$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: +wiJU7R6q2WIxAGJTPiovWcT+a8F2UWoFPVnb/OtrVQ= Subject key identifier: 54:13:90:5E:E9:67:B7:22:98:5D:BB:1E:2D:C6:CC:D9:31:82:72:86 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019D9818BCBED699FBD8320693EC2AB41AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 10AE Signing time: Thu 16 Apr 2026 21:00:51 +0000 Manifest this update: Thu 16 Apr 2026 21:00:51 +0000 Manifest next update: Fri 17 Apr 2026 21:00:51 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: nqWx0r2T/ABcNlbJglbJkEMWHWp4mVyUIhNBdue9IlE=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:18:bc:be:d6:99:fb:d8:32:06:93:ec:2a:b4:1a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Apr 16 21:00:51 2026 GMT Not After : Apr 17 21:00:51 2026 GMT Subject: CN=5413905ee967b722985dbb1e2dc6ccd931827286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:6a:26:d0:7a:47:b7:78:17:9d:53:92:0c: e9:b5:5e:37:bc:d5:01:f5:93:07:38:06:84:7f:88: ee:5f:55:f5:91:83:58:4e:a4:80:39:a4:34:63:bf: 8d:33:4f:35:4e:ec:05:35:31:02:8a:fc:69:dc:8c: 60:93:76:b9:af:60:f7:5a:19:a0:54:cf:46:d4:42: 74:e7:fc:0b:63:28:f6:75:06:5d:5d:9d:ef:7a:a9: 06:60:4f:89:e2:19:e6:31:2b:c0:c6:ab:ec:b0:a9: 6d:d7:4d:cb:29:6a:ee:80:be:c9:8d:f5:5f:fa:3f: 12:eb:bb:05:5f:c5:1c:f0:d3:3a:ee:6c:5f:1d:79: e7:cb:e7:43:f4:cd:c8:e9:91:e5:7f:ab:c7:f9:2e: d7:b4:e7:93:ca:98:c1:13:87:b6:d9:ed:4a:98:3b: 45:ba:a2:18:66:f6:0d:56:23:2c:ea:a1:22:99:78: f1:44:59:60:42:83:6d:1f:b0:f7:7c:0d:da:d0:c3: 03:02:bd:b8:f8:11:e8:8c:fe:44:b9:76:b3:6d:29: 0d:f3:b7:79:e5:ce:e5:5e:07:4b:8b:2e:40:de:a1: 0d:4a:e2:89:80:9b:94:cb:aa:18:94:c0:4f:96:b0: 10:af:23:8c:17:b7:eb:93:ea:d2:0e:07:37:8b:51: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:13:90:5E:E9:67:B7:22:98:5D:BB:1E:2D:C6:CC:D9:31:82:72:86 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ab:29:6c:94:c0:8f:4e:40:32:91:1c:9b:f2:79:a0:2b:eb: f3:db:d5:a8:6d:3b:be:2c:94:7a:51:e1:04:74:db:9a:50:26: 7e:26:3e:2c:9f:1b:8f:09:20:e8:c5:2b:03:bc:f5:d6:07:d6: 57:97:df:bd:87:9c:42:d4:10:0d:0a:03:67:74:e2:7b:cd:b7: 8d:6b:cd:5a:bd:94:a3:dd:dc:03:ce:db:5e:d5:de:03:b1:fd: 30:0b:dd:99:7a:43:81:6d:3a:c6:bb:20:28:af:42:14:6f:0c: aa:7c:d6:00:a2:1b:fe:d7:7c:e4:33:4f:97:93:e7:53:de:72: c5:39:7e:02:cf:63:96:b4:7c:e3:cb:2b:5e:99:a3:1f:02:2f: 9d:9a:68:57:d8:c6:cc:e5:80:b9:bb:59:a7:da:c8:52:ad:f7: a4:e9:d2:1d:46:ab:7d:c5:50:38:03:bf:51:40:9a:a3:44:3e: 8d:59:ff:78:71:75:09:a9:65:71:73:19:b3:24:df:b9:05:f0: c7:f4:11:48:a7:e8:ac:30:16:e7:04:4c:c9:3b:f6:66:25:dd: 26:ae:ea:9f:6e:2f:4e:0e:80:43:a1:cd:aa:9b:6d:62:61:4c: b4:66:49:c5:d6:89:97:26:b0:cc:08:b1:58:a3:f5:2d:cf:4c: 7b:be:8e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGLy+1pn72DIGk+wqtBq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNDE2MjEwMDUxWhcNMjYwNDE3MjEwMDUxWjAzMTEwLwYDVQQD Eyg1NDEzOTA1ZWU5NjdiNzIyOTg1ZGJiMWUyZGM2Y2NkOTMxODI3Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NtqJtB6R7d4F51TkgzptV43vNUB 9ZMHOAaEf4juX1X1kYNYTqSAOaQ0Y7+NM081TuwFNTECivxp3Ixgk3a5r2D3Whmg VM9G1EJ05/wLYyj2dQZdXZ3veqkGYE+J4hnmMSvAxqvssKlt103LKWrugL7JjfVf +j8S67sFX8Uc8NM67mxfHXnny+dD9M3I6ZHlf6vH+S7XtOeTypjBE4e22e1KmDtF uqIYZvYNViMs6qEimXjxRFlgQoNtH7D3fA3a0MMDAr24+BHojP5EuXazbSkN87d5 5c7lXgdLiy5A3qENSuKJgJuUy6oYlMBPlrAQryOMF7frk+rSDgc3i1EhKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQTkF7pZ7cimF27Hi3GzNkxgnKGMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKspbJTA j05AMpEcm/J5oCvr89vVqG07viyUelHhBHTbmlAmfiY+LJ8bjwkg6MUrA7z11gfW V5ffvYecQtQQDQoDZ3Tie823jWvNWr2Uo93cA87bXtXeA7H9MAvdmXpDgW06xrsg KK9CFG8MqnzWAKIb/td85DNPl5PnU95yxTl+As9jlrR848srXpmjHwIvnZpoV9jG zOWAubtZp9rIUq33pOnSHUarfcVQOAO/UUCao0Q+jVn/eHF1CallcXMZsyTfuQXw x/QRSKforDAW5wRMyTv2ZiXdJq7qn24vTg6AQ6HNqpttYmFMtGZJxdaJlyawzAix WKP1Lc9Me76OqA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:04:20 2026 by rpki-client