$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: mXe2ciM3fOzlqplx/+2g6pVkbmFR8b76pwMtLqxFBnA= Subject key identifier: 72:87:E6:68:BD:DD:B0:15:F0:1E:08:EF:47:E3:4D:48:70:7E:5A:EC Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019E1231675D3255DE94D684B66241E83EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 190B Signing time: Sun 10 May 2026 14:01:28 +0000 Manifest this update: Sun 10 May 2026 14:01:28 +0000 Manifest next update: Mon 11 May 2026 14:01:28 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 4IPAYtu/1maqnjM7ow1WFsHsOtHvUffBTSWvR7MJF14=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 May 2026 11:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:12:31:67:5d:32:55:de:94:d6:84:b6:62:41:e8:3e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: May 10 14:01:28 2026 GMT Not After : May 11 14:01:28 2026 GMT Subject: CN=7287e668bdddb015f01e08ef47e34d48707e5aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:12:9f:ee:3a:ff:5e:53:df:f0:71:77:cc: 63:1e:e0:8f:92:4f:64:92:ca:a1:f4:1e:87:82:fc: 3c:d4:14:62:58:e7:c0:55:09:da:11:3f:04:3b:c3: 83:ec:17:97:81:85:55:37:15:e5:e8:1c:28:e6:d8: bf:69:f2:76:c7:04:39:2b:25:c9:77:5a:2e:66:4f: 5d:30:0f:95:96:54:c9:04:41:39:e3:6f:bf:9c:a7: 32:55:e2:cf:83:e3:4b:26:56:eb:71:d9:6b:6a:09: 05:d0:56:39:75:16:57:d6:e0:07:f7:ef:e6:ca:31: db:b0:57:36:bc:0f:25:bc:6b:7a:d6:54:e1:44:9d: 60:59:8d:1a:ec:e2:f3:58:7a:a1:e7:2a:49:89:68: 7d:e8:d5:8a:ab:d5:c0:c8:83:67:d4:21:62:e7:ed: 28:f1:ab:27:f0:e9:f1:bf:25:af:4c:84:3d:5a:c4: 7b:a6:02:82:c6:d5:fc:f3:e8:65:f4:0f:55:2e:26: 97:3e:eb:dc:57:53:6a:15:d1:3f:7b:7c:99:a0:5e: b9:2c:46:7a:12:8c:ea:1f:24:c7:7b:d6:52:d0:3a: 2b:ba:d4:ee:de:be:a5:ad:35:8b:fe:fe:ee:64:a8: e2:65:48:2a:20:b2:5d:8a:d2:da:e0:61:70:44:65: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:87:E6:68:BD:DD:B0:15:F0:1E:08:EF:47:E3:4D:48:70:7E:5A:EC X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:72:86:57:fe:72:b6:02:a9:1a:cf:bf:fb:52:1a:bc:3e:c2: 79:06:51:bd:79:c4:5e:cd:76:22:e4:a5:2f:96:f4:71:63:ce: 1c:fb:81:0e:de:a1:7f:d7:a8:d3:51:aa:0e:fa:d3:39:b3:f5: 3d:e7:10:b8:46:52:88:a8:2f:3d:0f:3f:4e:1c:18:9e:09:37: 06:52:82:01:1c:4f:dc:23:4f:f4:cf:ea:d6:65:e3:f9:fa:a5: 98:82:28:34:1f:9c:05:87:c3:b9:77:37:2e:c2:33:1f:63:b1: 09:aa:d6:83:5f:ac:98:f3:e9:32:6b:71:11:26:e5:f2:a2:6d: 3b:64:2d:cc:7a:fb:a8:e0:6b:e9:35:26:c1:0d:50:8c:60:6d: 90:f9:60:70:a2:22:de:22:d2:73:92:2d:b0:69:80:35:38:9b: ca:63:5d:0a:86:ef:20:e7:70:14:88:98:85:29:5e:77:c6:04: b2:3c:5c:17:dc:ae:7c:96:20:3d:7d:36:5c:48:cc:70:e8:a2: c3:1b:5e:60:fe:52:5b:e9:01:c1:46:c2:93:8d:70:8d:5b:81: 39:7d:85:e4:5e:ee:cf:22:51:a7:46:bc:6e:33:55:39:40:d4: a5:d5:00:46:b0:25:0f:22:22:73:ee:02:46:35:75:2d:bb:ca: d3:de:91:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4SMWddMlXelNaEtmJB6D78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNTEwMTQwMTI4WhcNMjYwNTExMTQwMTI4WjAzMTEwLwYDVQQD Eyg3Mjg3ZTY2OGJkZGRiMDE1ZjAxZTA4ZWY0N2UzNGQ0ODcwN2U1YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVISn+46/15T3/Bxd8xjHuCPkk9k ksqh9B6Hgvw81BRiWOfAVQnaET8EO8OD7BeXgYVVNxXl6Bwo5ti/afJ2xwQ5KyXJ d1ouZk9dMA+VllTJBEE542+/nKcyVeLPg+NLJlbrcdlragkF0FY5dRZX1uAH9+/m yjHbsFc2vA8lvGt61lThRJ1gWY0a7OLzWHqh5ypJiWh96NWKq9XAyINn1CFi5+0o 8asn8OnxvyWvTIQ9WsR7pgKCxtX88+hl9A9VLiaXPuvcV1NqFdE/e3yZoF65LEZ6 EozqHyTHe9ZS0DorutTu3r6lrTWL/v7uZKjiZUgqILJditLa4GFwRGXtKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKH5mi93bAV8B4I70fjTUhwflrsMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3KGV/5y tgKpGs+/+1IavD7CeQZRvXnEXs12IuSlL5b0cWPOHPuBDt6hf9eo01GqDvrTObP1 PecQuEZSiKgvPQ8/ThwYngk3BlKCARxP3CNP9M/q1mXj+fqlmIIoNB+cBYfDuXc3 LsIzH2OxCarWg1+smPPpMmtxESbl8qJtO2QtzHr7qOBr6TUmwQ1QjGBtkPlgcKIi 3iLSc5ItsGmANTibymNdCobvIOdwFIiYhSled8YEsjxcF9yufJYgPX02XEjMcOii wxteYP5SW+kBwUbCk41wjVuBOX2F5F7uzyJRp0a8bjNVOUDUpdUARrAlDyIic+4C RjV1LbvK096RRg== -----END CERTIFICATE-----Generated at Sun May 10 17:25:02 2026 by rpki-client