$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: 9l9h4/D8pGuKrI+wBxGL8ky50usbYjpnqvmzaBMGPaU= Subject key identifier: 72:70:6A:AC:FC:C4:CE:B2:3B:CA:14:8D:DF:77:60:B9:09:8D:E3:9B Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019DA9E8517E9DAEBF35E4B25EB51D90A5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 18D5 Signing time: Mon 20 Apr 2026 08:01:07 +0000 Manifest this update: Mon 20 Apr 2026 08:01:07 +0000 Manifest next update: Tue 21 Apr 2026 08:01:07 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 5qlzIghaMD34IJtq55cbn8PcZDvo7Yn7pq2ewX2AQUM=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a9:e8:51:7e:9d:ae:bf:35:e4:b2:5e:b5:1d:90:a5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Apr 20 08:01:07 2026 GMT Not After : Apr 21 08:01:07 2026 GMT Subject: CN=72706aacfcc4ceb23bca148ddf7760b9098de39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:13:8b:2e:a6:ac:ff:de:a9:79:f4:27:c8: bf:40:7d:fd:53:5b:d5:a2:fe:82:11:61:0a:24:87: 32:ee:c1:59:63:d1:be:2a:02:62:14:7f:b0:b6:10: 55:5f:16:c5:ab:0c:eb:e1:78:10:67:19:14:95:29: 7c:ef:ef:80:05:bc:96:4d:54:d3:e8:95:da:c3:c2: 4d:8b:a3:9e:04:c9:95:33:36:84:fe:50:3e:9c:b4: 92:c7:81:3c:0a:72:d6:91:ce:fa:34:15:a6:21:0f: 0d:5d:bf:56:1a:0c:cf:6e:49:2a:0f:7e:49:61:68: aa:77:c0:07:e4:a6:6c:f3:64:44:6b:83:1d:a6:98: af:00:84:6c:dc:44:8c:ed:bf:9a:d4:0b:a5:4c:ee: 82:6a:d1:64:16:94:d5:30:4b:95:36:c4:44:ac:cb: ea:15:4e:9e:84:f9:fe:f7:81:52:a9:ac:09:f6:af: 25:0e:7e:21:45:25:29:ea:7d:1d:6e:22:bd:6f:a5: ab:37:c9:b7:6c:bb:96:3a:d1:7a:5f:41:ee:52:67: 4e:aa:e8:22:b3:1f:ff:f7:03:20:29:3b:0f:79:0f: a5:e2:ca:47:c9:79:f4:d5:71:be:f8:7e:86:8e:23: b5:26:5d:6b:e1:d4:4b:e7:77:1b:8c:96:89:e2:0a: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:70:6A:AC:FC:C4:CE:B2:3B:CA:14:8D:DF:77:60:B9:09:8D:E3:9B X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6e:30:6b:31:c7:63:5d:26:0c:f0:03:60:e0:78:21:de:6a: c0:91:91:dc:3e:81:0c:a3:2e:6c:64:c3:e4:fb:6d:18:84:f3: 6d:c4:fc:d9:66:ec:ae:3e:34:c2:b4:e2:2e:34:03:2d:e2:bc: 2f:18:c8:90:04:0a:34:d3:63:9c:6a:7f:d7:46:d6:9c:bf:90: 81:c8:be:2b:d2:14:74:bd:00:c9:0f:c9:77:98:af:77:68:dd: af:7c:bf:67:ce:37:3f:4a:2e:02:ec:7c:02:69:29:a9:27:34: 81:fc:d5:eb:8a:20:d2:00:ae:2f:8d:fc:de:30:68:19:5d:c7: ab:72:57:89:a7:cc:4c:73:fa:96:2e:0d:4b:df:df:f3:d1:f5: d1:28:95:ad:fd:48:58:e1:a4:4e:80:27:94:17:0f:1a:d4:64: 60:01:0f:8a:03:78:e8:7e:e2:b1:11:98:1a:cb:83:fe:35:98: bd:3c:43:56:52:0b:a9:df:57:f1:ed:2d:20:93:7f:21:3f:55: 62:16:ec:97:ec:58:10:5f:c1:1f:a1:05:7f:5e:96:20:81:9a: 22:4a:84:bf:db:a9:6b:e8:cc:41:79:7b:c5:39:7f:79:2f:9e: 35:50:19:4a:54:be:28:39:2d:ed:8a:9f:39:09:da:c6:19:74: 45:2c:53:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2p6FF+na6/NeSyXrUdkKXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNDIwMDgwMTA3WhcNMjYwNDIxMDgwMTA3WjAzMTEwLwYDVQQD Eyg3MjcwNmFhY2ZjYzRjZWIyM2JjYTE0OGRkZjc3NjBiOTA5OGRlMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCMTiy6mrP/eqXn0J8i/QH39U1vV ov6CEWEKJIcy7sFZY9G+KgJiFH+wthBVXxbFqwzr4XgQZxkUlSl87++ABbyWTVTT 6JXaw8JNi6OeBMmVMzaE/lA+nLSSx4E8CnLWkc76NBWmIQ8NXb9WGgzPbkkqD35J YWiqd8AH5KZs82REa4MdppivAIRs3ESM7b+a1AulTO6CatFkFpTVMEuVNsRErMvq FU6ehPn+94FSqawJ9q8lDn4hRSUp6n0dbiK9b6WrN8m3bLuWOtF6X0HuUmdOqugi sx//9wMgKTsPeQ+l4spHyXn01XG++H6GjiO1Jl1r4dRL53cbjJaJ4gr3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJwaqz8xM6yO8oUjd93YLkJjeObMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC24wazHH Y10mDPADYOB4Id5qwJGR3D6BDKMubGTD5PttGITzbcT82Wbsrj40wrTiLjQDLeK8 LxjIkAQKNNNjnGp/10bWnL+Qgci+K9IUdL0AyQ/Jd5ivd2jdr3y/Z843P0ouAux8 AmkpqSc0gfzV64og0gCuL4383jBoGV3Hq3JXiafMTHP6li4NS9/f89H10SiVrf1I WOGkToAnlBcPGtRkYAEPigN46H7isRGYGsuD/jWYvTxDVlILqd9X8e0tIJN/IT9V Yhbsl+xYEF/BH6EFf16WIIGaIkqEv9upa+jMQXl7xTl/eS+eNVAZSlS+KDkt7Yqf OQnaxhl0RSxThA== -----END CERTIFICATE-----Generated at Mon Apr 20 14:59:13 2026 by rpki-client