$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json) Hash identifier: YgSz4DfMbSWuiqwTKYG2oPBWiL6x9fX0sGPDbZWia9Q= Subject key identifier: 44:AD:E6:18:B0:4B:0A:1D:E6:BC:05:14:A9:AB:32:53:7F:10:8B:EC Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019DB133FFC3D46181F5A46ED2A47A92F3A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft Manifest number: 0123 Signing time: Tue 21 Apr 2026 18:01:07 +0000 Manifest this update: Tue 21 Apr 2026 18:01:07 +0000 Manifest next update: Wed 22 Apr 2026 18:01:07 +0000 Files and hashes: 1: 1-hh9oUik_fgG0pgOi2euMsbUc8I.roa (hash: 5XeiiUduwL7++J0/nVwnyuu5MftAJfIvwRN3qDdzSlY=) 2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=) 3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=) 4: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (hash: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=) 5: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=) 6: AXN9IfFxwxJxmSciUO562i03GBQ.roa (hash: aE9WRbqK5RvY1U9hnYBJDivpu+TeAOIFVcCzqHQcPew=) 7: Bt944BayBPUs5tY1-40d44HAARE.roa (hash: zi5M7iQxvBHgvnNeQP8FWxBFiEPXlMuyXlNAQguQJsE=) 8: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: GnPYM6TsFTNXcyAQB9T9RjZIDlYnUvya++AKj9dbfyU=) 9: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=) 10: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=) 11: H8iBI3oxi9mzced7XKm6sNzu2b0.roa (hash: Eg4AzBzQ/I1unxdwVQekHYusJF4JhPkZ22ij6AU935E=) 12: Mlfex3S5CLOhA1MBkAbm9LHu_10.roa (hash: V4LnwdORb6VK2l3X5YaNbB4FamwrZRclEZ55ZBEF3AA=) 13: MydiaKGPyhqQGpu_6Ww1zeyR0Ts.roa (hash: jwfgqX9BVx8vpHACig+2Pu5XbpnXcVkyxwcxPzeEiVE=) 14: NOjwhYI2kirt2v9grg41qI9kmHc.roa (hash: x8Wpo+e0e+Kqahdvx8uTXaGfiFvikF4EXAN4AWDoJKA=) 15: NmijAg95xBjUfN3MLDCEUJYkcxk.roa (hash: gkAuQmHMahHJ5Ycz4AzRoin+osgCl2hGtjLbCF1r+qw=) 16: PMbKQ_uUlrPevpZsNx0eXksTqOY.roa (hash: SnQSjPH+aFHvy6nc0KoA3L9eJTHfO0AG19ulVcVHwqI=) 17: QWQzSQz2V6lQKwS5w_B7gdQ0YOo.roa (hash: yE2uYXhDEG79dZrAksSgkow9Cy2/lssGdxe0iEuUEIw=) 18: SPoau1EEjJNUiDSFgcPH_9bzW2w.roa (hash: b+PGonpxJwjNp5zMPGufmYaRs5LZCyUKEmEsNgj/URY=) 19: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=) 20: UWG2KqGolGnK4I4CWWuiFt5PDYw.roa (hash: OACJDAF/MdpkZSccb8Z3I1QsBKhYM1uRJEceUvU+s4M=) 21: WvwVjJHMOPWNlxS8HTbROtz0-MU.roa (hash: eOtN3+OEhxMDpWk6PNAgFifujhWFTlA2nbdD568BWFg=) 22: XBjUsIUdtfMfXNPtxRxnlXCXuqo.roa (hash: OdSad9cay8Q55ufXpYXELSuBNbMggt6reqV2Jp/e8p0=) 23: _6ixJuOyBdDWsrg7PfndJ2TSGK0.roa (hash: F0rHZIZZ2rx/QrDQPKEtB+najpsBYGjbpBhGiX4HEZU=) 24: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=) 25: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=) 26: fJ4RTkcAcu1_glmVBKsTaz8-VOw.roa (hash: ylSEi7ocQYsHPL2vorGa5RyfsK8vM+dH8wAx4Jn5w88=) 27: fJT7ZR4HIwjMx2AyBAlwz5coIHk.roa (hash: ZwS002nsxCyO55gY22WEARcRjDqtil9M7noG6u5dJ8Y=) 28: gIeaPpxjEdHljDQYkxl5yfrkzlg.roa (hash: Ly4b9Ljl8JcL3KNEpA0qm1DizsVn4jpOu21qrK+L6V4=) 29: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=) 30: jlyVMy9vhPC0GCFYWk2szYNEc_w.roa (hash: s4fbqR4n/ydVukf77BXHJR4PeZYaz2YPC3tOiWct1kc=) 31: k74BDLFkQaEyMgBj0_QPCwyAzlc.roa (hash: iiBwXpUAvsSJCATNg/4pa+YR5V2BOLH1mYLLHWG9FIc=) 32: kv9bULYb1zCfMOBRSjI9nH8sv_Y.roa (hash: P1HCtzPK52K7SvuHFToWVccNae4mm7lEoXBNxIQ8Ff0=) 33: mrJFWfBuPaQqz2vdocNsksjPzis.roa (hash: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=) 34: oqnabKxpFbtrqLy7jRC2pPJ8V9g.roa (hash: VE1/XvPZNwlf5RXLj+2jf/J7x52P9E6soQwnQ9ir++I=) 35: pI7qSTRgzUbS2Ns1jYeSqs3KHYk.roa (hash: CJwtXB13zqfWZMwNNbpQuNFzVQMOSfT6be7u6Jwlr8I=) 36: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=) 37: qPtqN5TxQfjdDYdkssZvq4hWtuI.roa (hash: Z1jY4qgVDn7xNOA1Yj5uRwpDL3uyZsxT5mIjhA9AC8A=) 38: s164bmBS4p-apZhM-MctZkXpN0U.roa (hash: 0N/gWItg7SgNePmyijXaKOfBIxoVYTgbI5wvLIcYwgA=) 39: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=) 40: whpQUi_QNVNPFxF5YN0U-Z4CJl8.roa (hash: j/vGUE59TZltmJLF+biW83xG7UAq25/opkA46PKZ2AA=) 41: woRyUDAXu2ll3itSZhcE_qzCHpQ.roa (hash: YiZB9BX69sjWmQksPP2IGJL2U8tsB2a/OXEzKj1z6FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b1:33:ff:c3:d4:61:81:f5:a4:6e:d2:a4:7a:92:f3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Apr 21 18:01:07 2026 GMT Not After : Apr 22 18:01:07 2026 GMT Subject: CN=44ade618b04b0a1de6bc0514a9ab32537f108bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:7a:73:eb:99:df:a6:dc:bc:86:b1:0a:0e: 1b:71:4c:6b:97:b7:6d:d8:9c:6b:08:49:46:94:98: c5:85:c2:9b:fd:1b:0c:5a:b2:a5:7f:e1:fe:df:14: 14:78:b8:f7:67:b1:5f:82:d4:df:38:3c:fe:76:1a: 2f:cf:2c:d9:03:80:66:37:fb:50:7d:ff:54:5b:a3: db:d9:28:fa:fc:9f:59:0b:77:3a:18:7b:3e:07:e2: 79:77:49:8d:7c:3a:ec:b4:b3:23:d6:76:32:1f:b3: 28:8e:97:ba:a3:ce:e3:72:f6:04:af:c8:bd:c3:08: b7:49:b7:88:ff:95:ed:dd:15:f3:0b:be:e3:80:35: c1:8c:ec:0a:6b:3d:e2:6f:b5:0e:6b:1b:e5:23:fd: b4:e6:e0:8a:27:9d:d7:ea:08:73:73:4a:27:23:d3: 5d:4d:de:45:06:b5:2a:fa:64:f0:c4:65:24:e7:f0: 66:9d:21:58:db:75:19:0f:f6:af:65:01:67:f9:66: 8e:85:a2:8a:1e:76:e0:14:44:4c:96:c2:18:72:3f: 2c:ef:46:72:7d:90:87:6a:62:2c:ac:d7:1d:ae:47: 73:a8:a3:70:bb:be:02:58:27:d3:de:43:78:bb:1e: 29:27:36:b6:e4:79:e6:72:5a:98:22:2c:59:c9:05: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AD:E6:18:B0:4B:0A:1D:E6:BC:05:14:A9:AB:32:53:7F:10:8B:EC X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:95:b2:ed:6d:c6:57:ef:6e:5d:8b:6d:4f:8b:c3:f0:af:1e: be:ec:74:02:c9:e1:0d:ba:a4:95:1e:8d:51:23:65:50:bb:60: cd:a8:b7:ba:5b:32:f9:9d:9e:9e:2e:4c:c9:b5:b4:d9:de:d1: be:c2:29:50:bd:e0:f4:76:fa:5c:3b:6e:20:15:05:28:62:43: 37:64:be:a9:6d:90:63:e7:0f:72:67:aa:7e:9a:a9:49:e7:9b: 66:d3:65:14:25:a3:49:f8:b4:82:81:dd:04:9f:0c:d5:9a:cb: 57:89:31:cb:16:73:b8:82:52:2b:1d:45:56:e3:fe:25:b0:6f: 2c:01:cc:40:9d:b4:60:e7:66:15:ec:7e:01:06:32:24:1e:d6: 12:c8:db:db:55:3a:87:c1:e9:f5:23:5f:cb:ce:da:9e:30:23: 99:5f:e5:79:9b:ad:dc:33:bb:50:e1:5d:16:01:a2:0f:ac:5a: c1:51:30:1a:6e:f9:b3:00:17:2d:10:13:b9:c9:96:8f:fe:a3: d9:4f:73:be:6f:23:6d:92:0a:65:53:af:b1:bd:b0:00:4f:03: 6d:19:2e:ce:78:fc:0b:a4:87:23:ab:39:8d:fc:f3:38:7d:06: 41:50:e6:42:55:0d:d6:99:a9:81:47:b4:58:49:ca:98:73:af: c1:ee:3a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2xM//D1GGB9aRu0qR6kvOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwNDIxMTgwMTA3WhcNMjYwNDIyMTgwMTA3WjAzMTEwLwYDVQQD Eyg0NGFkZTYxOGIwNGIwYTFkZTZiYzA1MTRhOWFiMzI1MzdmMTA4YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO16c+uZ36bcvIaxCg4bcUxrl7dt 2JxrCElGlJjFhcKb/RsMWrKlf+H+3xQUeLj3Z7FfgtTfODz+dhovzyzZA4BmN/tQ ff9UW6Pb2Sj6/J9ZC3c6GHs+B+J5d0mNfDrstLMj1nYyH7Mojpe6o87jcvYEr8i9 wwi3SbeI/5Xt3RXzC77jgDXBjOwKaz3ib7UOaxvlI/205uCKJ53X6ghzc0onI9Nd Td5FBrUq+mTwxGUk5/BmnSFY23UZD/avZQFn+WaOhaKKHnbgFERMlsIYcj8s70Zy fZCHamIsrNcdrkdzqKNwu74CWCfT3kN4ux4pJza25HnmclqYIixZyQWEpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESt5hiwSwod5rwFFKmrMlN/EIvsMB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZWy7W3G V+9uXYttT4vD8K8evux0AsnhDbqklR6NUSNlULtgzai3ulsy+Z2eni5MybW02d7R vsIpUL3g9Hb6XDtuIBUFKGJDN2S+qW2QY+cPcmeqfpqpSeebZtNlFCWjSfi0goHd BJ8M1ZrLV4kxyxZzuIJSKx1FVuP+JbBvLAHMQJ20YOdmFex+AQYyJB7WEsjb21U6 h8Hp9SNfy87anjAjmV/leZut3DO7UOFdFgGiD6xawVEwGm75swAXLRATucmWj/6j 2U9zvm8jbZIKZVOvsb2wAE8DbRkuznj8C6SHI6s5jfzzOH0GQVDmQlUN1pmpgUe0 WEnKmHOvwe46Zg== -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:35 2026 by rpki-client