
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier: 7/MljGuF1mjEwFELTR+vh/pyvJpxzpScY/jEod1VGnM=
Subject key identifier: 55:8B:1E:91:3F:49:18:B7:E8:5E:8E:D8:A1:DE:AA:A8:34:D5:81:3F
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019EAE9D8263FD28BC269FECD66F07EA1C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number: 195C
Signing time: Tue 09 Jun 2026 23:00:18 +0000
Manifest this update: Tue 09 Jun 2026 23:00:18 +0000
Manifest next update: Wed 10 Jun 2026 23:00:18 +0000
Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=)
2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=)
3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=)
4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=)
5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: TMz+E9ACa9jPEGoe78Nn5AEcpQcyy/d9ecyo68UbVXs=)
6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=)
7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=)
8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=)
9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=)
10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=)
11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=)
12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=)
13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=)
14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=)
15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=)
16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=)
17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=)
18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=)
19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=)
20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=)
21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=)
22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=)
23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=)
24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:9d:82:63:fd:28:bc:26:9f:ec:d6:6f:07:ea:1c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jun 9 23:00:18 2026 GMT
Not After : Jun 10 23:00:18 2026 GMT
Subject: CN=558b1e913f4918b7e85e8ed8a1deaaa834d5813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:d1:ca:15:c3:94:0b:1e:7b:2d:5e:03:63:
c0:62:57:cb:25:6f:f1:cc:f9:85:68:6d:b0:dd:dc:
63:9b:22:76:98:74:da:61:7c:a7:da:40:e4:1a:b3:
14:43:eb:97:24:69:70:ce:68:94:c0:3a:5b:e6:30:
1d:1e:3c:7f:8b:72:3b:dd:77:da:ba:65:07:bb:99:
52:8e:f8:01:40:80:44:c1:52:bc:c8:23:6c:91:6a:
17:71:45:43:e5:9a:ec:cd:50:cd:59:ba:ae:e2:ab:
82:66:1b:c3:b4:52:84:18:0e:2d:85:41:03:50:96:
2f:90:f9:9d:c5:b2:6f:7d:0a:4d:ed:18:26:8f:66:
c6:64:92:46:8e:24:bb:cb:7d:85:83:f2:4d:33:fd:
53:f8:a9:bd:5c:28:da:ee:ca:1f:b9:c5:3a:9f:44:
f7:fc:25:2b:c9:15:ed:fb:c0:54:6e:db:77:c0:74:
07:c0:02:21:c4:3c:1d:f1:35:3b:bb:62:ff:2e:f3:
e4:16:0a:60:2f:9e:4f:2c:c0:14:77:f7:95:76:4b:
f4:8e:27:75:91:34:72:c7:13:25:77:6f:66:32:c6:
55:b3:62:06:6e:24:93:e3:52:19:04:62:4c:92:86:
bf:39:6b:3f:6f:6b:4e:25:b9:f8:a7:01:03:3a:df:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:1E:91:3F:49:18:B7:E8:5E:8E:D8:A1:DE:AA:A8:34:D5:81:3F
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8b:0d:8f:25:9c:d5:a5:ba:7e:8d:19:0a:76:de:3e:f4:90:
1f:d7:ff:8f:7a:07:98:05:62:6c:13:6c:89:23:75:64:5c:b7:
a0:a6:61:29:cb:b6:78:1b:46:82:f6:29:a9:31:bd:0d:00:d4:
6a:59:91:90:1a:7c:b4:07:26:79:4f:2c:27:06:14:17:34:35:
ac:e1:da:fd:8a:df:46:22:3a:16:9e:46:ef:d7:61:fc:34:9f:
2f:75:53:25:3b:80:33:c7:67:7e:34:e2:c0:ea:2e:26:e1:4f:
e6:33:5a:ab:df:ba:5f:c3:0c:db:02:29:d0:ca:2e:c1:34:a1:
7b:c0:bc:1f:c9:32:f9:57:00:a6:01:85:5a:a3:d0:8d:45:1a:
27:2d:3e:e0:94:0d:95:bd:93:51:29:35:76:4e:93:d8:f7:58:
3d:f6:74:b5:9f:d6:1c:17:e4:6d:2f:b4:62:af:51:93:c6:18:
3a:c9:e9:63:ce:36:53:5b:fe:0b:80:c6:e4:29:5d:93:1e:2f:
b6:35:15:27:1f:ee:b3:08:8c:b0:a5:ab:b5:f6:f7:8c:d0:f6:
7f:2c:91:a0:df:0c:67:b4:75:78:32:dc:a1:a4:0e:59:8f:aa:
80:5d:95:f3:31:a6:e5:73:26:32:3f:f7:a2:eb:5f:5e:ab:5c:
b4:e7:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:46:54 2026 by rpki-client