$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: wD6B55H7Cfif6t+Mue5Ux05iHTD0qMrT+i5/cc1/RR8= Subject key identifier: E9:93:B7:1A:D2:74:A4:77:91:F4:03:15:42:A5:C7:83:9F:21:73:A5 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01A0024AE237354F5FC3BD9E1A624F80BDAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1A57 Signing time: Fri 14 Aug 2026 22:00:57 +0000 Manifest this update: Fri 14 Aug 2026 22:00:57 +0000 Manifest next update: Sat 15 Aug 2026 22:00:57 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: 0nlr6TGGtDBvAbeZvvgrUML8k6IMjsOkr8L66wftiJU=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: KkDqDLNE240fCTXz3x0pbuKHvl4.roa (hash: 8CcwM3+dFL+lua0flReoYrUHpd5rKuSGWfX4/qWe1QI=) 7: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 8: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 9: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 10: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 11: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 12: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 13: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 14: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 15: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 16: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 17: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 18: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:4a:e2:37:35:4f:5f:c3:bd:9e:1a:62:4f:80:bd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Aug 14 22:00:57 2026 GMT Not After : Aug 15 22:00:57 2026 GMT Subject: CN=e993b71ad274a47791f4031542a5c7839f2173a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:d2:58:c0:4b:1c:71:db:85:76:e7:c6:4a: bc:5e:f9:75:c6:79:af:92:2f:4a:a9:7e:c5:84:6c: b3:ec:b1:5e:f4:98:f4:4a:92:c4:56:33:84:76:06: bb:04:e6:9b:06:68:66:37:29:6b:a8:70:ad:26:ff: e5:ee:1f:95:0e:49:24:1d:8d:a3:a3:8b:62:c2:df: 17:b6:49:17:fd:e6:b4:f6:f0:bb:cd:60:4b:55:1b: 4f:a8:f0:1c:5c:fa:7b:63:87:4d:b3:e0:8c:f1:98: f2:3c:21:0e:80:b2:a2:de:ab:57:5b:3f:00:15:3c: a8:91:04:3f:03:cd:c0:a4:23:d5:60:46:b5:d3:b9: be:0b:f0:69:24:0a:15:44:11:28:ce:02:57:2b:03: 2b:78:9b:b4:4f:c5:40:cc:bc:23:2c:36:2c:da:aa: bb:2b:9a:e7:51:d5:34:d0:49:5c:c4:02:b9:76:06: db:b4:84:03:63:f8:a8:ae:e9:09:2e:3e:91:0d:50: c9:0f:93:0c:c8:2f:bb:d6:2d:9c:3f:5e:48:9f:7b: 88:f6:38:79:5e:80:af:8f:91:8c:92:bf:95:4c:70: 58:05:6a:dc:ca:e0:3f:7f:76:db:5d:56:55:80:9c: 73:08:3e:e7:69:3f:d5:37:a6:da:ea:a7:9d:58:dc: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:B7:1A:D2:74:A4:77:91:F4:03:15:42:A5:C7:83:9F:21:73:A5 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:97:f3:be:74:e2:02:83:6c:79:0b:bf:f8:b6:92:d3:2c: ab:7a:04:b1:73:54:98:62:08:53:a1:eb:2b:78:8f:d2:cb:6c: 67:df:3f:23:92:f9:56:6d:fc:c6:61:58:55:32:60:95:00:ec: 67:4a:9b:76:d2:32:71:16:02:f4:65:08:1d:f4:a3:c4:34:3f: d1:1b:b1:35:2b:bd:69:a6:66:37:80:e5:dc:a8:94:8c:89:06: b7:ad:b0:48:c8:e8:67:fb:89:0c:3c:ec:ac:40:70:98:cd:2c: d8:65:39:5e:4e:81:dd:50:a6:64:d8:a4:bb:da:d4:9a:4d:fe: 5f:c4:a4:43:48:9a:86:f6:c5:1d:47:13:62:6f:be:d4:9b:b1: 1b:e9:b4:e3:55:bd:93:b2:c4:4b:be:ea:4e:ea:46:ad:60:53: 4b:ae:68:d5:3a:07:50:d6:89:55:28:71:90:16:74:44:3a:40: 02:34:ce:dd:a8:e4:ad:68:45:e6:1c:01:a1:e2:7d:7d:c9:87: 85:11:66:b8:28:2d:5e:4a:3b:c3:49:9e:f5:7d:30:70:c8:fa: ac:07:01:2b:ad:7c:16:b4:9a:99:63:d1:fb:82:52:f3:09:28: d6:9b:a3:51:a0:17:ed:d0:84:d3:16:f3:86:84:bc:e7:a3:5c: 1a:9e:d0:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACSuI3NU9fw72eGmJPgL2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwODE0MjIwMDU3WhcNMjYwODE1MjIwMDU3WjAzMTEwLwYDVQQD EyhlOTkzYjcxYWQyNzRhNDc3OTFmNDAzMTU0MmE1Yzc4MzlmMjE3M2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIbSWMBLHHHbhXbnxkq8Xvl1xnmv ki9KqX7FhGyz7LFe9Jj0SpLEVjOEdga7BOabBmhmNylrqHCtJv/l7h+VDkkkHY2j o4tiwt8XtkkX/ea09vC7zWBLVRtPqPAcXPp7Y4dNs+CM8ZjyPCEOgLKi3qtXWz8A FTyokQQ/A83ApCPVYEa107m+C/BpJAoVRBEozgJXKwMreJu0T8VAzLwjLDYs2qq7 K5rnUdU00ElcxAK5dgbbtIQDY/iorukJLj6RDVDJD5MMyC+71i2cP15In3uI9jh5 XoCvj5GMkr+VTHBYBWrcyuA/f3bbXVZVgJxzCD7naT/VN6ba6qedWNzrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmTtxrSdKR3kfQDFUKlx4OfIXOlMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkqX8750 4gKDbHkLv/i2ktMsq3oEsXNUmGIIU6HrK3iP0stsZ98/I5L5Vm38xmFYVTJglQDs Z0qbdtIycRYC9GUIHfSjxDQ/0RuxNSu9aaZmN4Dl3KiUjIkGt62wSMjoZ/uJDDzs rEBwmM0s2GU5Xk6B3VCmZNiku9rUmk3+X8SkQ0iahvbFHUcTYm++1JuxG+m041W9 k7LES77qTupGrWBTS65o1ToHUNaJVShxkBZ0RDpAAjTO3ajkrWhF5hwBoeJ9fcmH hRFmuCgtXko7w0me9X0wcMj6rAcBK618FrSamWPR+4JS8wko1pujUaAX7dCE0xbz hoS856NcGp7QUw== -----END CERTIFICATE-----Generated at Sat Aug 15 03:27:47 2026 by rpki-client