$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: CKVfsYTc003hOMMA6aI9qVMp/QKedL4Mv+B+EiQ9fmU= Subject key identifier: D7:98:4A:EB:CB:01:25:0D:1A:3B:BC:32:55:6B:6E:CB:34:77:E6:F5 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01A13ECB48AE51561974B5FC7CC5CCCD85E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1AFD Signing time: Thu 15 Oct 2026 09:01:12 +0000 Manifest this update: Thu 15 Oct 2026 09:01:12 +0000 Manifest next update: Fri 16 Oct 2026 09:01:12 +0000 Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=) 2: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=) 3: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: Y+j0j4CSF/qeKudkPXjdOJa681L0tg1YtOybjCCNUsg=) 4: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=) 5: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=) 6: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=) 7: M_xCJsX8h5eaBi-wYuukUIeLlHE.roa (hash: +F/OTkqalSV5YfZFQTeLCMzutIPCGn5E9RrlE0o/AmI=) 8: Y3aoIlqNCNphsiCKa2N_Zlu5pTQ.roa (hash: /HMgdMc1sZ8jBaDugHqsdEjymyjqMmrdpzhT3yzOwnw=) 9: ZvQi868EflLttDRykRDA1OBXRp4.roa (hash: bX09g7Zjgjvk10oVgY7EjrNBLmlrtkdPpGExQkKmVyM=) 10: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=) 11: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=) 12: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=) 13: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=) 14: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=) 15: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=) 16: flb4_Z26MILh3NOfnXftL8ULo-g.roa (hash: D+Pg2s5ub15r8E8/KyywaP4TOdP+QzaHOzTjFYXfvfU=) 17: hXK9Hc5sAQMbjFO-IOFUQkBqBqs.roa (hash: oayuIVbp9XMXi8iVnT1fc+bq2U/tSBJEowoJnqub+1M=) 18: zZ5FzDx5r94DHz5RCT2Alf8TUjo.roa (hash: gM7F7qwmwQieS17kUSf9sVT/GPAoYrfsduMF3EwlYsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3e:cb:48:ae:51:56:19:74:b5:fc:7c:c5:cc:cd:85:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Oct 15 09:01:12 2026 GMT Not After : Oct 16 09:01:12 2026 GMT Subject: CN=d7984aebcb01250d1a3bbc32556b6ecb3477e6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:d8:5f:80:63:1f:03:8d:88:97:70:40:4d: f1:df:63:67:3f:cf:d4:fb:dc:78:7b:da:ed:1e:48: 9f:e3:fa:92:4b:e2:3d:22:7c:53:66:fa:69:e5:9a: 61:d9:80:e0:dd:6e:d5:04:bb:6e:8e:9b:fa:95:84: b5:00:70:7d:ab:cd:fb:5f:ff:c8:19:5f:c0:ef:bb: bf:b4:d2:b9:8c:77:59:a1:5f:5d:49:57:fd:7f:5c: 0c:db:b9:cb:d9:2d:f5:95:03:19:53:04:b6:8d:e1: cd:93:41:be:39:78:4b:5e:e9:6e:e3:03:cc:ef:92: 31:0c:7a:d8:98:79:df:38:cf:ea:7f:01:6e:ca:35: 6b:8d:bf:77:ad:8f:79:a5:1e:b9:81:a7:93:ae:14: 7a:c4:2f:c5:e9:e1:53:c8:95:7d:67:47:17:f5:25: 78:b9:39:29:71:bf:8a:04:ef:6a:a3:00:5d:4d:75: 10:31:67:b4:ca:40:5e:42:cf:e4:ad:bc:0d:05:69: b0:05:ad:99:f2:9d:54:43:b4:ef:75:b8:20:37:c6: 77:82:11:d2:8d:3c:e7:0f:ab:46:c8:f9:df:f9:38: 35:74:ba:81:73:3e:7b:10:d2:b3:a6:14:df:b6:8a: 2e:b8:28:ed:d1:ad:dc:81:2d:5b:41:35:bf:32:be: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:4A:EB:CB:01:25:0D:1A:3B:BC:32:55:6B:6E:CB:34:77:E6:F5 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a5:bf:5c:cd:a8:f8:c5:ed:7c:df:cb:56:94:95:83:23:17: 64:76:ef:4d:fb:2b:99:d7:33:79:ce:9f:78:52:14:6e:c0:c1: 2b:ec:4c:e4:57:0b:d0:e5:03:b1:2e:b8:2d:53:35:fa:cc:53: ac:54:3d:04:ec:50:6a:dd:f1:c6:e9:25:30:b8:0c:f9:59:4d: 12:5a:52:40:0e:88:1d:8c:74:75:2e:f8:f8:d6:8c:61:10:4d: 3f:a3:d5:a6:77:a9:5f:47:21:39:53:80:08:16:d6:6d:9a:49: 1d:34:c2:d0:26:59:13:01:15:e6:6b:11:1f:ac:0b:df:23:69: 42:2a:22:9a:29:fc:6c:75:fb:60:46:ec:1a:5d:ab:d9:f0:c5: 11:8f:fb:46:6e:3d:32:11:78:3c:8d:7e:4d:7c:ef:cf:86:cf: 2c:6a:22:d5:e9:19:b5:d0:6f:a0:29:58:7e:83:1f:ef:b5:7a: 02:09:93:7d:7c:ba:c7:3e:6f:23:19:02:4a:9d:2a:95:10:1c: b7:58:c1:6a:89:3b:c1:ab:ef:55:ea:5a:8f:9a:1d:57:b0:ec: 68:8f:a5:ca:f8:49:0d:1c:8d:6c:24:2f:f1:7e:e5:d3:6b:fa: cd:2f:09:80:52:58:28:f0:13:42:50:30:e6:63:b8:84:16:8b: e9:fb:03:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE+y0iuUVYZdLX8fMXMzYXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYxMDE1MDkwMTEyWhcNMjYxMDE2MDkwMTEyWjAzMTEwLwYDVQQD EyhkNzk4NGFlYmNiMDEyNTBkMWEzYmJjMzI1NTZiNmVjYjM0NzdlNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCbYX4BjHwONiJdwQE3x32NnP8/U +9x4e9rtHkif4/qSS+I9InxTZvpp5Zph2YDg3W7VBLtujpv6lYS1AHB9q837X//I GV/A77u/tNK5jHdZoV9dSVf9f1wM27nL2S31lQMZUwS2jeHNk0G+OXhLXulu4wPM 75IxDHrYmHnfOM/qfwFuyjVrjb93rY95pR65gaeTrhR6xC/F6eFTyJV9Z0cX9SV4 uTkpcb+KBO9qowBdTXUQMWe0ykBeQs/krbwNBWmwBa2Z8p1UQ7TvdbggN8Z3ghHS jTznD6tGyPnf+Tg1dLqBcz57ENKzphTftoouuCjt0a3cgS1bQTW/Mr4TLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeYSuvLASUNGju8MlVrbss0d+b1MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaW/XM2o +MXtfN/LVpSVgyMXZHbvTfsrmdczec6feFIUbsDBK+xM5FcL0OUDsS64LVM1+sxT rFQ9BOxQat3xxuklMLgM+VlNElpSQA6IHYx0dS74+NaMYRBNP6PVpnepX0chOVOA CBbWbZpJHTTC0CZZEwEV5msRH6wL3yNpQioimin8bHX7YEbsGl2r2fDFEY/7Rm49 MhF4PI1+TXzvz4bPLGoi1ekZtdBvoClYfoMf77V6AgmTfXy6xz5vIxkCSp0qlRAc t1jBaok7wavvVepaj5odV7DsaI+lyvhJDRyNbCQv8X7l02v6zS8JgFJYKPATQlAw 5mO4hBaL6fsDEA== -----END CERTIFICATE-----Generated at Thu Oct 15 14:04:14 2026 by rpki-client