$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: wmpnKas0WbGO3UyRtoZP4MOi8wzr8cPCUKOcTR7rC20= Subject key identifier: 92:56:0F:83:E2:A7:04:44:3C:BA:A1:6B:58:1E:11:8A:70:BA:4C:B9 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019E1BD8BB16FA30675C1F416D97CCD89848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1910 Signing time: Tue 12 May 2026 11:00:48 +0000 Manifest this update: Tue 12 May 2026 11:00:48 +0000 Manifest next update: Wed 13 May 2026 11:00:48 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: Fl3gef2rNa6LTpGB1PA0mi6YR2ZqSfOQhLbFGghDBt4=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1b:d8:bb:16:fa:30:67:5c:1f:41:6d:97:cc:d8:98:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: May 12 11:00:48 2026 GMT Not After : May 13 11:00:48 2026 GMT Subject: CN=92560f83e2a704443cbaa16b581e118a70ba4cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:c1:f8:4f:00:f7:d9:31:08:b1:e0:fb:dc: 8b:27:0b:6c:0b:da:db:b3:cd:55:62:0a:28:a6:ef: 39:3e:6f:ff:5a:5c:c6:85:28:7a:1b:3a:3a:7d:06: b1:50:9b:b7:bf:8f:ad:cc:5f:8f:d3:dd:e0:55:f4: 31:45:96:b6:06:85:ca:5f:45:0f:90:68:c0:2a:fb: 8d:7b:8d:c5:59:58:19:2f:c2:1d:e5:3d:48:81:f2: 3c:3b:ff:44:50:3d:af:a0:b5:11:2f:c4:bd:5c:b1: 7a:7f:90:07:42:1e:f6:5a:28:61:94:fb:e2:20:4b: 14:de:ea:62:25:ad:be:74:c7:df:7f:82:81:48:07: 01:d2:96:dd:35:83:a5:c2:95:24:d0:20:10:7d:40: aa:be:54:eb:4e:87:07:00:ea:44:38:45:50:6f:4e: 3f:32:6e:fc:ae:1d:cc:1b:4b:33:9d:20:08:2e:d5: b5:92:36:d6:66:47:a1:e8:ca:2c:09:1d:ce:1f:76: f9:9d:98:54:97:78:94:62:71:1e:b7:d4:f4:6a:3e: d6:11:91:d1:f5:d1:91:a9:8b:f0:49:e1:e5:57:18: c3:10:d6:1b:fa:65:58:3b:df:2f:12:ac:5b:0e:44: ad:53:1f:9f:3b:4f:86:ce:16:83:69:5d:ea:60:8a: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:56:0F:83:E2:A7:04:44:3C:BA:A1:6B:58:1E:11:8A:70:BA:4C:B9 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f9:c2:e8:78:f2:85:ed:b6:f8:69:87:f5:a0:75:c7:95:28: 70:4f:8f:32:cc:79:d5:3f:d6:e9:08:ab:69:0e:63:61:27:21: f9:f3:81:04:09:a9:dd:d7:c1:b4:b5:7d:95:9f:64:01:7d:5a: d1:af:03:2c:c1:ec:3a:f0:64:d7:1c:b7:1c:57:f5:ce:f4:a3: d6:62:9a:95:3e:45:18:c7:88:65:7f:f5:6e:12:c1:2b:39:f8: 20:86:0b:90:3b:11:03:15:af:bd:d8:49:c3:ed:1d:84:7b:20: 4d:f6:c8:6e:c2:4e:f9:ae:f2:2c:c6:c9:20:6f:8a:64:d1:a3: ed:3f:54:9b:10:d5:8c:33:c6:af:d4:4e:d8:7b:0b:fb:ab:ed: f5:46:c6:ef:88:6f:95:bc:15:fd:01:26:43:11:58:2a:eb:2a: 6e:a9:e4:38:b1:c0:21:49:fd:11:8e:8d:37:ec:04:5a:ad:d2: f9:89:ab:dc:0a:27:f3:97:e0:ff:b5:d9:86:b9:54:cd:cb:ce: 08:66:93:55:b1:35:89:46:08:8b:b3:c1:6c:ea:4d:69:53:7c: e8:e6:4e:6b:65:e8:34:f7:0b:06:03:d6:07:6a:b0:e5:35:19: f4:c1:4f:a7:79:8b:21:32:f5:3f:56:cc:86:f2:fa:77:db:9c: 1c:4f:47:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4b2LsW+jBnXB9BbZfM2JhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNTEyMTEwMDQ4WhcNMjYwNTEzMTEwMDQ4WjAzMTEwLwYDVQQD Eyg5MjU2MGY4M2UyYTcwNDQ0M2NiYWExNmI1ODFlMTE4YTcwYmE0Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pvB+E8A99kxCLHg+9yLJwtsC9rb s81VYgoopu85Pm//WlzGhSh6Gzo6fQaxUJu3v4+tzF+P093gVfQxRZa2BoXKX0UP kGjAKvuNe43FWVgZL8Id5T1IgfI8O/9EUD2voLURL8S9XLF6f5AHQh72WihhlPvi IEsU3upiJa2+dMfff4KBSAcB0pbdNYOlwpUk0CAQfUCqvlTrTocHAOpEOEVQb04/ Mm78rh3MG0sznSAILtW1kjbWZkeh6MosCR3OH3b5nZhUl3iUYnEet9T0aj7WEZHR 9dGRqYvwSeHlVxjDENYb+mVYO98vEqxbDkStUx+fO0+GzhaDaV3qYIplwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJWD4PipwREPLqha1geEYpwuky5MB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfnC6Hjy he22+GmH9aB1x5UocE+PMsx51T/W6QiraQ5jYSch+fOBBAmp3dfBtLV9lZ9kAX1a 0a8DLMHsOvBk1xy3HFf1zvSj1mKalT5FGMeIZX/1bhLBKzn4IIYLkDsRAxWvvdhJ w+0dhHsgTfbIbsJO+a7yLMbJIG+KZNGj7T9UmxDVjDPGr9RO2HsL+6vt9UbG74hv lbwV/QEmQxFYKusqbqnkOLHAIUn9EY6NN+wEWq3S+Ymr3Aon85fg/7XZhrlUzcvO CGaTVbE1iUYIi7PBbOpNaVN86OZOa2XoNPcLBgPWB2qw5TUZ9MFPp3mLITL1P1bM hvL6d9ucHE9HWg== -----END CERTIFICATE-----Generated at Tue May 12 20:10:09 2026 by rpki-client