$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: j7kucxJ6p/r/oPUIsd41yEeq4s9B/mHWxAENebCYrHc= Subject key identifier: 30:6A:BE:5B:BC:66:D2:6A:14:66:A7:51:88:24:7B:13:B7:2D:47:5F Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A0C88F54277C924FC1BCA3EB131AA04970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 125A Signing time: Tue 22 Sep 2026 10:00:31 +0000 Manifest this update: Tue 22 Sep 2026 10:00:31 +0000 Manifest next update: Wed 23 Sep 2026 10:00:31 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa (hash: y9Axh/mWQdAs8Y1TTOHiGvpIYZwxkG2h6joLIxU4xas=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: tqBVTGYbu+1j7dkT76UZWPpvS1Tc2uYVQGwy1CW2/jA=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 12: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:8f:54:27:7c:92:4f:c1:bc:a3:eb:13:1a:a0:49:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Sep 22 10:00:31 2026 GMT Not After : Sep 23 10:00:31 2026 GMT Subject: CN=306abe5bbc66d26a1466a75188247b13b72d475f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:45:23:4a:cf:90:cf:f5:c9:13:93:f4:c5: 2c:e1:46:8c:90:aa:37:f5:58:3e:72:77:9f:e2:aa: 57:b1:d2:f3:51:b1:87:07:86:d3:a9:08:21:79:d7: f0:b7:ac:67:b5:10:a2:b2:2f:ec:67:76:6c:68:bb: 2f:40:a9:05:bc:8e:93:4f:8d:1d:9a:2e:f6:1d:69: 63:26:55:11:47:2a:c2:eb:99:c2:d5:54:a7:48:0c: f3:45:e3:a0:73:94:42:68:14:ad:ce:d9:1f:01:ed: 56:56:e0:51:08:76:87:5a:db:7a:ee:62:a9:5a:2c: e1:d0:ee:34:53:d7:e2:cd:c2:dd:5d:43:74:5d:ba: 1b:dc:19:0e:58:ab:d2:01:8b:fd:d8:30:2f:35:d1: 0a:66:79:ad:29:0a:4c:40:e5:cb:fe:b9:11:0c:52: 94:ce:62:17:e2:2d:86:9f:9e:8d:63:9d:7a:7e:12: 65:2c:2f:f7:4f:e2:78:6e:e0:05:95:61:3d:2a:f5: 68:f5:62:05:98:43:a3:65:c8:66:95:a8:28:fe:1d: f7:9f:ba:85:81:15:b4:39:e7:e1:01:ad:5f:0b:58: 00:a2:b0:cd:24:bf:e4:43:70:fe:7f:c8:55:7f:1f: c5:12:d0:93:1c:d9:bf:91:77:44:e1:51:b7:87:54: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:BE:5B:BC:66:D2:6A:14:66:A7:51:88:24:7B:13:B7:2D:47:5F X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:42:a8:a4:f6:b9:7b:ac:f6:c2:21:2c:de:32:4d:5d:9f:26: 5c:d4:ee:49:0e:71:1e:db:b6:c1:02:c2:6e:8e:ab:0c:ea:52: 14:36:9d:bf:8b:68:4b:f4:4f:d4:0e:07:47:cf:7b:72:fe:32: 49:ce:67:fb:24:26:c8:a1:59:90:df:70:23:2e:10:c4:f1:59: ca:cf:7c:2e:43:7e:9b:2a:e5:7e:1e:4b:1c:1f:97:96:04:99: a3:6f:a4:52:de:d9:16:38:db:52:8d:e1:fa:b1:82:98:e9:7d: 17:aa:cb:e6:2b:e2:ec:9d:4d:50:5f:c0:53:19:e9:3e:99:0f: bc:5e:b4:ae:8c:2b:16:a9:6a:9a:83:8f:c6:60:93:99:e7:97: 14:58:37:69:96:66:c6:67:55:60:16:ed:3b:f2:85:6d:2b:f6: 2e:2f:a3:80:2b:9f:b1:b9:95:57:61:64:16:c2:e9:88:59:ad: da:fd:c5:56:a4:80:f4:9a:17:cf:bd:93:fd:1c:a7:a0:04:90: 85:1d:2f:53:50:0f:c8:4e:b3:43:50:8e:c6:b7:df:dc:fe:07: 07:d3:03:e6:a0:03:9b:2a:05:58:d6:40:cd:9e:3b:64:a5:82: a6:1b:b0:e1:8d:c4:cf:87:5f:21:a4:0e:40:ac:b0:17:c8:4a: ab:aa:b8:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIj1QnfJJPwbyj6xMaoElwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwOTIyMTAwMDMxWhcNMjYwOTIzMTAwMDMxWjAzMTEwLwYDVQQD EygzMDZhYmU1YmJjNjZkMjZhMTQ2NmE3NTE4ODI0N2IxM2I3MmQ0NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV5FI0rPkM/1yROT9MUs4UaMkKo3 9Vg+cnef4qpXsdLzUbGHB4bTqQghedfwt6xntRCisi/sZ3ZsaLsvQKkFvI6TT40d mi72HWljJlURRyrC65nC1VSnSAzzReOgc5RCaBStztkfAe1WVuBRCHaHWtt67mKp Wizh0O40U9fizcLdXUN0Xbob3BkOWKvSAYv92DAvNdEKZnmtKQpMQOXL/rkRDFKU zmIX4i2Gn56NY516fhJlLC/3T+J4buAFlWE9KvVo9WIFmEOjZchmlago/h33n7qF gRW0OefhAa1fC1gAorDNJL/kQ3D+f8hVfx/FEtCTHNm/kXdE4VG3h1RmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBqvlu8ZtJqFGanUYgkexO3LUdfMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkKopPa5 e6z2wiEs3jJNXZ8mXNTuSQ5xHtu2wQLCbo6rDOpSFDadv4toS/RP1A4HR897cv4y Sc5n+yQmyKFZkN9wIy4QxPFZys98LkN+myrlfh5LHB+XlgSZo2+kUt7ZFjjbUo3h +rGCmOl9F6rL5ivi7J1NUF/AUxnpPpkPvF60rowrFqlqmoOPxmCTmeeXFFg3aZZm xmdVYBbtO/KFbSv2Li+jgCufsbmVV2FkFsLpiFmt2v3FVqSA9JoXz72T/RynoASQ hR0vU1APyE6zQ1COxrff3P4HB9MD5qADmyoFWNZAzZ47ZKWCphuw4Y3Ez4dfIaQO QKywF8hKq6q4ng== -----END CERTIFICATE-----Generated at Tue Sep 22 14:24:26 2026 by rpki-client