$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: +YPoF4x8JZUXOZtnOfC0KVxqee6c4Jpd9vxCtWOP7yo= Subject key identifier: 44:35:6B:43:BE:50:E4:DA:73:BE:57:C6:E6:8D:CD:66:8B:0B:98:E5 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019DCD191E0176B91B37F090E90AD397F3E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 10CB Signing time: Mon 27 Apr 2026 04:01:08 +0000 Manifest this update: Mon 27 Apr 2026 04:01:08 +0000 Manifest next update: Tue 28 Apr 2026 04:01:08 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: ZodP2OgEV6Tcb8eizcTh60ow6rk.roa (hash: 2x8RsOXovbTACRckal+rSh/iwVBzDb5YrtolgSEcABM=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: UzkMY9YJ4Q1g3YpwHiSVZ/uILiIOKKfO4FET4Y0OFlM=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:19:1e:01:76:b9:1b:37:f0:90:e9:0a:d3:97:f3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Apr 27 04:01:08 2026 GMT Not After : Apr 28 04:01:08 2026 GMT Subject: CN=44356b43be50e4da73be57c6e68dcd668b0b98e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:b2:0b:5c:3a:88:04:6e:e5:d0:1a:3e:d0: e8:7e:72:ed:35:19:4b:36:b9:0b:06:ab:f5:0f:7c: ac:1d:2c:0a:95:7c:15:bc:1b:37:47:a7:c3:a7:07: d3:5a:aa:c2:82:dd:b7:73:c3:30:70:af:be:cc:b1: 95:b9:e3:13:30:99:b3:1c:f8:76:43:11:4a:d1:e5: 7d:7c:45:27:a9:cd:f9:4b:5f:f1:41:89:05:a3:77: 7f:0c:c6:13:65:0c:63:18:66:72:dc:2c:e3:24:3a: a0:af:52:05:a9:f0:dc:45:4a:d7:58:f3:b9:a2:29: 41:a1:c6:b3:62:bc:24:b0:56:ac:d5:fc:68:a1:08: 9b:a1:19:1a:2c:0f:d3:50:20:d8:19:36:bd:d3:c7: 0d:92:3f:b3:63:7c:77:75:80:12:4b:c1:34:0f:83: 47:06:61:5c:a1:28:3f:ae:f0:05:ee:6d:28:62:40: ad:93:22:b0:07:07:44:63:9d:9a:d0:d3:f8:7a:1b: 09:97:5b:61:9e:67:61:62:70:23:df:99:43:f4:dc: ee:fa:99:cd:35:bb:ef:e4:11:15:b4:c5:50:a0:03: 27:8f:06:7a:74:99:36:23:bb:9e:cf:4a:63:46:5e: 93:4a:e7:4f:9a:b3:9f:76:1f:b9:3a:7e:f0:1e:c2: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:35:6B:43:BE:50:E4:DA:73:BE:57:C6:E6:8D:CD:66:8B:0B:98:E5 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:61:8f:ac:bb:33:c4:ba:64:42:47:f3:be:ab:d1:85:68:1b: 32:eb:dc:94:77:25:34:8d:5b:fa:73:a0:bd:60:7f:16:41:c5: 05:80:6c:63:fa:98:ce:e6:98:54:f2:c0:84:1c:77:88:e7:a5: a2:17:e5:44:47:de:28:a2:8b:2d:2b:7b:b7:52:9b:0a:4c:38: 2f:26:c4:45:ec:4b:f7:d2:50:53:d8:c3:b2:e3:03:ea:f1:50: 3a:0f:a3:b2:a4:ad:c4:ee:dc:36:a7:65:03:11:2f:3c:65:9b: eb:b1:20:6e:7a:d1:14:3f:9e:c6:f1:9c:d3:a5:4f:f1:37:fe: be:ed:87:10:83:6d:22:fb:09:b9:11:6f:64:0b:1c:e0:58:4f: e2:6f:9e:57:ba:cd:6d:3e:f0:3b:2c:63:2a:f4:b3:19:b2:a5: 5d:df:5f:0e:d2:99:75:fa:ed:e0:7a:65:86:57:8f:a0:81:81: 62:a8:5d:2e:d1:24:26:df:2f:7c:24:6e:62:37:d4:88:a5:ea: 82:3e:35:76:32:1f:0b:f5:eb:02:2a:1f:6f:32:3f:4b:d1:b7: 13:73:00:1e:dc:2d:da:17:04:51:9d:0c:d4:82:8d:51:81:36: 62:d8:40:63:86:73:51:6e:f0:4a:c1:20:17:7f:be:84:5b:4d: 62:3f:3d:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NGR4BdrkbN/CQ6QrTl/PiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNDI3MDQwMTA4WhcNMjYwNDI4MDQwMTA4WjAzMTEwLwYDVQQD Eyg0NDM1NmI0M2JlNTBlNGRhNzNiZTU3YzZlNjhkY2Q2NjhiMGI5OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjKyC1w6iARu5dAaPtDofnLtNRlL NrkLBqv1D3ysHSwKlXwVvBs3R6fDpwfTWqrCgt23c8MwcK++zLGVueMTMJmzHPh2 QxFK0eV9fEUnqc35S1/xQYkFo3d/DMYTZQxjGGZy3CzjJDqgr1IFqfDcRUrXWPO5 oilBocazYrwksFas1fxooQiboRkaLA/TUCDYGTa908cNkj+zY3x3dYASS8E0D4NH BmFcoSg/rvAF7m0oYkCtkyKwBwdEY52a0NP4ehsJl1thnmdhYnAj35lD9Nzu+pnN Nbvv5BEVtMVQoAMnjwZ6dJk2I7uez0pjRl6TSudPmrOfdh+5On7wHsL6QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ1a0O+UOTac75XxuaNzWaLC5jlMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2GPrLsz xLpkQkfzvqvRhWgbMuvclHclNI1b+nOgvWB/FkHFBYBsY/qYzuaYVPLAhBx3iOel ohflREfeKKKLLSt7t1KbCkw4LybERexL99JQU9jDsuMD6vFQOg+jsqStxO7cNqdl AxEvPGWb67EgbnrRFD+exvGc06VP8Tf+vu2HEINtIvsJuRFvZAsc4FhP4m+eV7rN bT7wOyxjKvSzGbKlXd9fDtKZdfrt4HplhlePoIGBYqhdLtEkJt8vfCRuYjfUiKXq gj41djIfC/XrAiofbzI/S9G3E3MAHtwt2hcEUZ0M1IKNUYE2YthAY4ZzUW7wSsEg F3++hFtNYj89iQ== -----END CERTIFICATE-----Generated at Mon Apr 27 14:00:14 2026 by rpki-client