$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: uIPcxu/nR38HvNKqox0qMppf1UTjSEU4gjLlvpOyxeo= Subject key identifier: 56:18:24:6E:41:26:BE:84:65:B2:AB:39:59:E9:2F:49:D2:16:FA:B6 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A0C2C420B1918266C73847E6ECD8B0B331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1257 Signing time: Mon 21 Sep 2026 07:00:28 +0000 Manifest this update: Mon 21 Sep 2026 07:00:28 +0000 Manifest next update: Tue 22 Sep 2026 07:00:28 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa (hash: y9Axh/mWQdAs8Y1TTOHiGvpIYZwxkG2h6joLIxU4xas=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: t22lFn6Ba15lV1swEa6J97YgnmaXTr+11xlWEGUinPk=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 12: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:c4:20:b1:91:82:66:c7:38:47:e6:ec:d8:b0:b3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Sep 21 07:00:28 2026 GMT Not After : Sep 22 07:00:28 2026 GMT Subject: CN=5618246e4126be8465b2ab3959e92f49d216fab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:46:bc:01:09:eb:7a:41:61:81:e9:33:c4: 59:16:30:76:03:07:89:88:8a:1a:04:c9:c5:6c:3b: 6a:7a:00:6b:e7:8a:70:04:85:b5:89:4a:cf:db:7d: e9:54:4c:ad:f5:26:40:f7:b2:ac:c7:02:59:79:6f: 9c:ca:a6:74:f4:5a:ea:db:2f:2e:9b:cb:e2:23:7c: da:28:e5:7b:a5:44:a6:36:61:be:9d:50:28:e8:09: d4:6b:b6:ad:fb:c0:6d:cb:b0:4d:b6:06:a5:97:89: 6c:a4:2c:9e:61:b7:24:74:6f:af:29:fb:f0:1e:df: c8:23:2e:e1:fa:b4:03:4a:d8:69:50:57:b1:49:34: 8e:0c:ff:a4:21:c7:34:8c:07:5a:18:90:43:f9:6d: 88:ca:ba:88:00:af:83:c4:b7:82:92:95:17:17:b5: 48:fb:25:80:54:27:6c:6d:09:ff:e3:2d:7c:98:97: f3:07:06:bf:e8:30:8b:50:eb:92:e7:25:b0:2a:64: 41:b7:1c:8f:74:7b:60:95:63:b5:6e:22:4a:86:d4: 4e:58:64:19:08:92:59:7a:70:da:25:bb:90:b6:3c: 18:11:1c:c2:e0:b7:96:ec:c8:70:f1:b6:7c:bd:aa: 8a:12:73:8f:12:6a:8a:9d:f9:c0:a6:b9:94:62:58: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:24:6E:41:26:BE:84:65:B2:AB:39:59:E9:2F:49:D2:16:FA:B6 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6d:14:db:3e:19:18:90:19:d6:60:2a:fa:45:35:d0:22:32: a6:87:44:07:4b:75:d2:da:99:50:ee:0b:df:b9:b8:e5:59:aa: 2c:41:30:1d:8a:5e:70:bf:29:e9:d8:85:5a:b1:f7:6f:a3:db: 56:d3:d1:69:0a:ce:77:56:5a:3e:27:b1:99:ff:cb:41:ae:bf: f7:31:68:08:dc:fb:ce:1b:66:10:26:55:ff:a2:d1:01:5a:9e: 22:11:e6:92:8b:26:17:c8:70:30:46:e5:11:07:a8:fb:47:e0: d3:b3:a8:a6:f9:21:94:ea:3c:81:27:4d:16:6b:88:a3:97:c3: 5b:5e:c3:5d:e1:64:23:28:22:83:ca:0a:df:bd:48:b4:59:a8: aa:e9:91:22:99:2b:35:90:aa:97:cd:29:7e:fb:40:4b:b6:d5: cb:64:69:b4:2c:3d:b1:51:cb:15:66:b2:72:86:35:f6:31:f8: 16:65:b2:00:1e:b3:30:e8:08:dc:10:f3:14:61:4e:ab:c4:9a: ec:67:91:ac:78:c7:ec:6f:33:7b:eb:2c:3a:44:f5:d2:25:d7: 5c:ca:cf:fd:e5:9b:28:ca:73:67:6b:eb:5f:20:55:3d:34:f2: 12:98:ad:03:bc:d2:05:98:17:34:71:c6:af:60:27:77:e7:c9: 90:94:d1:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCxCCxkYJmxzhH5uzYsLMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwOTIxMDcwMDI4WhcNMjYwOTIyMDcwMDI4WjAzMTEwLwYDVQQD Eyg1NjE4MjQ2ZTQxMjZiZTg0NjViMmFiMzk1OWU5MmY0OWQyMTZmYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSNGvAEJ63pBYYHpM8RZFjB2AweJ iIoaBMnFbDtqegBr54pwBIW1iUrP233pVEyt9SZA97KsxwJZeW+cyqZ09Frq2y8u m8viI3zaKOV7pUSmNmG+nVAo6AnUa7at+8Bty7BNtgall4lspCyeYbckdG+vKfvw Ht/IIy7h+rQDSthpUFexSTSODP+kIcc0jAdaGJBD+W2IyrqIAK+DxLeCkpUXF7VI +yWAVCdsbQn/4y18mJfzBwa/6DCLUOuS5yWwKmRBtxyPdHtglWO1biJKhtROWGQZ CJJZenDaJbuQtjwYERzC4LeW7Mhw8bZ8vaqKEnOPEmqKnfnAprmUYlglOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYYJG5BJr6EZbKrOVnpL0nSFvq2MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU20U2z4Z GJAZ1mAq+kU10CIypodEB0t10tqZUO4L37m45VmqLEEwHYpecL8p6diFWrH3b6Pb VtPRaQrOd1ZaPiexmf/LQa6/9zFoCNz7zhtmECZV/6LRAVqeIhHmkosmF8hwMEbl EQeo+0fg07OopvkhlOo8gSdNFmuIo5fDW17DXeFkIygig8oK371ItFmoqumRIpkr NZCql80pfvtAS7bVy2RptCw9sVHLFWaycoY19jH4FmWyAB6zMOgI3BDzFGFOq8Sa 7GeRrHjH7G8ze+ssOkT10iXXXMrP/eWbKMpzZ2vrXyBVPTTyEpitA7zSBZgXNHHG r2And+fJkJTR5A== -----END CERTIFICATE-----Generated at Mon Sep 21 14:31:14 2026 by rpki-client