$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: UzZwn0bIK3zOcRi4yOCm/bLOfxYtOLcnAUj1CZCQluI= Subject key identifier: 06:03:FE:76:91:2B:FB:72:34:31:C8:30:4D:84:9B:5A:C4:0F:49:83 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019DE9351DC9B136F04A6674FC1EC006CAF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 13E9 Signing time: Sat 02 May 2026 15:01:05 +0000 Manifest this update: Sat 02 May 2026 15:01:05 +0000 Manifest next update: Sun 03 May 2026 15:01:05 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 3MiYhTRF1kooRisERA1XOP6oXaOM8m+sdPe/C3b1D8M=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 03 May 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e9:35:1d:c9:b1:36:f0:4a:66:74:fc:1e:c0:06:ca:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: May 2 15:01:05 2026 GMT Not After : May 3 15:01:05 2026 GMT Subject: CN=0603fe76912bfb723431c8304d849b5ac40f4983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:c8:b4:67:a2:14:8c:62:a3:d7:49:b0:d2: 6a:ff:3c:2c:6c:e4:e3:8f:ec:aa:17:aa:fa:e2:cd: 1b:9f:b7:97:db:31:ff:7a:67:41:be:d7:59:56:ee: 60:9f:74:56:77:da:00:f7:e9:bd:38:35:3a:e2:12: 43:fc:cd:df:25:51:29:ab:7c:00:c6:ea:88:7b:36: df:4a:9b:05:d6:d2:b2:20:0a:fc:f2:04:30:7d:bd: a4:df:c4:34:e0:70:67:7d:a5:3a:55:94:24:d0:e1: 7b:e6:ca:12:21:b3:bf:30:a6:6b:66:ed:dc:40:16: 6f:bf:e1:eb:77:3b:ba:53:a8:f6:c7:26:c8:90:70: 05:fb:ce:21:75:f5:ce:3d:d5:9e:8b:86:1f:27:19: 60:c0:89:8e:1f:26:02:2f:7c:e5:56:7b:62:73:62: 34:c2:49:7a:6b:6b:f1:d1:51:12:1e:dd:0b:44:c7: 90:7e:17:85:f7:02:36:fc:ac:42:5a:bf:0f:17:96: 8a:d9:1d:ea:f3:ea:7d:16:70:0a:51:eb:ec:b3:d7: 90:82:2d:b4:18:4b:89:ed:db:54:0c:9b:1e:cc:1b: d4:e6:2f:f1:88:6a:b1:2f:3e:c4:c5:c4:62:42:31: 1a:66:50:8e:c0:56:94:0d:94:c2:11:19:28:15:78: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:03:FE:76:91:2B:FB:72:34:31:C8:30:4D:84:9B:5A:C4:0F:49:83 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:12:1b:4b:b4:fe:82:85:c7:13:38:2a:13:6f:2a:4c:c3:9a: 97:12:1a:70:38:2a:da:81:7a:cc:4d:41:18:c4:48:fc:23:ed: a1:88:04:3f:17:80:0c:80:5b:84:0c:93:96:34:c3:2d:db:8d: 2b:ab:ce:c9:17:84:f5:18:18:5a:b3:ee:c7:82:dc:3a:8b:b9: 64:af:a9:4d:43:cf:6d:17:b1:58:77:0c:90:2f:11:90:28:ba: 88:d8:a1:64:b4:6d:7f:b2:e5:b4:12:05:c3:96:3f:ad:e6:eb: 4f:d2:26:86:2e:1a:f7:11:eb:73:da:04:de:c2:3e:2b:75:56: 51:a9:e6:c0:66:ed:b9:e0:fe:6f:e0:03:f1:2a:95:72:72:5f: db:30:24:7d:33:8a:c7:50:83:50:d6:2f:38:1d:0a:8e:be:13: 21:dd:2f:84:e9:cb:8a:f4:bc:01:53:f9:84:db:34:b5:58:e2: e9:0d:9d:9d:99:cf:c7:dc:d0:36:65:72:f0:40:5b:e0:1a:11: 63:20:6d:6b:5b:d6:1e:20:4d:50:61:8c:29:4e:61:4f:53:c8: fe:9e:21:4f:d8:e5:44:c9:88:3a:ab:c6:fa:36:a2:0b:ee:a5: 8d:b3:56:d1:31:14:16:58:bf:c6:f8:27:4b:52:52:92:37:c7: aa:f2:01:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3pNR3JsTbwSmZ0/B7ABsrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwNTAyMTUwMTA1WhcNMjYwNTAzMTUwMTA1WjAzMTEwLwYDVQQD EygwNjAzZmU3NjkxMmJmYjcyMzQzMWM4MzA0ZDg0OWI1YWM0MGY0OTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu7ItGeiFIxio9dJsNJq/zwsbOTj j+yqF6r64s0bn7eX2zH/emdBvtdZVu5gn3RWd9oA9+m9ODU64hJD/M3fJVEpq3wA xuqIezbfSpsF1tKyIAr88gQwfb2k38Q04HBnfaU6VZQk0OF75soSIbO/MKZrZu3c QBZvv+Hrdzu6U6j2xybIkHAF+84hdfXOPdWei4YfJxlgwImOHyYCL3zlVntic2I0 wkl6a2vx0VESHt0LRMeQfheF9wI2/KxCWr8PF5aK2R3q8+p9FnAKUevss9eQgi20 GEuJ7dtUDJsezBvU5i/xiGqxLz7ExcRiQjEaZlCOwFaUDZTCERkoFXhtOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYD/naRK/tyNDHIME2Em1rED0mDMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERIbS7T+ goXHEzgqE28qTMOalxIacDgq2oF6zE1BGMRI/CPtoYgEPxeADIBbhAyTljTDLduN K6vOyReE9RgYWrPux4LcOou5ZK+pTUPPbRexWHcMkC8RkCi6iNihZLRtf7LltBIF w5Y/rebrT9Imhi4a9xHrc9oE3sI+K3VWUanmwGbtueD+b+AD8SqVcnJf2zAkfTOK x1CDUNYvOB0Kjr4TId0vhOnLivS8AVP5hNs0tVji6Q2dnZnPx9zQNmVy8EBb4BoR YyBta1vWHiBNUGGMKU5hT1PI/p4hT9jlRMmIOqvG+jaiC+6ljbNW0TEUFli/xvgn S1JSkjfHqvIBKw== -----END CERTIFICATE-----Generated at Sat May 2 23:52:40 2026 by rpki-client