$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 0vaR+eXE8rsynooFkhr2SpukGCr+e/xyt04sOl6g120= Subject key identifier: 20:B9:BF:6C:4F:4E:DC:39:13:01:67:0E:B9:DA:D6:B9:33:2D:76:01 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A17B8516115DF7AECFB7BA0C5BE7C83686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 12B9 Signing time: Tue 27 Oct 2026 04:01:21 +0000 Manifest this update: Tue 27 Oct 2026 04:01:21 +0000 Manifest next update: Wed 28 Oct 2026 04:01:21 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 4: YvN3c5C0gSI56HIngcHs4vkpuog.roa (hash: ubAaTn/otWbgsyxFV8W1AJNCfa/GAwIx9VFNuKh67dU=) 5: _LICBjJZdcnVtv4XOgCo4SqTpuE.roa (hash: MGwX7NVampx3U/zgpZqPkbMuAGSccNzFT7L47j8N1WU=) 6: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 7: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 8: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 9: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: Nk5v47tMWM+uiMpqb7uLfLeGFXmzOLo4qCAV/z/FEAs=) 10: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 11: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 12: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 13: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:85:16:11:5d:f7:ae:cf:b7:ba:0c:5b:e7:c8:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Oct 27 04:01:21 2026 GMT Not After : Oct 28 04:01:21 2026 GMT Subject: CN=20b9bf6c4f4edc391301670eb9dad6b9332d7601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:84:be:57:c3:f6:2d:a6:92:e9:63:0a:66: b8:04:5f:8d:f8:b5:bf:61:33:dd:c6:cf:9a:35:7f: c2:9b:82:9b:6b:0a:3d:5a:17:7f:30:06:a8:48:14: cd:e9:88:db:24:ef:c6:18:7e:00:19:3a:a7:e1:ef: d8:7c:e5:84:87:10:a2:4e:4b:8f:9c:69:7c:11:30: ec:58:0b:d5:3c:b5:7f:9f:99:f3:b4:17:77:cd:9e: 57:0d:0d:9b:ec:0c:75:e2:1b:0a:e2:76:dd:dd:b0: 2f:6c:e3:b7:40:92:f1:53:a0:3f:aa:0a:e3:40:8b: e3:db:a9:f4:45:24:fd:2f:6c:64:03:c8:be:92:af: a3:0a:a7:0a:44:fc:35:95:f0:8e:38:2a:ef:11:f4: 0b:03:fb:dd:86:af:09:72:6e:6e:d6:e0:91:e4:69: f6:4e:e9:7c:2c:af:89:38:e2:d6:42:c7:a9:c5:b7: 1c:ae:6a:60:80:57:eb:cb:97:ff:5c:63:ae:3e:d9: 39:cf:59:68:23:e3:6b:a6:54:3b:21:b5:fa:dc:d5: 22:92:3e:d4:bd:34:d2:16:73:1b:37:55:8d:1c:be: 17:eb:f7:c8:18:8f:0b:d9:30:6b:a0:3a:9a:a3:60: 9f:4a:bc:5a:54:e0:64:fa:8e:9b:c6:ce:9d:a7:7a: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B9:BF:6C:4F:4E:DC:39:13:01:67:0E:B9:DA:D6:B9:33:2D:76:01 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5e:ef:9e:bd:53:b7:86:73:f1:ea:33:3d:0f:1d:a7:dd:51: 93:51:66:6a:22:06:75:e1:18:d7:84:8c:97:68:ce:6a:6b:95: 94:5a:bd:a0:30:9b:2e:a0:40:af:d0:dd:5d:e5:ea:fe:f4:e3: cd:7f:1d:b8:ac:44:ee:a9:ab:b3:12:b8:5e:cc:7c:3b:52:b3: fc:c1:fe:16:28:6a:49:d9:b0:93:ea:1b:bc:e5:d1:cf:9f:8e: 1f:c3:1c:1c:92:cc:92:b5:52:64:f6:21:a9:e5:9a:5b:a0:8e: 14:49:2d:24:38:1b:03:6c:30:a7:ae:d7:f9:db:95:7e:34:fb: 5d:6c:34:60:c3:b6:d6:5c:12:7c:a2:b2:8b:a0:9a:7d:05:01: 0f:07:c2:9e:7e:a0:aa:32:e7:30:f4:69:31:57:c0:36:91:c2: 71:f6:b1:a1:cd:dc:07:43:fe:b4:54:05:cc:ee:89:64:c2:66: 7d:09:ea:29:82:f6:70:3b:d5:d7:b2:ee:2d:d4:75:15:88:5c: 15:3f:0e:3d:d3:f6:35:7f:2f:42:c8:12:09:9c:45:89:e9:48: 0f:2c:25:ee:04:42:c7:6b:cd:b7:c5:ad:a5:8b:9c:f8:03:c0: 5f:1b:10:2e:fe:ba:d4:71:91:8b:e7:e4:bd:07:0e:3f:43:ca: 73:da:94:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF7hRYRXfeuz7e6DFvnyDaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYxMDI3MDQwMTIxWhcNMjYxMDI4MDQwMTIxWjAzMTEwLwYDVQQD EygyMGI5YmY2YzRmNGVkYzM5MTMwMTY3MGViOWRhZDZiOTMzMmQ3NjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69qEvlfD9i2mkuljCma4BF+N+LW/ YTPdxs+aNX/Cm4Kbawo9Whd/MAaoSBTN6YjbJO/GGH4AGTqn4e/YfOWEhxCiTkuP nGl8ETDsWAvVPLV/n5nztBd3zZ5XDQ2b7Ax14hsK4nbd3bAvbOO3QJLxU6A/qgrj QIvj26n0RST9L2xkA8i+kq+jCqcKRPw1lfCOOCrvEfQLA/vdhq8Jcm5u1uCR5Gn2 Tul8LK+JOOLWQsepxbccrmpggFfry5f/XGOuPtk5z1loI+NrplQ7IbX63NUikj7U vTTSFnMbN1WNHL4X6/fIGI8L2TBroDqao2CfSrxaVOBk+o6bxs6dp3pIlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC5v2xPTtw5EwFnDrna1rkzLXYBMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF7vnr1T t4Zz8eozPQ8dp91Rk1FmaiIGdeEY14SMl2jOamuVlFq9oDCbLqBAr9DdXeXq/vTj zX8duKxE7qmrsxK4Xsx8O1Kz/MH+FihqSdmwk+obvOXRz5+OH8McHJLMkrVSZPYh qeWaW6COFEktJDgbA2wwp67X+duVfjT7XWw0YMO21lwSfKKyi6CafQUBDwfCnn6g qjLnMPRpMVfANpHCcfaxoc3cB0P+tFQFzO6JZMJmfQnqKYL2cDvV17LuLdR1FYhc FT8OPdP2NX8vQsgSCZxFielIDywl7gRCx2vNt8WtpYuc+APAXxsQLv661HGRi+fk vQcOP0PKc9qUHw== -----END CERTIFICATE-----Generated at Tue Oct 27 08:27:12 2026 by rpki-client