$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: c0tHl68aZv0aW/KNlGgJMA2V1vLCDx72Th8creh8cj0= Subject key identifier: CF:2B:4D:0E:79:10:19:F1:D1:67:62:BF:AC:91:46:5F:2A:59:9D:99 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019CE47F0EEDEE0B37D1D64AB78C522D45AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1050 Signing time: Fri 13 Mar 2026 00:00:57 +0000 Manifest this update: Fri 13 Mar 2026 00:00:57 +0000 Manifest next update: Sat 14 Mar 2026 00:00:57 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 4: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 5: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: /HrYCfGcJmFnohkvuesHOBh7S1F9E4oGN4voraTGBok=) 7: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 8: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 9: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 10: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:7f:0e:ed:ee:0b:37:d1:d6:4a:b7:8c:52:2d:45:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Mar 13 00:00:57 2026 GMT Not After : Mar 14 00:00:57 2026 GMT Subject: CN=cf2b4d0e791019f1d16762bfac91465f2a599d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:fe:04:fc:dd:02:94:90:9e:ae:4b:ec:9d: e2:0f:47:d2:60:77:0c:35:a2:bf:24:1c:3d:91:b0: 53:c0:ff:c0:bd:11:d9:05:13:1e:9a:ec:04:ce:b3: 29:eb:19:78:b8:32:74:be:88:2f:4e:d1:3f:a1:a4: d0:24:a0:cb:3c:d9:14:74:83:cf:98:b4:b9:e8:2d: 83:53:01:8f:e1:70:3e:ea:d9:49:25:b6:79:15:15: 6c:2e:18:8f:34:3e:58:9e:00:90:1e:bb:0b:dc:c3: 8f:1c:e5:4f:91:6f:73:67:e3:1a:a3:dd:7e:86:80: e7:c7:58:30:b0:d9:87:69:72:5f:c1:2c:a3:e1:43: 5b:02:cb:78:60:9c:73:07:38:ec:c8:a8:0b:9d:57: 06:f2:23:6e:91:d5:0a:89:2d:67:fd:99:44:a5:c0: 7d:cb:2d:88:07:49:cf:a5:9a:c7:e7:c9:8b:b1:76: dd:c3:40:7e:37:db:52:6a:6e:c6:83:4b:ee:c5:71: bb:57:47:a1:68:ef:44:96:45:82:dc:ad:31:e0:b3: 05:ba:a9:b1:81:15:b9:cb:e7:5b:76:ab:af:f1:76: 46:a7:ac:c4:9b:4d:5e:65:b3:71:d7:a0:b4:5a:32: 91:e7:87:09:ef:a3:f3:cb:52:39:28:37:80:b8:b1: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:4D:0E:79:10:19:F1:D1:67:62:BF:AC:91:46:5F:2A:59:9D:99 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:99:9d:ec:4e:f2:39:f8:44:2c:03:e1:7f:36:f5:11:5a: 80:a2:c8:b2:c7:18:38:8c:cc:6e:e6:c9:3f:a3:d6:74:b7:6a: a6:a6:ca:4c:8a:10:d3:75:ab:71:7b:f6:99:21:b9:c9:4c:9a: 77:f0:60:8f:67:e6:93:8a:3d:6c:d9:f0:85:d3:5b:a6:cb:9b: 17:c8:72:ed:90:5c:f4:e0:0b:39:57:ca:54:a4:44:04:d2:75: be:70:8b:c7:ca:26:69:42:0b:fb:ba:c7:24:75:a5:a6:a7:44: b6:e8:4e:8e:ba:fb:53:8c:7a:55:29:21:47:cf:1e:ca:b4:14: a2:b2:8a:7e:66:92:b9:cf:68:f3:f3:e0:36:84:66:42:32:30: 3f:1c:49:fa:46:9a:63:16:00:ef:da:0d:68:34:ca:7e:0a:33: ff:a5:6d:f2:d9:1d:5a:ad:7d:78:70:e3:04:99:2f:9f:96:e9: 35:0e:38:65:e9:40:a5:0a:1c:59:cf:5a:60:55:87:2a:18:1b: 37:5f:f3:78:92:9e:12:6c:13:9a:81:0d:d6:7d:b4:ef:2b:da: 88:94:bf:01:4a:96:cd:89:e2:7e:28:dd:fb:2f:44:54:dc:07: 47:da:59:7f:39:35:65:fd:fa:21:49:60:6b:28:e7:7c:3e:bc: 16:f6:23:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkfw7t7gs30dZKt4xSLUWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMzEzMDAwMDU3WhcNMjYwMzE0MDAwMDU3WjAzMTEwLwYDVQQD EyhjZjJiNGQwZTc5MTAxOWYxZDE2NzYyYmZhYzkxNDY1ZjJhNTk5ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fz+BPzdApSQnq5L7J3iD0fSYHcM NaK/JBw9kbBTwP/AvRHZBRMemuwEzrMp6xl4uDJ0vogvTtE/oaTQJKDLPNkUdIPP mLS56C2DUwGP4XA+6tlJJbZ5FRVsLhiPND5YngCQHrsL3MOPHOVPkW9zZ+Mao91+ hoDnx1gwsNmHaXJfwSyj4UNbAst4YJxzBzjsyKgLnVcG8iNukdUKiS1n/ZlEpcB9 yy2IB0nPpZrH58mLsXbdw0B+N9tSam7Gg0vuxXG7V0ehaO9ElkWC3K0x4LMFuqmx gRW5y+dbdquv8XZGp6zEm01eZbNx16C0WjKR54cJ76Pzy1I5KDeAuLEZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8rTQ55EBnx0Wdiv6yRRl8qWZ2ZMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL92ZnexO 8jn4RCwD4X829RFagKLIsscYOIzMbubJP6PWdLdqpqbKTIoQ03WrcXv2mSG5yUya d/Bgj2fmk4o9bNnwhdNbpsubF8hy7ZBc9OALOVfKVKREBNJ1vnCLx8omaUIL+7rH JHWlpqdEtuhOjrr7U4x6VSkhR88eyrQUorKKfmaSuc9o8/PgNoRmQjIwPxxJ+kaa YxYA79oNaDTKfgoz/6Vt8tkdWq19eHDjBJkvn5bpNQ44ZelApQocWc9aYFWHKhgb N1/zeJKeEmwTmoEN1n207yvaiJS/AUqWzYnifijd+y9EVNwHR9pZfzk1Zf36IUlg ayjnfD68FvYjxw== -----END CERTIFICATE-----Generated at Fri Mar 13 09:08:24 2026 by rpki-client