$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: lD26Qh//AzU7ClJQNA+v7ozV9+Rtj2gfj0TCqhXK+OA= Subject key identifier: 40:10:5F:9D:C9:F6:C0:25:07:F2:23:37:D3:B8:84:10:FF:95:E8:46 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019D20269BA25D7201A8FD69890D6B4BD6C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 18A4 Signing time: Tue 24 Mar 2026 14:01:34 +0000 Manifest this update: Tue 24 Mar 2026 14:01:34 +0000 Manifest next update: Wed 25 Mar 2026 14:01:34 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=) 3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=) 4: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: MBSjcgeJH/QCIQaVz7m19KbS6+l3QmAtE1X5I3dJwwY=) 6: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 7: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 8: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 9: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=) 10: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=) 17: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:20:26:9b:a2:5d:72:01:a8:fd:69:89:0d:6b:4b:d6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Mar 24 14:01:34 2026 GMT Not After : Mar 25 14:01:34 2026 GMT Subject: CN=40105f9dc9f6c02507f22337d3b88410ff95e846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:10:02:49:be:2a:8e:1d:03:a5:b7:c6:72:ea: ea:7b:39:21:6f:51:9c:bc:9f:59:8f:3c:8d:45:b0: 7d:39:78:c6:51:f8:a4:36:d6:a9:4c:1d:03:44:55: 17:01:7a:1f:a1:45:d4:be:95:1b:6b:64:a8:08:3b: e4:9d:a2:4c:53:53:ef:e1:35:f3:8c:84:77:61:81: 01:b0:af:e6:42:2d:31:f0:f2:b7:b3:77:7e:a0:e4: 14:d9:35:21:e0:4d:e0:a1:78:3e:97:0f:64:40:e6: 40:b6:c5:7f:61:90:14:d2:b3:88:bb:0a:74:8b:64: 95:29:03:4d:b9:2d:b1:8f:b2:10:19:06:24:49:ac: af:1e:1a:bd:d3:f1:62:77:2f:45:e6:16:90:86:2b: 92:b7:55:e9:22:80:60:b9:ad:42:1d:7c:c6:98:e7: 2e:5c:6d:d8:02:5d:29:14:a9:06:1a:02:05:80:f1: 09:c2:27:62:94:5c:8d:6b:44:59:2d:9f:fe:72:b2: eb:3b:95:32:95:84:0f:c7:a0:f9:c2:61:c6:34:94: 80:f0:2e:8f:9e:f3:87:a5:dc:4f:1c:40:23:54:12: 18:78:4c:0e:e8:c2:da:19:49:56:37:14:20:b0:b5: 74:21:df:30:f4:79:84:a2:8e:a1:d0:d5:d2:0c:cc: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:10:5F:9D:C9:F6:C0:25:07:F2:23:37:D3:B8:84:10:FF:95:E8:46 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b3:10:62:4b:28:b5:89:03:b0:8b:a1:3c:07:59:83:66:65: c6:c6:2c:aa:b4:c6:aa:c6:90:e7:98:3e:04:56:f2:67:f8:d8: e7:4b:e6:f4:6c:d5:b0:67:9f:7a:bd:b5:ed:b4:9d:26:51:86: 36:85:41:4a:7f:df:c2:23:08:45:12:c3:0e:0e:21:ae:b5:cc: ab:e9:f2:b9:b2:a2:a0:c5:ad:ee:fe:d7:f8:88:e0:ad:85:3e: ab:bf:78:28:40:bf:3a:5d:56:14:8e:87:7d:f3:ab:19:a9:f9: c2:5a:96:cc:ca:b3:a3:62:09:80:25:04:2c:3a:83:1e:d3:dc: 9f:44:4d:05:16:db:dd:42:e8:72:34:24:81:7a:58:8e:5f:fd: 2a:1e:b7:af:4b:28:09:d2:29:0a:7d:19:c0:ae:3b:e3:21:d3: d6:51:72:fd:8a:32:4b:a3:aa:ba:05:3a:c9:60:1c:f2:31:ff: d3:74:ca:3f:b2:28:fd:33:5a:ad:d3:52:ed:20:06:0a:44:63: 44:56:50:74:32:21:a5:dd:5e:ab:6f:b5:16:3f:b5:cc:5f:3a: 51:1c:c0:ec:6f:f3:d1:13:e9:97:0f:34:99:a9:94:43:fc:d4: 59:6b:cc:69:f6:7a:48:29:a0:d1:8c:8d:e8:da:ad:ef:01:cb: 7d:8c:c4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0gJpuiXXIBqP1piQ1rS9bBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMzI0MTQwMTM0WhcNMjYwMzI1MTQwMTM0WjAzMTEwLwYDVQQD Eyg0MDEwNWY5ZGM5ZjZjMDI1MDdmMjIzMzdkM2I4ODQxMGZmOTVlODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxACSb4qjh0DpbfGcurqezkhb1Gc vJ9ZjzyNRbB9OXjGUfikNtapTB0DRFUXAXofoUXUvpUba2SoCDvknaJMU1Pv4TXz jIR3YYEBsK/mQi0x8PK3s3d+oOQU2TUh4E3goXg+lw9kQOZAtsV/YZAU0rOIuwp0 i2SVKQNNuS2xj7IQGQYkSayvHhq90/Fidy9F5haQhiuSt1XpIoBgua1CHXzGmOcu XG3YAl0pFKkGGgIFgPEJwidilFyNa0RZLZ/+crLrO5UylYQPx6D5wmHGNJSA8C6P nvOHpdxPHEAjVBIYeEwO6MLaGUlWNxQgsLV0Id8w9HmEoo6h0NXSDMzsTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAQX53J9sAlB/IjN9O4hBD/lehGMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7MQYkso tYkDsIuhPAdZg2ZlxsYsqrTGqsaQ55g+BFbyZ/jY50vm9GzVsGefer217bSdJlGG NoVBSn/fwiMIRRLDDg4hrrXMq+nyubKioMWt7v7X+IjgrYU+q794KEC/Ol1WFI6H ffOrGan5wlqWzMqzo2IJgCUELDqDHtPcn0RNBRbb3ULocjQkgXpYjl/9Kh63r0so CdIpCn0ZwK474yHT1lFy/YoyS6OqugU6yWAc8jH/03TKP7Io/TNardNS7SAGCkRj RFZQdDIhpd1eq2+1Fj+1zF86URzA7G/z0RPplw80mamUQ/zUWWvMafZ6SCmg0YyN 6Nqt7wHLfYzEqg== -----END CERTIFICATE-----Generated at Tue Mar 24 20:15:32 2026 by rpki-client