$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: CuN+xpROkegnvgqF5eo507+oO++HVkQ2Bu8UD5Dqb3c= Subject key identifier: F8:3D:58:1B:E1:F3:73:B5:57:16:9C:7E:ED:8F:5D:50:0E:42:12:64 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 01A179958C82948B8E6E78AD8C0F7AF6D42D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 1331 Signing time: Mon 26 Oct 2026 19:00:06 +0000 Manifest this update: Mon 26 Oct 2026 19:00:06 +0000 Manifest next update: Tue 27 Oct 2026 19:00:06 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: SJBTA1oumjgF9pSmN3Ifm+9XbXjgLwb1+1iewBNmtRg=) 4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=) 8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) 10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=) 11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:95:8c:82:94:8b:8e:6e:78:ad:8c:0f:7a:f6:d4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Oct 26 19:00:06 2026 GMT Not After : Oct 27 19:00:06 2026 GMT Subject: CN=f83d581be1f373b557169c7eed8f5d500e421264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:2c:1e:01:4a:10:b1:cf:ce:19:84:cb:ae: 1c:de:f3:23:2c:36:20:75:c9:26:ad:3b:5f:ba:ff: 8f:bb:e5:67:a3:34:62:ee:92:b5:f2:1b:8c:d9:ca: 59:ea:b1:56:46:38:63:c5:e8:9f:7d:8b:b2:f1:fb: c8:36:1b:53:98:48:04:62:7e:39:8d:f6:f7:ef:63: ac:96:08:76:8d:ce:56:e9:8b:62:cf:81:54:0a:a6: ed:e4:fa:a0:fb:4e:5d:b8:0f:0c:9e:f3:22:16:4d: 91:e5:3d:cb:98:23:1d:fc:88:b6:98:fa:40:1a:52: 33:e3:ab:c7:c0:76:12:2b:d1:a4:a1:e3:97:a7:b3: 77:9b:a2:c2:af:60:38:86:97:4e:e6:44:c3:1f:f4: 51:2b:b1:a9:c7:ac:f7:dd:e8:9c:89:f0:d1:8d:42: 6b:fb:c4:87:aa:fc:91:ab:17:85:c6:e2:8b:b1:11: d9:f4:ee:b9:85:95:b8:1f:2f:a2:67:6e:b7:53:32: 2a:11:97:64:c3:96:1f:46:28:6b:84:5d:02:4f:d0: 43:99:51:7d:89:d3:fc:ee:c8:63:86:a3:92:85:59: 18:05:bd:68:e7:a2:05:1d:52:08:67:be:f1:52:de: 75:59:79:2b:9b:23:b8:15:21:e5:be:8d:d2:84:38: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:58:1B:E1:F3:73:B5:57:16:9C:7E:ED:8F:5D:50:0E:42:12:64 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ed:b3:f2:11:e0:cb:82:b2:b3:96:fa:84:de:64:70:cf:70: 18:8d:37:2c:26:7f:f0:13:f3:8e:6a:3e:5b:53:b3:c1:f8:ec: e7:ad:f8:34:14:2e:c0:8f:4d:fd:84:3b:fc:e5:ff:c7:64:13: ce:6b:87:b6:b0:59:d6:c9:e6:4b:0a:4d:f9:0e:4b:1e:84:91: 4c:b9:8e:ce:cc:9a:91:2e:f1:71:47:94:7e:ab:5f:37:44:6f: ac:82:c8:a5:66:ae:dd:55:b1:ef:9c:94:ea:0d:03:d9:cd:c5: 7f:ac:73:ab:22:2b:34:c4:a4:1d:29:74:4f:21:c1:84:52:e5: f8:64:07:34:e1:ad:ca:4a:db:67:74:9c:71:0e:50:55:3f:c4: af:90:9b:5d:39:a7:33:e8:49:fe:3b:39:73:c5:39:8b:5b:c6: 61:1c:c2:84:59:3c:d4:15:ed:a9:2d:b4:c3:15:90:e8:0a:81: 36:47:ef:2f:ec:ff:8b:a8:fb:57:81:3e:98:ea:64:6c:1e:ce: 97:64:f8:19:93:2a:dc:f9:2d:98:02:35:46:19:e7:75:12:90: de:1e:7f:09:03:5e:cd:ed:2e:eb:57:f7:ab:f8:53:7b:5f:04: 71:19:f8:38:5a:a7:4f:d7:1d:f2:09:40:59:6d:a0:e4:6c:ba: 26:04:ea:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5lYyClIuObnitjA969tQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYxMDI2MTkwMDA2WhcNMjYxMDI3MTkwMDA2WjAzMTEwLwYDVQQD EyhmODNkNTgxYmUxZjM3M2I1NTcxNjljN2VlZDhmNWQ1MDBlNDIxMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMcsHgFKELHPzhmEy64c3vMjLDYg dckmrTtfuv+Pu+VnozRi7pK18huM2cpZ6rFWRjhjxeiffYuy8fvINhtTmEgEYn45 jfb372Oslgh2jc5W6Ytiz4FUCqbt5Pqg+05duA8MnvMiFk2R5T3LmCMd/Ii2mPpA GlIz46vHwHYSK9GkoeOXp7N3m6LCr2A4hpdO5kTDH/RRK7Gpx6z33eicifDRjUJr +8SHqvyRqxeFxuKLsRHZ9O65hZW4Hy+iZ263UzIqEZdkw5YfRihrhF0CT9BDmVF9 idP87shjhqOShVkYBb1o56IFHVIIZ77xUt51WXkrmyO4FSHlvo3ShDgInwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg9WBvh83O1Vxacfu2PXVAOQhJkMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO2z8hHg y4Kys5b6hN5kcM9wGI03LCZ/8BPzjmo+W1Ozwfjs5634NBQuwI9N/YQ7/OX/x2QT zmuHtrBZ1snmSwpN+Q5LHoSRTLmOzsyakS7xcUeUfqtfN0RvrILIpWau3VWx75yU 6g0D2c3Ff6xzqyIrNMSkHSl0TyHBhFLl+GQHNOGtykrbZ3SccQ5QVT/Er5CbXTmn M+hJ/js5c8U5i1vGYRzChFk81BXtqS20wxWQ6AqBNkfvL+z/i6j7V4E+mOpkbB7O l2T4GZMq3PktmAI1RhnndRKQ3h5/CQNeze0u61f3q/hTe18EcRn4OFqnT9cd8glA WW2g5Gy6JgTqwA== -----END CERTIFICATE-----Generated at Tue Oct 27 05:58:07 2026 by rpki-client