$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: ya7xnBBYSo7TZZeKLuPGPeZi+TEDd840S1LO+SZPclg= Subject key identifier: DB:59:BE:1C:A3:CD:BD:2D:5A:79:AE:CB:A5:B2:A7:1E:0B:04:FF:73 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019CF5E0EA2339EFB7EB6FEC3DF3CAB8082E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 136B Signing time: Mon 16 Mar 2026 09:01:23 +0000 Manifest this update: Mon 16 Mar 2026 09:01:23 +0000 Manifest next update: Tue 17 Mar 2026 09:01:23 +0000 Files and hashes: 1: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (hash: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs=) 2: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (hash: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo=) 3: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (hash: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=) 4: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (hash: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: S08gyoUcXWoOLPZ/+/X03un0Go+8ItMPpQW+OpbG/OI=) 6: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (hash: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM=) 7: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (hash: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI=) 8: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (hash: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY=) 9: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (hash: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s=) 10: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (hash: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU=) 11: MZ3-_phVg1JFlbxR5OJP-KpStoE.roa (hash: GHqHuGXUotJGH2X0xBNvkiEuBK4TdiZ8BJK/Jxpgz1s=) 12: NEgKW_finEZme1CsPFfQq7C_nGU.roa (hash: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ=) 13: Wskl_3uPHekUF3zx3QZ2xEUVuL0.roa (hash: kiedoz3ErnGMUTlwmvNgwCKeQntAzy8i6UBh3qNDF0Q=) 14: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (hash: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU=) 15: XsmD7LEAI6pZoeMk3oZHhwn_dYg.roa (hash: GHaT6kjXh7U5OzHr0z91LoZmJkdMKuqoPMm1YY79vbA=) 16: j83JngEGhal0kT3zsRIrsplye2w.roa (hash: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I=) 17: ladyd0Ekz6wTE_sJyN3_nLE-AOE.roa (hash: jAOULnSvYDzySi6HdzX7/I1TqKIDoW3zVHgFUF+Swa8=) 18: wmmnD99fWi4VUybgO705ekl7zTw.roa (hash: VG6vy1cTBHOLK/uIPe7y7qS8xAPjtN3l17x/O6Ocsgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:f5:e0:ea:23:39:ef:b7:eb:6f:ec:3d:f3:ca:b8:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Mar 16 09:01:23 2026 GMT Not After : Mar 17 09:01:23 2026 GMT Subject: CN=db59be1ca3cdbd2d5a79aecba5b2a71e0b04ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:25:93:d1:ad:7d:0d:6d:9a:eb:77:b9:e7: 39:8f:ee:ac:61:c4:2b:26:dd:c4:59:1b:48:fd:f0: 44:4a:62:44:48:4f:a0:52:1e:04:d8:f3:52:d3:82: 23:79:20:f3:ce:8a:45:96:8b:25:0b:ad:55:67:7b: 00:51:b7:9a:a4:3f:01:56:63:c0:64:f6:be:03:71: 59:5e:6f:71:00:27:30:bb:df:6f:8d:9d:68:0a:fa: cc:1e:4d:5e:a4:d3:65:28:e9:f7:18:7f:5a:62:7b: cc:75:8d:5d:1c:ab:55:37:c7:48:20:4f:bd:89:71: 2a:52:03:24:e3:d4:11:f9:21:b1:0f:1c:72:15:42: 9e:68:a3:00:af:15:e9:56:13:bf:4b:ea:c1:be:e0: 4b:be:2d:e0:78:da:e5:bd:4f:c3:05:91:3a:f0:c5: 6b:c8:97:17:78:82:a1:f2:dc:3e:65:8e:74:10:f0: fa:61:f6:06:cd:38:f6:32:16:51:34:0a:e4:e6:de: c9:fa:cc:b7:ad:d2:50:09:5c:25:b0:16:7c:ba:55: d4:a2:7c:28:ec:aa:e3:da:74:4e:92:94:f5:c9:a0: a7:b4:a6:32:d0:a7:a1:db:90:7a:aa:a5:45:2b:7b: 8e:1b:8a:c1:84:34:33:c0:b1:f9:f2:74:8d:83:5d: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:BE:1C:A3:CD:BD:2D:5A:79:AE:CB:A5:B2:A7:1E:0B:04:FF:73 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:93:4b:7b:c1:ed:fe:32:fd:b4:8a:33:e4:2c:b8:6e:0f:34: d9:fa:35:7f:a3:33:1b:61:b1:b1:a3:24:2b:8c:3f:1d:0c:32: a6:f6:52:a3:96:8a:80:15:ad:f6:5d:d0:91:73:2f:27:da:74: d4:70:ca:35:16:d3:75:ad:1b:4e:f1:8e:41:b2:17:75:33:7f: eb:d4:df:99:e5:cb:79:a1:31:77:7d:51:50:dc:94:25:dc:11: 9a:75:27:bb:f6:72:4b:1c:d5:23:38:87:71:02:c4:1e:fe:ac: 96:27:33:d9:92:96:88:d7:36:b6:8d:03:e0:c1:a9:67:0c:bf: 28:bf:be:7a:2d:7c:79:89:62:ef:a8:d1:ef:b3:27:43:63:3f: bb:02:94:78:20:e6:08:50:4f:b3:b3:f0:0c:07:bf:86:31:78: ff:e9:1f:a6:87:cd:51:0f:4b:7a:c1:c5:5c:e3:7e:ee:33:af: 51:a0:e8:49:0c:fd:9b:f6:a1:55:64:44:b9:22:ae:cc:06:d1: 11:28:a9:3b:cc:ab:ac:bb:9b:2d:da:da:62:f8:1f:e1:f5:d3: fa:f5:72:49:cf:35:cb:bc:b2:02:c9:1f:d3:b1:55:57:67:19: 6c:48:99:d9:50:cb:02:8b:dc:6d:54:1e:77:11:d7:17:99:fa: 60:87:53:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz14OojOe+362/sPfPKuAguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMzE2MDkwMTIzWhcNMjYwMzE3MDkwMTIzWjAzMTEwLwYDVQQD EyhkYjU5YmUxY2EzY2RiZDJkNWE3OWFlY2JhNWIyYTcxZTBiMDRmZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQlk9GtfQ1tmut3uec5j+6sYcQr Jt3EWRtI/fBESmJESE+gUh4E2PNS04IjeSDzzopFloslC61VZ3sAUbeapD8BVmPA ZPa+A3FZXm9xACcwu99vjZ1oCvrMHk1epNNlKOn3GH9aYnvMdY1dHKtVN8dIIE+9 iXEqUgMk49QR+SGxDxxyFUKeaKMArxXpVhO/S+rBvuBLvi3geNrlvU/DBZE68MVr yJcXeIKh8tw+ZY50EPD6YfYGzTj2MhZRNArk5t7J+sy3rdJQCVwlsBZ8ulXUonwo 7Krj2nROkpT1yaCntKYy0Keh25B6qqVFK3uOG4rBhDQzwLH58nSNg10XYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtZvhyjzb0tWnmuy6Wypx4LBP9zMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpNLe8Ht /jL9tIoz5Cy4bg802fo1f6MzG2GxsaMkK4w/HQwypvZSo5aKgBWt9l3QkXMvJ9p0 1HDKNRbTda0bTvGOQbIXdTN/69TfmeXLeaExd31RUNyUJdwRmnUnu/ZySxzVIziH cQLEHv6slicz2ZKWiNc2to0D4MGpZwy/KL++ei18eYli76jR77MnQ2M/uwKUeCDm CFBPs7PwDAe/hjF4/+kfpofNUQ9LesHFXON+7jOvUaDoSQz9m/ahVWREuSKuzAbR ESipO8yrrLubLdraYvgf4fXT+vVySc81y7yyAskf07FVV2cZbEiZ2VDLAovcbVQe dxHXF5n6YIdTlg== -----END CERTIFICATE-----Generated at Mon Mar 16 15:10:32 2026 by rpki-client