$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: Os19WbJbGw95kvJrerGL7+3f20WxEwJ0bE4nsTAIs2w= Subject key identifier: D7:AF:5A:CF:4F:17:70:86:FB:08:92:E8:17:AE:AA:38:9A:81:5F:FB Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019D9A073C9DF7844C6BBB09603B9AF2FBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 10AF Signing time: Fri 17 Apr 2026 06:00:58 +0000 Manifest this update: Fri 17 Apr 2026 06:00:58 +0000 Manifest next update: Sat 18 Apr 2026 06:00:58 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: iCY+M0G+gFsZgT1AINobRRaIqhmujGS9ivpfR8GSzGA=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:3c:9d:f7:84:4c:6b:bb:09:60:3b:9a:f2:fb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Apr 17 06:00:58 2026 GMT Not After : Apr 18 06:00:58 2026 GMT Subject: CN=d7af5acf4f177086fb0892e817aeaa389a815ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:85:9a:1a:25:ab:0a:ef:9d:18:d2:36:01: f5:76:27:91:8d:93:83:76:66:42:0d:35:2b:00:a1: d0:ff:62:3d:85:9d:61:96:94:5b:f5:81:75:ee:f3: 1d:1a:8c:f9:90:ef:11:d2:f6:1d:28:8e:a3:72:4f: ab:4f:a6:8a:5b:df:3d:ee:c6:65:8b:85:b5:16:56: 89:e0:9f:47:f4:40:88:65:ce:5f:83:a3:cd:e3:ed: 45:da:cd:fb:c2:5e:24:a0:f6:8f:3f:7a:c4:77:c8: 79:e7:2c:2b:33:53:46:78:f9:84:0b:dd:d3:7a:c8: 82:cf:75:14:e6:49:e5:3e:03:63:43:9d:67:1a:88: 23:5b:0f:96:6c:46:87:63:c5:65:b1:7c:20:ab:13: ad:c0:92:b1:0c:d1:d4:d4:df:d3:3f:19:0b:53:05: 43:89:83:e2:d7:fa:78:57:6e:04:f7:9b:6e:f0:a5: 6e:0d:6a:35:46:a6:ba:f5:b0:ff:a4:84:b4:59:04: 40:2b:85:61:f8:a3:44:c3:f2:f3:b4:77:bc:7a:3f: 4c:69:ce:98:c1:37:08:72:d3:e1:0d:51:be:6c:f7: 21:4f:c2:c7:64:6a:a2:a7:cc:44:27:ee:67:f2:8a: 8b:22:ae:ac:f6:d4:67:e0:cd:cf:e4:8f:15:0f:50: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:5A:CF:4F:17:70:86:FB:08:92:E8:17:AE:AA:38:9A:81:5F:FB X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:af:0a:9e:ce:73:4a:a4:5f:a6:d7:e8:17:67:e8:90:e6:39: 02:29:8a:0c:c0:5f:15:5a:b3:ef:8b:7b:62:43:24:85:cb:22: cc:d6:5b:0e:ff:6d:3d:df:11:a0:7c:51:35:3c:36:78:a0:7a: 3d:51:46:74:e1:f0:af:3f:1c:42:c7:8d:90:86:49:1d:b9:98: 24:4e:6c:27:3d:ee:16:b0:99:4a:5b:36:ca:69:c4:46:f2:f9: b0:68:cb:f8:15:50:7b:3f:b1:d2:0d:e1:da:da:63:df:f6:c0: f7:35:c3:6f:16:45:be:f8:2b:e7:ad:d7:8e:00:59:52:88:95: d8:34:29:1f:e1:9f:4b:db:55:ac:1f:22:fe:05:8a:a2:88:bb: 90:56:9c:7e:f3:a4:13:be:c5:bf:b2:9d:ad:50:59:1b:63:ed: cc:85:7b:ae:81:f7:6c:80:d1:47:f8:b4:97:99:da:cf:30:0e: db:e3:8b:63:5d:58:e4:9a:0a:44:cd:73:b5:8e:a5:cf:c2:1c: ce:8f:a0:ad:16:d6:ce:04:48:5e:73:96:8e:c9:36:0b:4a:96: aa:be:12:4b:32:a7:8d:d0:3f:88:19:b1:e5:0a:66:9d:53:fb: 45:9a:68:9f:c0:6b:f3:c7:97:69:86:83:55:37:4e:1e:8f:d3: 68:1f:a0:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBzyd94RMa7sJYDua8vu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNDE3MDYwMDU4WhcNMjYwNDE4MDYwMDU4WjAzMTEwLwYDVQQD EyhkN2FmNWFjZjRmMTc3MDg2ZmIwODkyZTgxN2FlYWEzODlhODE1ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdSFmholqwrvnRjSNgH1dieRjZOD dmZCDTUrAKHQ/2I9hZ1hlpRb9YF17vMdGoz5kO8R0vYdKI6jck+rT6aKW9897sZl i4W1FlaJ4J9H9ECIZc5fg6PN4+1F2s37wl4koPaPP3rEd8h55ywrM1NGePmEC93T esiCz3UU5knlPgNjQ51nGogjWw+WbEaHY8VlsXwgqxOtwJKxDNHU1N/TPxkLUwVD iYPi1/p4V24E95tu8KVuDWo1Rqa69bD/pIS0WQRAK4Vh+KNEw/LztHe8ej9Mac6Y wTcIctPhDVG+bPchT8LHZGqip8xEJ+5n8oqLIq6s9tRn4M3P5I8VD1D2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNevWs9PF3CG+wiS6BeuqjiagV/7MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq8Kns5z SqRfptfoF2fokOY5AimKDMBfFVqz74t7YkMkhcsizNZbDv9tPd8RoHxRNTw2eKB6 PVFGdOHwrz8cQseNkIZJHbmYJE5sJz3uFrCZSls2ymnERvL5sGjL+BVQez+x0g3h 2tpj3/bA9zXDbxZFvvgr563XjgBZUoiV2DQpH+GfS9tVrB8i/gWKooi7kFacfvOk E77Fv7KdrVBZG2PtzIV7roH3bIDRR/i0l5nazzAO2+OLY11Y5JoKRM1ztY6lz8Ic zo+grRbWzgRIXnOWjsk2C0qWqr4SSzKnjdA/iBmx5QpmnVP7RZpon8Br88eXaYaD VTdOHo/TaB+gLw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:39:37 2026 by rpki-client