$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: ezwxzQ0R2BBx4atM6o9Js8QMLWZr8BYmQcIpC/RLaw4= Subject key identifier: DE:89:DB:BA:47:D0:D6:C2:49:F6:99:12:16:A5:E9:A5:EB:8A:CD:C1 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019FA8D0A79D6AF1C9431287D6380E00B503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 11C3 Signing time: Tue 28 Jul 2026 13:01:14 +0000 Manifest this update: Tue 28 Jul 2026 13:01:14 +0000 Manifest next update: Wed 29 Jul 2026 13:01:14 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: 9d9b7ngCfBXn0BZvHGUbIYai3SU.roa (hash: S8rO+x/b1TlI/ds8zRuEobXNGIIkOXMHVIgQZ5JbD+g=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: YrS-zU0gb2gsRDyFXkO54VCWxkM.roa (hash: VPnOry+i0fDjtn98ZDInnQWI3+XyaS04/h6hsFSIigk=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: c2GCDuRpfLX1nrNwZ+ZyxVwE39kacJIZggIpcaEgh+I=) 9: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 10: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 11: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 12: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:a7:9d:6a:f1:c9:43:12:87:d6:38:0e:00:b5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jul 28 13:01:14 2026 GMT Not After : Jul 29 13:01:14 2026 GMT Subject: CN=de89dbba47d0d6c249f6991216a5e9a5eb8acdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:44:9b:7a:27:15:2b:c1:cf:00:11:3c:b8: 66:db:e3:c6:73:50:ce:57:77:68:ac:b8:1d:94:42: d3:0a:f5:52:89:16:b1:84:f3:34:ad:d4:e7:99:96: 31:12:4f:8b:5d:06:2d:63:eb:d7:5b:65:e1:89:c1: bb:74:5a:08:20:7e:26:03:53:b5:fc:4c:e5:a2:10: 76:78:91:13:56:f0:55:79:19:a0:a1:53:30:5d:1c: 55:5a:51:eb:6d:17:12:21:9a:37:19:06:cb:b0:26: ed:32:fa:03:71:3b:0b:5a:6c:bb:38:e0:d1:e1:6b: b0:64:ac:5f:7c:c1:71:83:48:52:84:b1:aa:ea:36: a5:a0:6d:30:de:6c:10:0a:a3:22:93:8a:7a:b5:23: 3b:9a:6a:9b:5e:a0:50:db:da:e2:32:3d:bf:ab:80: 7c:ac:fa:dd:54:26:28:bb:60:a1:6e:fd:c8:03:93: ac:f3:cf:8a:ec:b9:2a:cd:78:d4:8f:eb:b8:cb:13: 76:47:a8:6e:04:09:16:52:de:dd:c1:24:c0:5f:f2: db:0e:d2:8e:c3:f3:e6:80:5a:21:8c:2f:d3:ad:7c: e0:2e:fb:50:07:27:74:89:63:74:a0:a8:eb:43:26: b1:3b:7b:43:51:39:7a:dd:e0:d5:ed:62:7a:41:48: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:89:DB:BA:47:D0:D6:C2:49:F6:99:12:16:A5:E9:A5:EB:8A:CD:C1 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:96:ce:ab:29:0c:8a:72:74:fb:5b:c4:9f:a6:8a:24:37: bc:43:de:c2:d0:50:0b:5d:09:85:26:dd:af:5f:9d:68:3d:55: a7:24:51:26:25:00:d9:92:a2:89:8a:98:43:35:84:e2:ca:03: f0:22:6a:e7:68:82:c2:d7:de:ac:91:ba:b3:4d:f1:49:27:e2: e9:00:f2:df:22:1f:46:46:c9:a3:42:fe:0c:e0:d8:24:52:53: a1:da:26:a9:2d:15:0b:e9:56:90:79:d8:13:2c:35:4f:ae:a5: fe:a0:77:f1:44:49:df:03:ac:ba:e5:7e:51:5e:29:8f:eb:de: d2:9c:57:ad:4d:34:31:45:32:ed:bb:50:c5:43:49:a6:d5:83: a5:09:35:92:1d:d5:30:a4:73:a2:32:15:99:37:63:24:76:e0: a6:37:18:d9:00:16:ff:66:c8:dd:13:1d:07:08:81:75:88:0c: ed:87:c2:11:70:4c:14:e6:78:df:72:a1:76:bc:ec:4f:b9:84: e0:14:da:2a:d7:24:ca:83:87:3f:ce:9d:35:81:01:95:01:e5: b4:17:85:b9:e6:5f:72:f7:11:b1:88:41:b3:1c:ae:48:94:2c: ec:a0:35:3e:c1:ae:98:16:f7:37:c2:3c:c9:30:b7:ab:72:ed: d4:4b:7e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0KedavHJQxKH1jgOALUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNzI4MTMwMTE0WhcNMjYwNzI5MTMwMTE0WjAzMTEwLwYDVQQD EyhkZTg5ZGJiYTQ3ZDBkNmMyNDlmNjk5MTIxNmE1ZTlhNWViOGFjZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR5Em3onFSvBzwARPLhm2+PGc1DO V3dorLgdlELTCvVSiRaxhPM0rdTnmZYxEk+LXQYtY+vXW2XhicG7dFoIIH4mA1O1 /EzlohB2eJETVvBVeRmgoVMwXRxVWlHrbRcSIZo3GQbLsCbtMvoDcTsLWmy7OODR 4WuwZKxffMFxg0hShLGq6jaloG0w3mwQCqMik4p6tSM7mmqbXqBQ29riMj2/q4B8 rPrdVCYou2Chbv3IA5Os88+K7LkqzXjUj+u4yxN2R6huBAkWUt7dwSTAX/LbDtKO w/PmgFohjC/TrXzgLvtQByd0iWN0oKjrQyaxO3tDUTl63eDV7WJ6QUiVywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6J27pH0NbCSfaZEhal6aXris3BMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJWWzqsp DIpydPtbxJ+miiQ3vEPewtBQC10JhSbdr1+daD1VpyRRJiUA2ZKiiYqYQzWE4soD 8CJq52iCwtferJG6s03xSSfi6QDy3yIfRkbJo0L+DODYJFJTodomqS0VC+lWkHnY Eyw1T66l/qB38URJ3wOsuuV+UV4pj+ve0pxXrU00MUUy7btQxUNJptWDpQk1kh3V MKRzojIVmTdjJHbgpjcY2QAW/2bI3RMdBwiBdYgM7YfCEXBMFOZ433KhdrzsT7mE 4BTaKtckyoOHP86dNYEBlQHltBeFueZfcvcRsYhBsxyuSJQs7KA1PsGumBb3N8I8 yTC3q3Lt1Et+aQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:49 2026 by rpki-client