$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: ZEh2aiiLjDckSnLIXkulZTgD/kY7dS8ty3D130wlFFo= Subject key identifier: D2:3A:B3:F8:FB:79:04:7C:32:DB:A9:98:7F:F7:FB:59:B3:0C:0F:33 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019DA41CF2F0C5B4DEDEB5A8F4D8157B03BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 18D2 Signing time: Sun 19 Apr 2026 05:00:53 +0000 Manifest this update: Sun 19 Apr 2026 05:00:53 +0000 Manifest next update: Mon 20 Apr 2026 05:00:53 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 0duqeGndfU3ZKoKZOEAq5hZ1IRnNF8f8td8DSORipW0=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:1c:f2:f0:c5:b4:de:de:b5:a8:f4:d8:15:7b:03:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Apr 19 05:00:53 2026 GMT Not After : Apr 20 05:00:53 2026 GMT Subject: CN=d23ab3f8fb79047c32dba9987ff7fb59b30c0f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:0c:b1:19:61:18:90:e4:7e:47:9a:e3:14: be:ad:b3:16:61:c9:b2:82:ea:89:ee:59:9d:bb:8a: 72:c6:0e:78:97:da:13:f6:53:61:12:36:0a:eb:f1: 7f:36:60:de:d4:85:70:d1:01:1a:a2:68:44:8b:50: 30:a7:19:ed:a7:89:7d:8d:57:40:fd:be:63:07:4f: a9:7a:54:57:e8:06:d0:2a:f4:44:2a:c4:c3:92:e6: 8c:57:10:33:18:4a:8e:69:67:6f:30:39:6d:49:34: f5:9f:3c:b0:79:bb:bc:3c:18:04:75:6c:db:12:37: db:fb:7a:30:c6:04:83:db:7f:2d:5e:48:ae:a9:66: b9:e6:4c:05:92:35:26:29:e6:d3:08:2a:aa:3e:78: b7:e8:97:49:f6:0c:28:67:57:6a:2e:76:df:ab:d1: 5d:ad:42:92:a3:15:6a:eb:63:11:95:38:a0:94:37: bc:80:6b:75:2f:d5:fc:ea:4b:9b:76:55:02:bf:dc: 9c:19:a1:20:34:b8:60:1a:73:7a:d2:c4:1a:c7:42: f1:d3:92:fe:00:1f:90:71:6f:88:50:90:26:54:be: 78:64:3f:9a:c9:8a:22:5e:bf:22:c8:72:45:1a:d6: d4:b0:43:54:94:eb:b6:b9:7d:62:a0:f2:2c:11:0f: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:B3:F8:FB:79:04:7C:32:DB:A9:98:7F:F7:FB:59:B3:0C:0F:33 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:60:a2:01:2a:ce:8f:dd:86:c3:c3:9c:b3:e2:11:a2:f6:1d: 13:8b:3a:92:95:77:90:68:7e:1c:ec:bd:8f:4e:be:a2:de:e3: 2f:a9:70:17:c7:42:19:c0:80:73:64:ea:21:5e:52:e5:1b:d6: ea:84:4a:82:41:4c:85:18:76:ce:bf:b4:77:54:f5:30:c6:b2: 6a:8d:da:15:5b:eb:02:95:74:a1:ab:eb:cc:7c:c0:03:f1:0f: 83:04:6e:28:20:2c:6e:d8:4f:4c:96:5b:5a:10:d3:f4:9e:ca: 0d:d5:77:cb:92:0e:c2:74:f7:66:3b:a8:d8:14:cd:2a:6d:aa: 2c:9f:58:8f:84:f2:01:c5:54:9b:06:fd:78:ce:a7:79:48:a0: bc:9a:bf:16:b8:15:fa:9d:b7:9c:a2:3f:32:17:28:9b:87:2b: a5:92:ee:99:23:e0:05:d7:09:53:a2:13:8b:f8:f2:94:b8:1d: 1a:ab:2c:d3:c3:37:1d:7e:19:d4:9d:bd:36:8a:27:09:95:99: 2f:87:75:33:26:0b:46:91:52:66:80:d5:79:a2:77:86:a8:cc: 7e:eb:8d:e2:38:1e:51:50:7c:a4:10:df:05:04:c7:24:c0:af: 23:b8:40:e3:d2:e5:27:61:cc:20:89:3d:04:45:70:88:7e:b5: b3:7b:37:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kHPLwxbTe3rWo9NgVewO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNDE5MDUwMDUzWhcNMjYwNDIwMDUwMDUzWjAzMTEwLwYDVQQD EyhkMjNhYjNmOGZiNzkwNDdjMzJkYmE5OTg3ZmY3ZmI1OWIzMGMwZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFMMsRlhGJDkfkea4xS+rbMWYcmy guqJ7lmdu4pyxg54l9oT9lNhEjYK6/F/NmDe1IVw0QEaomhEi1Awpxntp4l9jVdA /b5jB0+pelRX6AbQKvREKsTDkuaMVxAzGEqOaWdvMDltSTT1nzywebu8PBgEdWzb Ejfb+3owxgSD238tXkiuqWa55kwFkjUmKebTCCqqPni36JdJ9gwoZ1dqLnbfq9Fd rUKSoxVq62MRlTiglDe8gGt1L9X86kubdlUCv9ycGaEgNLhgGnN60sQax0Lx05L+ AB+QcW+IUJAmVL54ZD+ayYoiXr8iyHJFGtbUsENUlOu2uX1ioPIsEQ/YNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNI6s/j7eQR8MtupmH/3+1mzDA8zMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGCiASrO j92Gw8Ocs+IRovYdE4s6kpV3kGh+HOy9j06+ot7jL6lwF8dCGcCAc2TqIV5S5RvW 6oRKgkFMhRh2zr+0d1T1MMayao3aFVvrApV0oavrzHzAA/EPgwRuKCAsbthPTJZb WhDT9J7KDdV3y5IOwnT3Zjuo2BTNKm2qLJ9Yj4TyAcVUmwb9eM6neUigvJq/FrgV +p23nKI/Mhcom4crpZLumSPgBdcJU6ITi/jylLgdGqss08M3HX4Z1J29NoonCZWZ L4d1MyYLRpFSZoDVeaJ3hqjMfuuN4jgeUVB8pBDfBQTHJMCvI7hA49LlJ2HMIIk9 BEVwiH61s3s3NA== -----END CERTIFICATE-----Generated at Sun Apr 19 15:06:16 2026 by rpki-client