$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 39krkpvd1LJZXtH6EYn8ATjM+H5ewputaHgUP+D2dLc= Subject key identifier: C8:DD:8F:F3:9B:7D:6E:D2:BE:F9:47:19:5A:B0:BE:AA:34:13:A5:F5 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A088D4DDA1A12AB245AA4C1050FBC03FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1239 Signing time: Thu 10 Sep 2026 01:00:46 +0000 Manifest this update: Thu 10 Sep 2026 01:00:46 +0000 Manifest next update: Fri 11 Sep 2026 01:00:46 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa (hash: y9Axh/mWQdAs8Y1TTOHiGvpIYZwxkG2h6joLIxU4xas=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: msjkdazJY7J4LPjay0CeQjAyTH5cQ8HY+AxYsAwBt5M=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 12: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:d4:dd:a1:a1:2a:b2:45:aa:4c:10:50:fb:c0:3f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Sep 10 01:00:46 2026 GMT Not After : Sep 11 01:00:46 2026 GMT Subject: CN=c8dd8ff39b7d6ed2bef947195ab0beaa3413a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:47:6a:69:0e:ee:18:8c:20:e9:c7:3f:46: e0:48:90:51:c3:bd:f5:13:da:d9:f8:d0:a3:45:7c: d2:a5:cb:8c:1d:9e:d9:97:ef:f0:fb:f5:cf:fe:6f: b3:e8:30:7c:96:28:44:3a:f7:5d:59:2a:66:32:7d: 6b:4a:b3:27:8b:98:07:13:d4:47:64:88:fa:8e:a6: f5:71:aa:81:b7:1f:ce:3c:04:82:0c:89:d9:76:31: 61:bf:71:72:72:4e:42:1a:3b:ab:85:cd:7b:7d:85: 06:50:80:eb:94:7e:c4:28:8e:3b:50:91:2c:f4:9d: b5:39:12:57:76:83:fa:80:2f:21:36:d5:8a:f0:95: 01:e2:2b:c0:2e:bc:a7:53:5c:7f:8a:25:8b:45:b2: 32:46:dd:71:3d:91:1c:89:9b:31:a0:c9:69:dc:54: 3d:ab:a2:e4:7f:bc:17:e5:9c:53:17:cd:f2:09:a2: f5:ef:bd:af:60:46:c3:78:2e:2f:86:ff:31:ba:7b: 19:c0:e2:a9:41:5e:1f:06:2a:8c:35:cf:9e:9f:e3: 51:a5:ef:4e:aa:07:04:87:b3:49:3c:a4:0c:e1:a7: 98:f2:19:5a:3f:ba:f1:f5:6c:57:aa:16:ea:56:53: 98:c1:1c:24:79:16:6a:41:85:85:94:78:31:21:19: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DD:8F:F3:9B:7D:6E:D2:BE:F9:47:19:5A:B0:BE:AA:34:13:A5:F5 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:95:29:a2:53:28:a4:d2:dc:b1:d1:6a:44:9d:b4:dd:b9: 9d:70:d5:f4:dd:3d:0b:86:89:0d:49:84:19:e3:7f:17:65:73: 37:45:83:19:10:b0:d6:1d:53:54:e8:69:f4:81:e4:9d:90:8e: 35:ed:78:f8:1d:08:2a:56:69:26:9c:ed:d2:23:cf:bf:58:7e: e0:5f:a3:bf:67:84:d7:89:2e:73:a7:0d:43:95:53:0d:03:69: 0a:0d:c7:28:18:f3:a7:b5:2a:b2:24:2b:30:9d:78:c2:b3:07: 71:03:a1:f7:c6:16:9e:f5:b8:fb:66:b5:9b:ae:79:dd:b3:48: 5d:67:2a:29:bf:34:01:03:73:ac:ec:f5:a8:af:31:8b:59:65: 3d:ff:7c:ee:6e:a1:a2:b8:8d:cc:76:38:72:c6:0b:13:f1:59: ff:49:00:4c:0b:80:0f:2f:1e:3d:68:13:35:83:0b:5e:9e:92: b7:47:d8:b3:bf:59:36:ad:bf:65:6f:19:2c:7a:96:3c:30:d6: 60:90:82:c1:a7:44:09:a7:10:95:e0:8a:44:eb:2e:16:ad:b5: 83:5f:8f:f7:93:54:f3:23:4c:79:87:36:f3:74:4b:49:92:f3: 23:be:ad:b6:b3:bf:04:a3:65:4d:d3:eb:41:a0:a1:b8:03:a2: 2b:40:b1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCI1N2hoSqyRapMEFD7wD/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwOTEwMDEwMDQ2WhcNMjYwOTExMDEwMDQ2WjAzMTEwLwYDVQQD EyhjOGRkOGZmMzliN2Q2ZWQyYmVmOTQ3MTk1YWIwYmVhYTM0MTNhNWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseBHamkO7hiMIOnHP0bgSJBRw731 E9rZ+NCjRXzSpcuMHZ7Zl+/w+/XP/m+z6DB8lihEOvddWSpmMn1rSrMni5gHE9RH ZIj6jqb1caqBtx/OPASCDInZdjFhv3Fyck5CGjurhc17fYUGUIDrlH7EKI47UJEs 9J21ORJXdoP6gC8hNtWK8JUB4ivALrynU1x/iiWLRbIyRt1xPZEciZsxoMlp3FQ9 q6Lkf7wX5ZxTF83yCaL1772vYEbDeC4vhv8xunsZwOKpQV4fBiqMNc+en+NRpe9O qgcEh7NJPKQM4aeY8hlaP7rx9WxXqhbqVlOYwRwkeRZqQYWFlHgxIRlcDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjdj/ObfW7SvvlHGVqwvqo0E6X1MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFaVKaJT KKTS3LHRakSdtN25nXDV9N09C4aJDUmEGeN/F2VzN0WDGRCw1h1TVOhp9IHknZCO Ne14+B0IKlZpJpzt0iPPv1h+4F+jv2eE14kuc6cNQ5VTDQNpCg3HKBjzp7UqsiQr MJ14wrMHcQOh98YWnvW4+2a1m6553bNIXWcqKb80AQNzrOz1qK8xi1llPf987m6h oriNzHY4csYLE/FZ/0kATAuADy8ePWgTNYMLXp6St0fYs79ZNq2/ZW8ZLHqWPDDW YJCCwadECacQleCKROsuFq21g1+P95NU8yNMeYc283RLSZLzI76ttrO/BKNlTdPr QaChuAOiK0CxrQ== -----END CERTIFICATE-----Generated at Thu Sep 10 12:01:23 2026 by rpki-client