$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 42onGYtDtX/wMgA72r2/Y1JQWVIl3ZnevBjmot+News= Subject key identifier: 6D:45:57:97:09:B8:44:DF:14:86:74:C9:A4:A8:81:78:74:59:82:DE Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019CAA8FC69120547C8E216E659B317A676E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1032 Signing time: Sun 01 Mar 2026 18:01:15 +0000 Manifest this update: Sun 01 Mar 2026 18:01:15 +0000 Manifest next update: Mon 02 Mar 2026 18:01:15 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 4: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 5: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: /YV7kO5oRYBd797dS8YQIVzY/lR/NKv7FhMiq9icjao=) 7: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 8: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 9: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 10: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:c6:91:20:54:7c:8e:21:6e:65:9b:31:7a:67:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Mar 1 18:01:15 2026 GMT Not After : Mar 2 18:01:15 2026 GMT Subject: CN=6d45579709b844df148674c9a4a88178745982de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:18:ed:91:a3:17:a0:30:c6:8d:0c:3a:f3: 92:0e:40:12:8b:23:a5:e2:64:40:c2:a7:5e:a7:fd: 4e:d1:ad:4f:d2:e6:69:6c:22:5c:96:cd:7d:97:56: 4b:36:a6:ed:21:30:2a:86:b7:84:4d:05:b2:69:9b: 46:22:df:f7:8a:15:b1:c9:53:7d:a1:72:45:3b:ba: 7c:d4:1b:4f:f9:c2:5c:ae:ef:09:90:b7:f6:61:95: 26:3b:b6:9d:2a:8b:d9:34:c3:81:25:65:38:d0:26: b4:33:70:0b:9b:89:45:a5:52:df:41:c0:e1:86:03: a3:70:4d:70:a8:46:c5:5c:f0:3f:32:1e:74:ea:a6: 44:6e:d7:25:5f:5d:d4:47:59:17:c5:fd:6f:c3:3e: d4:2c:0f:63:82:5f:88:af:a2:f6:7e:4c:53:3a:a0: 1f:ef:4c:d2:09:a1:6b:3d:33:65:00:75:e0:ca:f8: ab:9c:f2:9a:22:60:3c:4e:58:62:04:e6:ac:03:19: 7f:07:d0:a2:1d:4c:e5:9d:f7:99:38:f7:c7:a9:c8: bb:84:2e:d4:0d:23:48:c5:4d:33:8c:77:d9:07:5e: fe:d1:eb:d1:b4:61:08:53:ab:83:d0:03:a6:87:68: 11:2e:45:66:2e:62:83:42:3a:f4:34:ff:fa:ef:37: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:57:97:09:B8:44:DF:14:86:74:C9:A4:A8:81:78:74:59:82:DE X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:00:af:8b:ee:07:a8:2a:aa:76:c3:e6:8a:f6:fb:20:13:40: f3:27:c0:60:89:26:50:2e:26:1f:05:6e:c8:0e:6d:ca:f4:a2: fa:03:4d:a1:19:00:02:68:c4:35:df:f7:a9:ef:6b:43:61:5c: 15:57:26:8a:ec:13:a9:ae:74:27:3d:22:02:cd:4c:4e:25:0c: cf:cd:75:b5:02:13:16:9a:82:46:fa:47:7f:37:36:36:d0:eb: cf:32:c2:3f:20:d4:00:c0:9b:9c:c0:ec:10:e9:0c:ee:96:9c: 7a:f7:0b:91:83:73:7d:c0:98:be:a7:e9:07:94:35:42:52:69: b7:52:f5:b7:1d:94:d5:c8:78:c5:13:16:9e:7a:08:4f:ff:a3: b6:5c:48:1d:5d:0c:a7:4e:ce:e9:aa:8d:24:9f:f2:43:28:b0: c8:bb:fd:48:81:bd:5e:b0:53:57:d1:26:93:97:93:04:e6:62: 1f:66:15:f7:ef:8a:35:1b:db:c3:b9:9a:0b:63:c4:ca:bc:84: 0b:ad:f4:9a:f9:64:5b:f7:91:65:f7:61:de:7d:72:5e:81:42: bc:0a:cd:e8:03:4a:e4:0e:76:25:73:b5:8d:b8:c7:20:c3:5f: e5:c9:e9:ec:9a:a8:40:c0:55:92:c6:9b:50:94:66:fd:26:44: 66:3a:10:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj8aRIFR8jiFuZZsxemduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMzAxMTgwMTE1WhcNMjYwMzAyMTgwMTE1WjAzMTEwLwYDVQQD Eyg2ZDQ1NTc5NzA5Yjg0NGRmMTQ4Njc0YzlhNGE4ODE3ODc0NTk4MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDgY7ZGjF6Awxo0MOvOSDkASiyOl 4mRAwqdep/1O0a1P0uZpbCJcls19l1ZLNqbtITAqhreETQWyaZtGIt/3ihWxyVN9 oXJFO7p81BtP+cJcru8JkLf2YZUmO7adKovZNMOBJWU40Ca0M3ALm4lFpVLfQcDh hgOjcE1wqEbFXPA/Mh506qZEbtclX13UR1kXxf1vwz7ULA9jgl+Ir6L2fkxTOqAf 70zSCaFrPTNlAHXgyvirnPKaImA8TlhiBOasAxl/B9CiHUzlnfeZOPfHqci7hC7U DSNIxU0zjHfZB17+0evRtGEIU6uD0AOmh2gRLkVmLmKDQjr0NP/67zcEwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1FV5cJuETfFIZ0yaSogXh0WYLeMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgCvi+4H qCqqdsPmivb7IBNA8yfAYIkmUC4mHwVuyA5tyvSi+gNNoRkAAmjENd/3qe9rQ2Fc FVcmiuwTqa50Jz0iAs1MTiUMz811tQITFpqCRvpHfzc2NtDrzzLCPyDUAMCbnMDs EOkM7pacevcLkYNzfcCYvqfpB5Q1QlJpt1L1tx2U1ch4xRMWnnoIT/+jtlxIHV0M p07O6aqNJJ/yQyiwyLv9SIG9XrBTV9Emk5eTBOZiH2YV9++KNRvbw7maC2PEyryE C630mvlkW/eRZfdh3n1yXoFCvArN6ANK5A52JXO1jbjHIMNf5cnp7JqoQMBVksab UJRm/SZEZjoQpg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:16 2026 by rpki-client