$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: v+cJ9Fdx38HFfVllGmyIR16CS9Eaj6mJeXayN8p+sQo= Subject key identifier: B1:5E:A2:A6:AC:9F:8E:16:2B:06:6D:F7:BA:D5:EA:4B:34:80:51:70 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019DCF07E6C9FFAE1AA31E93AB334CBC982B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 10CC Signing time: Mon 27 Apr 2026 13:01:34 +0000 Manifest this update: Mon 27 Apr 2026 13:01:34 +0000 Manifest next update: Tue 28 Apr 2026 13:01:34 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: ZodP2OgEV6Tcb8eizcTh60ow6rk.roa (hash: 2x8RsOXovbTACRckal+rSh/iwVBzDb5YrtolgSEcABM=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: opM5W4xeb46n9iA2ycZzvNdX2a8pwCABGxaSFgWJ5rg=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:e6:c9:ff:ae:1a:a3:1e:93:ab:33:4c:bc:98:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Apr 27 13:01:34 2026 GMT Not After : Apr 28 13:01:34 2026 GMT Subject: CN=b15ea2a6ac9f8e162b066df7bad5ea4b34805170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:68:fc:cf:80:af:70:55:50:e3:08:f4:67: 7c:76:db:0c:9b:0c:52:ba:a5:84:f3:40:10:6f:cd: 7b:2d:83:a1:2d:29:d6:8e:fc:f8:24:04:78:19:cc: 3e:50:ae:8a:85:45:7a:82:58:f8:e9:23:a7:58:82: c3:bb:08:75:fb:44:1f:ab:33:89:7b:a0:70:3a:b3: 8d:1b:d9:ac:a4:95:48:86:77:78:fc:28:63:3c:b8: 1b:b7:ca:a4:d3:d7:75:77:14:9f:78:f5:cd:c4:29: 53:77:2b:a1:a2:19:de:fc:5d:e8:0d:bf:e4:6a:4f: ad:f1:0b:16:97:64:fa:61:64:df:02:24:e5:60:38: d1:21:0f:58:de:4c:6e:89:fa:1f:fd:c0:ca:68:75: 7e:76:51:ac:61:6a:70:3d:48:4c:50:39:06:e7:da: 47:bf:b8:17:d7:aa:cc:4f:64:96:a6:de:ba:06:ba: 2e:7b:b1:92:20:55:f6:18:f4:53:aa:6f:78:7d:61: 55:fd:aa:d4:2c:95:2a:45:0e:d7:92:f1:8b:5d:ef: 5d:f0:8c:a6:d7:9e:f3:ee:71:e5:60:5e:23:6a:01: 9c:e1:c7:cc:e6:84:9e:9c:4b:d7:96:33:cf:20:7a: 63:5c:e8:e5:0b:8b:c2:f6:6b:d2:32:4d:e3:d3:0d: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5E:A2:A6:AC:9F:8E:16:2B:06:6D:F7:BA:D5:EA:4B:34:80:51:70 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ed:5b:b1:de:ff:e5:e2:bd:89:1f:b9:22:0f:37:b8:0b:24: 5e:12:e0:9a:fe:d8:f1:40:0f:60:70:97:fd:78:02:f2:1b:27: 04:33:77:57:81:c6:b5:62:3a:d8:ad:88:ef:4f:99:5d:ff:6c: 3f:07:5c:ff:3e:c3:e2:75:f5:b7:be:5d:ef:2e:69:23:63:d7: 5b:8e:f7:58:ea:e8:9b:30:90:83:4a:d9:ff:19:2c:98:4e:5e: c8:4a:51:2b:2d:7b:e3:50:3b:4a:53:e3:66:d6:be:8b:39:3e: ab:ac:b4:c8:b6:bf:fb:9e:70:45:ab:c6:a0:0b:97:7f:34:b7: a2:d5:74:0f:90:41:3b:f8:20:c1:7f:34:49:60:05:66:56:f8: 7c:0d:4f:45:ee:9f:9c:92:91:52:d0:fb:78:ef:a8:81:84:bd: 29:2d:87:fd:79:81:68:e3:ef:5e:86:d4:12:60:1f:ec:53:dd: 1d:1e:c6:d6:08:13:e7:82:f8:49:d6:fe:77:e4:b3:e2:7a:c1: 82:c8:7c:a0:17:86:8c:45:a6:50:d3:c1:ee:0d:c8:5a:0f:08: f0:0e:7a:83:2d:b7:56:3c:49:ad:8a:bf:ad:cf:ba:03:ac:06: bf:fe:1c:96:a8:ca:60:97:7f:be:bd:ed:52:5d:b2:70:31:69: 54:85:f1:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PB+bJ/64aox6TqzNMvJgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNDI3MTMwMTM0WhcNMjYwNDI4MTMwMTM0WjAzMTEwLwYDVQQD EyhiMTVlYTJhNmFjOWY4ZTE2MmIwNjZkZjdiYWQ1ZWE0YjM0ODA1MTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXpo/M+Ar3BVUOMI9Gd8dtsMmwxS uqWE80AQb817LYOhLSnWjvz4JAR4Gcw+UK6KhUV6glj46SOnWILDuwh1+0QfqzOJ e6BwOrONG9mspJVIhnd4/ChjPLgbt8qk09d1dxSfePXNxClTdyuhohne/F3oDb/k ak+t8QsWl2T6YWTfAiTlYDjRIQ9Y3kxuifof/cDKaHV+dlGsYWpwPUhMUDkG59pH v7gX16rMT2SWpt66Broue7GSIFX2GPRTqm94fWFV/arULJUqRQ7XkvGLXe9d8Iym 157z7nHlYF4jagGc4cfM5oSenEvXljPPIHpjXOjlC4vC9mvSMk3j0w1TpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFeoqasn44WKwZt97rV6ks0gFFwMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGe1bsd7/ 5eK9iR+5Ig83uAskXhLgmv7Y8UAPYHCX/XgC8hsnBDN3V4HGtWI62K2I70+ZXf9s Pwdc/z7D4nX1t75d7y5pI2PXW473WOromzCQg0rZ/xksmE5eyEpRKy1741A7SlPj Zta+izk+q6y0yLa/+55wRavGoAuXfzS3otV0D5BBO/ggwX80SWAFZlb4fA1PRe6f nJKRUtD7eO+ogYS9KS2H/XmBaOPvXobUEmAf7FPdHR7G1ggT54L4Sdb+d+Sz4nrB gsh8oBeGjEWmUNPB7g3IWg8I8A56gy23VjxJrYq/rc+6A6wGv/4clqjKYJd/vr3t Ul2ycDFpVIXxqQ== -----END CERTIFICATE-----Generated at Mon Apr 27 14:37:35 2026 by rpki-client