$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: L7QLzv2HBXdIJDNRN9h3wApuUnf8qvKtd9f7jAg23T4= Subject key identifier: A0:90:51:DE:E4:A6:06:1B:49:69:F1:23:18:88:8E:29:A4:98:C9:6B Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019EB6C4EC7878B1405180F2BF6323EBC55B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 1144 Signing time: Thu 11 Jun 2026 13:00:19 +0000 Manifest this update: Thu 11 Jun 2026 13:00:19 +0000 Manifest next update: Fri 12 Jun 2026 13:00:19 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: ZodP2OgEV6Tcb8eizcTh60ow6rk.roa (hash: 2x8RsOXovbTACRckal+rSh/iwVBzDb5YrtolgSEcABM=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: 6buIiUhFeoRKlaT0WMIuPUeQdBcHkn4+dJRohKmeCMc=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:c4:ec:78:78:b1:40:51:80:f2:bf:63:23:eb:c5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jun 11 13:00:19 2026 GMT Not After : Jun 12 13:00:19 2026 GMT Subject: CN=a09051dee4a6061b4969f12318888e29a498c96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:9a:cd:52:24:33:d5:4b:c0:c9:c9:79:e8: 5d:b2:1a:dd:2f:4b:fc:e1:d4:db:7e:74:7e:a5:25: 49:d3:5c:6e:c7:02:62:6c:48:73:f9:fe:b5:47:39: 26:36:b6:24:77:ad:28:14:d0:a1:0b:50:9b:e9:a8: dd:8c:1b:2d:55:90:4c:69:b0:5f:55:93:3d:ef:5a: e8:02:ad:8d:e1:7e:95:ba:89:b2:4c:68:cd:bd:c3: 38:26:cc:af:79:57:4b:2b:2e:f9:7d:67:6c:e9:86: 37:03:36:0a:bc:43:3f:93:dc:7f:55:54:bd:61:1d: 28:33:6b:cf:24:55:61:12:a1:da:4a:33:d2:5a:4f: 74:18:af:83:db:6b:27:ae:bc:27:80:4e:8f:c7:eb: d2:63:15:d0:5e:23:86:51:89:66:b1:87:c5:27:58: 72:7f:ba:e8:06:7d:de:77:28:86:df:15:c8:f9:9c: 3f:a4:71:63:16:f3:69:c6:d8:4f:7a:64:77:29:c5: fd:b6:91:3c:00:49:3b:fa:da:90:90:ea:8c:07:a8: 81:94:2c:5f:80:bf:a2:2b:e4:93:09:7d:60:b2:9e: 17:ee:b1:dc:cc:cc:b1:83:92:8a:e1:d8:46:7a:96: c1:3b:db:49:7a:e0:79:3c:16:68:c4:f3:3b:c9:97: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:90:51:DE:E4:A6:06:1B:49:69:F1:23:18:88:8E:29:A4:98:C9:6B X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:39:30:c7:4a:f5:6a:87:92:c2:f2:77:22:7e:10:ee:84:92: b4:2f:92:3a:c0:7f:59:02:52:9f:cf:6f:ff:0f:eb:50:88:41: dd:a8:d8:48:7d:fc:87:04:f5:af:f5:14:22:4c:e1:17:08:b9: e0:22:72:e4:b2:6e:17:c5:63:80:58:8f:38:06:6d:f1:40:ac: c4:36:5c:8e:91:a5:32:bf:21:ca:4a:88:e0:63:f2:83:14:4f: 1e:55:f0:50:b3:02:44:2e:43:9b:67:fb:38:98:90:b1:e0:4d: 02:cd:34:17:01:6c:d6:e3:ed:3a:cd:66:de:02:9f:7a:03:5c: 1d:c4:f5:3c:8f:63:fd:d5:45:1e:c5:2f:6a:79:52:83:0d:c0: 38:fe:2e:57:95:17:46:9a:97:99:e6:10:3a:fa:77:1d:dd:47: 9b:18:5d:20:86:8b:86:39:e9:8b:19:28:a5:33:d6:d4:ba:65: 46:ce:da:65:fe:93:3b:e0:a0:bb:83:90:0b:2d:88:bd:46:e1: 6f:4a:19:7a:24:2b:38:90:8e:b8:f4:1e:a1:1d:74:1e:2f:7b: b4:05:68:2e:09:c2:e2:98:cd:d8:4d:2c:18:01:2e:c2:3e:5c: ca:51:3c:7a:11:26:2d:d5:32:15:4e:ec:f2:61:af:b3:f8:c8: eb:76:58:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62xOx4eLFAUYDyv2Mj68VbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNjExMTMwMDE5WhcNMjYwNjEyMTMwMDE5WjAzMTEwLwYDVQQD EyhhMDkwNTFkZWU0YTYwNjFiNDk2OWYxMjMxODg4OGUyOWE0OThjOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGKazVIkM9VLwMnJeehdshrdL0v8 4dTbfnR+pSVJ01xuxwJibEhz+f61RzkmNrYkd60oFNChC1Cb6ajdjBstVZBMabBf VZM971roAq2N4X6VuomyTGjNvcM4JsyveVdLKy75fWds6YY3AzYKvEM/k9x/VVS9 YR0oM2vPJFVhEqHaSjPSWk90GK+D22snrrwngE6Px+vSYxXQXiOGUYlmsYfFJ1hy f7roBn3edyiG3xXI+Zw/pHFjFvNpxthPemR3KcX9tpE8AEk7+tqQkOqMB6iBlCxf gL+iK+STCX1gsp4X7rHczMyxg5KK4dhGepbBO9tJeuB5PBZoxPM7yZfuTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCQUd7kpgYbSWnxIxiIjimkmMlrMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDkwx0r1 aoeSwvJ3In4Q7oSStC+SOsB/WQJSn89v/w/rUIhB3ajYSH38hwT1r/UUIkzhFwi5 4CJy5LJuF8VjgFiPOAZt8UCsxDZcjpGlMr8hykqI4GPygxRPHlXwULMCRC5Dm2f7 OJiQseBNAs00FwFs1uPtOs1m3gKfegNcHcT1PI9j/dVFHsUvanlSgw3AOP4uV5UX RpqXmeYQOvp3Hd1HmxhdIIaLhjnpixkopTPW1LplRs7aZf6TO+Cgu4OQCy2IvUbh b0oZeiQrOJCOuPQeoR10Hi97tAVoLgnC4pjN2E0sGAEuwj5cylE8ehEmLdUyFU7s 8mGvs/jI63ZYmQ== -----END CERTIFICATE-----Generated at Thu Jun 11 23:14:54 2026 by rpki-client