$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 12ObwKPSXK5PJRgOngSnDTJ4+51Md4yL//G2KM/gvwo= Subject key identifier: 40:2B:57:FF:A1:41:94:4F:EE:CB:37:44:09:26:F3:F4:1B:B9:DD:B8 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A17996C5BE56BBB64EDA06AC36D6E6D598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 12B8 Signing time: Mon 26 Oct 2026 19:01:26 +0000 Manifest this update: Mon 26 Oct 2026 19:01:26 +0000 Manifest next update: Tue 27 Oct 2026 19:01:26 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 4: YvN3c5C0gSI56HIngcHs4vkpuog.roa (hash: ubAaTn/otWbgsyxFV8W1AJNCfa/GAwIx9VFNuKh67dU=) 5: _LICBjJZdcnVtv4XOgCo4SqTpuE.roa (hash: MGwX7NVampx3U/zgpZqPkbMuAGSccNzFT7L47j8N1WU=) 6: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 7: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 8: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 9: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: jLbM0LQoBnuZOnK8w1ntc7WrdQD2sa8xArrswwDHO8g=) 10: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 11: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 12: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 13: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:96:c5:be:56:bb:b6:4e:da:06:ac:36:d6:e6:d5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Oct 26 19:01:26 2026 GMT Not After : Oct 27 19:01:26 2026 GMT Subject: CN=402b57ffa141944feecb37440926f3f41bb9ddb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:b4:76:5b:b8:4f:e1:f0:e6:99:ba:08:de: 80:55:8f:a8:19:d5:eb:03:2b:0d:d2:ef:c8:86:8d: 38:c1:6e:69:98:b7:b4:2c:8d:c5:15:ed:60:29:15: f9:c0:cd:0e:f5:fa:84:68:ea:7a:06:50:0d:c2:0c: 73:25:4e:3c:e2:b0:f8:f6:10:9a:64:68:b8:57:43: fa:f6:63:6a:2b:d1:f4:57:09:8c:15:32:bc:71:11: cb:77:0d:69:e6:85:96:d8:15:57:a7:b1:9c:b3:d5: b0:f8:a6:b5:80:3e:53:7a:64:7e:5a:1f:19:2b:6b: a5:c4:7a:3c:be:a5:33:83:5e:53:ce:67:05:9a:b7: 69:31:8d:f7:9d:56:72:db:91:9f:db:4a:47:a0:5c: 3f:96:63:d2:bc:f7:69:0f:65:43:70:b3:9f:b4:89: fc:68:c9:90:25:e6:eb:e2:f0:f1:6e:22:50:7f:6a: a0:d0:b5:72:b7:53:5c:1f:23:67:9b:f6:c1:df:c3: 26:79:61:97:29:63:7a:98:09:85:39:e6:4e:b7:67: a9:b8:01:5b:a5:ff:0d:6c:45:91:da:58:14:72:e0: b7:ce:a9:d3:fb:bd:13:27:2a:b3:fb:9d:28:da:cb: af:56:08:90:92:a5:88:cf:73:d6:af:a1:45:6d:0a: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:57:FF:A1:41:94:4F:EE:CB:37:44:09:26:F3:F4:1B:B9:DD:B8 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:6c:53:1b:19:70:2c:46:b9:8b:43:ab:aa:5d:93:54:f4: 4e:7a:bf:d7:37:11:80:cd:a9:f5:42:55:ea:4d:bb:de:31:32: 72:f5:a2:6d:bd:87:55:35:e7:c3:4e:b0:52:b3:26:16:ab:8c: 40:8a:df:76:29:25:e2:fb:ca:cb:e1:f9:1e:50:b6:93:de:16: 11:fa:aa:07:7c:2c:a1:5a:03:7f:df:9c:93:d6:3a:5c:8e:5c: f4:2a:62:9a:59:98:9c:1d:69:48:2d:9b:78:62:42:0c:6c:0e: fd:bd:4a:8c:ab:76:d5:43:97:de:ba:4e:d9:11:48:8b:bd:88: 22:34:b8:15:cd:0e:5c:4f:60:b6:5f:37:bb:b7:91:90:74:ea: e2:97:6d:fc:29:66:bb:40:ad:d9:44:15:c5:3a:2c:58:b0:69: f0:a7:aa:83:de:84:f2:d9:a5:83:e3:0d:a8:77:30:fc:4b:74: 2f:62:8c:d0:37:b4:03:94:6a:cb:4d:1e:08:95:01:5f:24:4a: ce:1f:e0:2a:6f:e5:6f:46:1c:4d:c0:c7:48:dd:96:b6:7b:96: a0:90:43:fd:58:30:04:6f:a8:72:19:c4:af:f8:53:dd:0a:e6: 75:41:fc:19:8a:e0:d7:d0:44:a3:fc:c0:06:65:d6:ec:0f:1a: f0:6c:5b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5lsW+Vru2TtoGrDbW5tWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYxMDI2MTkwMTI2WhcNMjYxMDI3MTkwMTI2WjAzMTEwLwYDVQQD Eyg0MDJiNTdmZmExNDE5NDRmZWVjYjM3NDQwOTI2ZjNmNDFiYjlkZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviu0dlu4T+Hw5pm6CN6AVY+oGdXr AysN0u/Iho04wW5pmLe0LI3FFe1gKRX5wM0O9fqEaOp6BlANwgxzJU484rD49hCa ZGi4V0P69mNqK9H0VwmMFTK8cRHLdw1p5oWW2BVXp7Gcs9Ww+Ka1gD5TemR+Wh8Z K2ulxHo8vqUzg15TzmcFmrdpMY33nVZy25Gf20pHoFw/lmPSvPdpD2VDcLOftIn8 aMmQJebr4vDxbiJQf2qg0LVyt1NcHyNnm/bB38MmeWGXKWN6mAmFOeZOt2epuAFb pf8NbEWR2lgUcuC3zqnT+70TJyqz+50o2suvVgiQkqWIz3PWr6FFbQqOpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEArV/+hQZRP7ss3RAkm8/Qbud24MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDlsUxsZ cCxGuYtDq6pdk1T0Tnq/1zcRgM2p9UJV6k273jEycvWibb2HVTXnw06wUrMmFquM QIrfdikl4vvKy+H5HlC2k94WEfqqB3wsoVoDf9+ck9Y6XI5c9CpimlmYnB1pSC2b eGJCDGwO/b1KjKt21UOX3rpO2RFIi72IIjS4Fc0OXE9gtl83u7eRkHTq4pdt/Clm u0Ct2UQVxTosWLBp8Keqg96E8tmlg+MNqHcw/Et0L2KM0De0A5Rqy00eCJUBXyRK zh/gKm/lb0YcTcDHSN2WtnuWoJBD/VgwBG+ochnEr/hT3QrmdUH8GYrg19BEo/zA BmXW7A8a8Gxb8g== -----END CERTIFICATE-----Generated at Mon Oct 26 23:53:35 2026 by rpki-client