$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: WR+4qdlFg93//m1N9uoXtWtkFsGEnYHmamp6/MM6ToU= Subject key identifier: DF:B5:AA:0A:15:63:A2:2B:14:99:56:E3:7F:51:9F:58:A8:84:86:3A Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A0C4B2801CB184FB2DA6960E41DE67D09D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1258 Signing time: Mon 21 Sep 2026 16:00:27 +0000 Manifest this update: Mon 21 Sep 2026 16:00:27 +0000 Manifest next update: Tue 22 Sep 2026 16:00:27 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa (hash: y9Axh/mWQdAs8Y1TTOHiGvpIYZwxkG2h6joLIxU4xas=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: +LiuqeZXTJY58oHsNelsUfVAP/9NrzU1L1i1wLtcvfw=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 12: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:b2:80:1c:b1:84:fb:2d:a6:96:0e:41:de:67:d0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Sep 21 16:00:27 2026 GMT Not After : Sep 22 16:00:27 2026 GMT Subject: CN=dfb5aa0a1563a22b149956e37f519f58a884863a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:0c:59:35:78:4f:fa:99:7e:32:8c:30:19: 66:99:e4:89:43:7a:98:82:c5:ae:e3:a1:e6:1e:de: ef:d4:94:b5:ea:1a:a1:4d:85:5a:75:c6:93:43:e2: 50:5f:16:ae:ec:63:42:1c:23:77:59:90:a0:b5:a3: 37:db:b7:2d:2b:ca:c1:89:12:ac:68:21:b0:d4:5f: ae:b9:38:ea:9f:54:65:c9:20:16:1b:27:a1:62:9b: c4:06:16:65:ad:5c:1c:67:02:cc:9b:50:0c:95:0d: 3f:22:1c:2c:73:01:d2:15:c9:bc:3d:5c:2c:d0:50: b5:c2:7b:d3:01:e5:30:82:ea:df:b2:c6:b3:c3:59: f0:22:29:bb:c6:40:b0:da:1a:83:04:b1:87:41:bf: 40:ad:0f:ae:e5:60:51:e7:39:78:03:cc:8b:0c:7d: d1:89:6c:30:1e:df:c6:c2:76:5a:25:3d:35:bc:53: ec:45:cd:b6:36:98:b2:40:12:aa:56:12:6d:2d:09: 9c:8c:97:86:0c:1a:32:a2:86:46:81:5f:f4:1b:36: 18:0e:34:df:56:94:00:c0:08:f6:db:40:0d:02:f2: ba:10:61:d1:82:1a:0e:10:bc:5f:77:cb:71:5d:28: db:78:72:c1:75:10:eb:e3:26:d6:52:7c:9a:e0:bf: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:AA:0A:15:63:A2:2B:14:99:56:E3:7F:51:9F:58:A8:84:86:3A X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:12:f1:1f:5d:be:a6:29:c3:71:ee:51:8e:86:d9:c7:5b:12: bd:18:bc:32:41:e7:56:39:84:5f:79:f3:eb:f9:4e:80:af:4e: b4:89:c4:1b:a9:61:dc:b6:1c:db:b4:45:5e:1d:72:77:c8:ea: f8:6f:be:41:87:41:ac:2b:1e:7c:c9:83:86:27:00:d8:c3:01: 4c:ad:5f:76:bd:d3:14:c2:32:78:4a:07:a7:e0:fd:70:26:a5: 2a:c2:ef:0a:a6:7f:71:78:36:fa:01:a9:d3:a0:71:bc:de:32: 9e:44:4b:77:b7:3a:93:a2:3b:6b:01:10:f6:2b:55:0e:70:04: 1f:9b:65:8d:40:70:4d:f8:76:54:ab:5d:c0:bb:8c:f6:4c:b3: 80:a5:0f:8d:00:18:54:09:c2:5c:f7:25:6b:e6:c0:40:e2:c9: 1d:2e:3d:b8:ff:ba:bf:06:8c:b6:fa:6b:8d:c2:f6:f5:10:31: 9e:b6:6e:d9:07:61:f4:58:fc:16:c8:4c:37:d7:e6:e4:a2:29: f9:88:3c:3f:2d:78:56:c7:d9:e7:ca:03:27:90:d2:4e:78:7b: 79:71:4a:cf:96:56:1d:d7:ec:a2:0a:ba:44:44:94:b7:da:16: 3a:f3:cd:98:ea:86:c2:6f:b4:10:2f:1b:53:dc:5e:b9:d9:54: cb:a8:ec:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEsoAcsYT7LaaWDkHeZ9CdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwOTIxMTYwMDI3WhcNMjYwOTIyMTYwMDI3WjAzMTEwLwYDVQQD EyhkZmI1YWEwYTE1NjNhMjJiMTQ5OTU2ZTM3ZjUxOWY1OGE4ODQ4NjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q8MWTV4T/qZfjKMMBlmmeSJQ3qY gsWu46HmHt7v1JS16hqhTYVadcaTQ+JQXxau7GNCHCN3WZCgtaM327ctK8rBiRKs aCGw1F+uuTjqn1RlySAWGyehYpvEBhZlrVwcZwLMm1AMlQ0/IhwscwHSFcm8PVws 0FC1wnvTAeUwgurfssazw1nwIim7xkCw2hqDBLGHQb9ArQ+u5WBR5zl4A8yLDH3R iWwwHt/GwnZaJT01vFPsRc22NpiyQBKqVhJtLQmcjJeGDBoyooZGgV/0GzYYDjTf VpQAwAj220ANAvK6EGHRghoOELxfd8txXSjbeHLBdRDr4ybWUnya4L/5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+1qgoVY6IrFJlW439Rn1iohIY6MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhLxH12+ pinDce5RjobZx1sSvRi8MkHnVjmEX3nz6/lOgK9OtInEG6lh3LYc27RFXh1yd8jq +G++QYdBrCsefMmDhicA2MMBTK1fdr3TFMIyeEoHp+D9cCalKsLvCqZ/cXg2+gGp 06BxvN4ynkRLd7c6k6I7awEQ9itVDnAEH5tljUBwTfh2VKtdwLuM9kyzgKUPjQAY VAnCXPcla+bAQOLJHS49uP+6vwaMtvprjcL29RAxnrZu2Qdh9Fj8FshMN9fm5KIp +Yg8Py14VsfZ58oDJ5DSTnh7eXFKz5ZWHdfsogq6RESUt9oWOvPNmOqGwm+0EC8b U9xeudlUy6jsVQ== -----END CERTIFICATE-----Generated at Mon Sep 21 20:59:07 2026 by rpki-client