb0yYlx8/9a4gPgwdxZOpDszjJDFmiS01qo5SzctO mCS8KgM/1yRD+A== -----END CERTIFICATE-----Generated at Mon Apr 27 15:08:04 2026 by rpki-client