$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: yDOBYtCnHBug6smDnaqXd61pvoEuemDwMexAvH9V1CU= Subject key identifier: 2D:15:CE:17:52:3E:44:F2:09:68:50:D8:0D:DF:3B:AB:5B:A2:6A:B1 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 01A0954774EC4987A4FEDA194B5CF3A64E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1A58 Signing time: Sat 12 Sep 2026 11:01:23 +0000 Manifest this update: Sat 12 Sep 2026 11:01:23 +0000 Manifest next update: Sun 13 Sep 2026 11:01:23 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: Y2mvYJCrpbMA2waHtxXqrey4C6Yrcj/QyKFGAc4JSso=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:95:47:74:ec:49:87:a4:fe:da:19:4b:5c:f3:a6:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Sep 12 11:01:23 2026 GMT Not After : Sep 13 11:01:23 2026 GMT Subject: CN=2d15ce17523e44f2096850d80ddf3bab5ba26ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:14:ff:d6:59:ff:1e:34:5a:89:11:13:ed: f9:41:e3:45:47:23:4c:6f:6d:53:64:96:99:d2:25: ff:3b:c6:13:1d:ca:9d:f7:4b:96:eb:b9:31:24:c3: 86:f8:c4:38:39:4f:80:24:21:fc:50:49:1b:36:16: a9:0b:38:69:ec:fb:36:f2:da:d9:79:e4:9a:94:92: 8e:e3:6c:c5:da:5b:2f:b7:cc:26:50:eb:91:d0:48: cb:21:d4:1a:a1:16:55:1d:67:f7:95:6c:24:55:a7: f9:23:60:76:3a:1b:2d:ad:e0:5b:68:87:4b:48:42: 67:8e:60:70:2e:8a:dd:a2:f2:8d:a1:30:97:b0:6e: 71:06:01:0e:05:9b:31:6e:f0:09:6d:a9:34:2d:ca: 8a:a0:b2:34:69:c8:5f:1e:d5:9b:7d:4d:c6:75:46: c0:cd:12:ea:0e:ec:56:78:70:ef:c3:50:38:2c:b0: 71:44:c7:40:d4:20:5a:bb:21:2b:f4:7a:09:d2:fa: 2b:c7:03:17:94:f5:0c:30:9b:98:04:2d:fc:3f:0a: 0e:4e:8b:d6:13:3c:14:d5:48:57:8e:8c:33:8b:30: 99:32:3e:be:b5:f1:da:06:6b:24:07:e4:08:e0:d0: bd:1b:83:32:4e:48:27:22:5d:dd:cd:35:70:39:fd: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:CE:17:52:3E:44:F2:09:68:50:D8:0D:DF:3B:AB:5B:A2:6A:B1 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4f:ee:03:53:f1:29:87:f7:99:48:4e:d8:eb:d0:49:eb:65: 33:2a:d2:14:de:5c:9c:58:6f:35:04:78:14:fd:f2:11:b1:de: 04:a7:49:d7:45:53:b8:91:aa:fe:1b:42:8e:75:07:94:b8:5d: ab:16:e1:88:d4:ec:de:81:f1:61:37:52:19:15:8e:e7:75:41: a9:3a:2c:16:6f:53:79:f5:19:43:55:b8:8c:5b:a0:04:90:21: 90:89:3c:1e:23:9d:9e:21:66:47:3e:9c:cc:e4:60:42:a6:d9: 00:55:ff:4d:d7:77:1b:ee:a1:fa:e7:e1:1c:66:f1:84:c2:e1: 06:4a:58:62:d1:82:dc:05:18:16:b5:9c:c6:67:59:68:51:19: 2e:4b:68:14:a2:c6:7a:b3:78:3d:f0:26:28:74:31:7b:41:80: d8:34:e3:6f:4a:7e:4b:16:ad:27:94:59:b4:3c:f3:5f:3d:4e: cb:48:23:14:3b:de:66:63:9c:16:6e:17:35:e0:d5:59:16:e5: 88:67:b8:46:a3:4b:a3:1e:89:4d:2f:ef:f3:ce:26:5c:5e:75: dd:23:51:f0:87:8d:b1:be:bb:04:3b:c8:a8:a7:8e:78:48:88: 67:59:21:25:bd:fb:c3:f7:90:e1:d1:51:5e:56:31:e2:30:35: bc:0c:99:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCVR3TsSYek/toZS1zzpk5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwOTEyMTEwMTIzWhcNMjYwOTEzMTEwMTIzWjAzMTEwLwYDVQQD EygyZDE1Y2UxNzUyM2U0NGYyMDk2ODUwZDgwZGRmM2JhYjViYTI2YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPUU/9ZZ/x40WokRE+35QeNFRyNM b21TZJaZ0iX/O8YTHcqd90uW67kxJMOG+MQ4OU+AJCH8UEkbNhapCzhp7Ps28trZ eeSalJKO42zF2lsvt8wmUOuR0EjLIdQaoRZVHWf3lWwkVaf5I2B2OhstreBbaIdL SEJnjmBwLordovKNoTCXsG5xBgEOBZsxbvAJbak0LcqKoLI0achfHtWbfU3GdUbA zRLqDuxWeHDvw1A4LLBxRMdA1CBauyEr9HoJ0vorxwMXlPUMMJuYBC38PwoOTovW EzwU1UhXjowzizCZMj6+tfHaBmskB+QI4NC9G4MyTkgnIl3dzTVwOf0dqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0VzhdSPkTyCWhQ2A3fO6tbomqxMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaU/uA1Px KYf3mUhO2OvQSetlMyrSFN5cnFhvNQR4FP3yEbHeBKdJ10VTuJGq/htCjnUHlLhd qxbhiNTs3oHxYTdSGRWO53VBqTosFm9TefUZQ1W4jFugBJAhkIk8HiOdniFmRz6c zORgQqbZAFX/Tdd3G+6h+ufhHGbxhMLhBkpYYtGC3AUYFrWcxmdZaFEZLktoFKLG erN4PfAmKHQxe0GA2DTjb0p+SxatJ5RZtDzzXz1Oy0gjFDveZmOcFm4XNeDVWRbl iGe4RqNLox6JTS/v884mXF513SNR8IeNsb67BDvIqKeOeEiIZ1khJb37w/eQ4dFR XlYx4jA1vAyZtA== -----END CERTIFICATE-----Generated at Sat Sep 12 20:22:22 2026 by rpki-client