$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: 8OYq8SrGMUBpEPEZ9HXiZs/QWTi0+ANWK4wruYSss40= Subject key identifier: 91:B7:0A:51:79:B1:EF:34:00:57:F1:9C:69:03:9B:75:77:9E:2A:7D Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019F189E3E2D5246614AA6560B1F017B7977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 19DE Signing time: Tue 30 Jun 2026 13:00:51 +0000 Manifest this update: Tue 30 Jun 2026 13:00:51 +0000 Manifest next update: Wed 01 Jul 2026 13:00:51 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: 3vCJVcr7rUInYMDlzGalCd2We6PMQJLbwFRFobhLljg=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: KkDqDLNE240fCTXz3x0pbuKHvl4.roa (hash: 8CcwM3+dFL+lua0flReoYrUHpd5rKuSGWfX4/qWe1QI=) 7: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 8: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 9: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 10: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 17: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 18: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:18:9e:3e:2d:52:46:61:4a:a6:56:0b:1f:01:7b:79:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jun 30 13:00:51 2026 GMT Not After : Jul 1 13:00:51 2026 GMT Subject: CN=91b70a5179b1ef340057f19c69039b75779e2a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:29:48:46:79:c8:14:0e:da:a3:4b:73:22: a9:f7:c0:02:d3:2f:a6:5f:c2:8f:f4:6e:43:e8:81: e7:3f:3f:00:a3:c8:29:ca:61:67:b0:88:28:7d:5e: f2:27:aa:cd:08:5a:89:da:cf:98:e7:64:a5:ce:9e: 1d:d5:a8:4f:52:bc:06:dc:a5:a2:d2:12:92:30:ec: 90:f0:d0:dc:8a:07:24:a0:7d:2d:65:a8:67:ff:28: c9:0d:23:75:e1:74:a1:38:31:c3:90:e3:6d:52:3a: cf:3c:07:a9:7a:d6:1c:79:22:43:21:46:f9:6d:3b: 25:65:e2:79:b7:1c:7d:05:40:ec:39:ca:51:9b:2c: 26:8d:5e:f0:70:6f:9b:20:94:de:71:14:c3:88:f8: 90:31:e8:c6:44:85:01:b2:79:a3:4e:8b:f8:62:31: b0:a0:d6:65:49:7a:89:c1:cd:fa:44:ec:ea:bd:99: 24:00:77:6a:ae:43:15:44:47:58:d8:ff:be:b3:b2: 16:46:ca:c5:ab:bd:98:dd:58:9c:ed:3b:15:de:4d: b3:f1:98:1f:ff:73:ef:08:f4:c7:86:35:1a:bf:18: 47:ae:c4:5c:16:03:9a:38:4d:ec:a6:65:8b:0d:12: 35:46:39:1e:62:6d:6f:e5:df:06:a4:6b:5b:08:24: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:0A:51:79:B1:EF:34:00:57:F1:9C:69:03:9B:75:77:9E:2A:7D X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ca:34:0a:d2:83:d0:a9:18:e5:6a:d8:e3:2a:31:9c:ca:ca: b2:36:8f:82:5c:92:ae:64:ff:fa:48:35:16:88:16:b5:26:d1: f1:68:9e:41:29:a8:d3:95:1c:56:c7:8c:b2:e3:60:74:27:be: 8a:5a:64:a9:d1:93:38:ae:52:6e:61:4e:99:66:bf:18:71:50: c0:20:10:1f:ef:36:f1:16:fe:b8:16:84:47:36:10:38:d5:7f: c6:da:d2:8d:3d:d1:b7:0d:4f:02:38:85:7a:78:84:c6:cc:d0: bd:04:70:65:7a:e2:68:7a:f0:d6:5c:95:b5:32:74:f1:65:73: 33:b6:f0:2e:d3:53:08:48:0e:d3:83:5f:46:49:37:74:04:52: 7c:c1:4d:43:27:97:03:af:0f:50:be:fa:60:06:74:8e:8c:bd: 07:ac:ab:4e:83:2e:48:9f:bd:21:5d:04:57:be:8f:f8:91:2c: 35:00:cc:6b:ca:02:6c:5c:38:90:ef:14:38:ca:47:6e:aa:de: 75:87:2d:c8:6d:1c:63:d3:ea:e4:ca:57:59:46:43:c5:ad:b7: 95:6e:f7:90:10:15:35:8d:c3:b3:2e:99:e4:c0:9c:f9:ba:49: 1e:81:50:82:c3:a3:34:f5:b2:4f:ca:92:ef:49:d8:ec:ac:3c: 3e:07:6a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8Ynj4tUkZhSqZWCx8Be3l3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwNjMwMTMwMDUxWhcNMjYwNzAxMTMwMDUxWjAzMTEwLwYDVQQD Eyg5MWI3MGE1MTc5YjFlZjM0MDA1N2YxOWM2OTAzOWI3NTc3OWUyYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8cpSEZ5yBQO2qNLcyKp98AC0y+m X8KP9G5D6IHnPz8Ao8gpymFnsIgofV7yJ6rNCFqJ2s+Y52Slzp4d1ahPUrwG3KWi 0hKSMOyQ8NDcigckoH0tZahn/yjJDSN14XShODHDkONtUjrPPAepetYceSJDIUb5 bTslZeJ5txx9BUDsOcpRmywmjV7wcG+bIJTecRTDiPiQMejGRIUBsnmjTov4YjGw oNZlSXqJwc36ROzqvZkkAHdqrkMVREdY2P++s7IWRsrFq72Y3Vic7TsV3k2z8Zgf /3PvCPTHhjUavxhHrsRcFgOaOE3spmWLDRI1RjkeYm1v5d8GpGtbCCRsJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG3ClF5se80AFfxnGkDm3V3nip9MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMo0CtKD 0KkY5WrY4yoxnMrKsjaPglySrmT/+kg1FogWtSbR8WieQSmo05UcVseMsuNgdCe+ ilpkqdGTOK5SbmFOmWa/GHFQwCAQH+828Rb+uBaERzYQONV/xtrSjT3Rtw1PAjiF eniExszQvQRwZXriaHrw1lyVtTJ08WVzM7bwLtNTCEgO04NfRkk3dARSfMFNQyeX A68PUL76YAZ0joy9B6yrToMuSJ+9IV0EV76P+JEsNQDMa8oCbFw4kO8UOMpHbqre dYctyG0cY9Pq5MpXWUZDxa23lW73kBAVNY3Dsy6Z5MCc+bpJHoFQgsOjNPWyT8qS 70nY7Kw8PgdqYQ== -----END CERTIFICATE-----Generated at Tue Jun 30 22:39:39 2026 by rpki-client