$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: mjkQVVk4EdHubWTQqOGWe/NMQ9HhJol2h2p6CbIpJsU= Subject key identifier: A7:37:13:AE:5F:65:A0:CB:91:07:3E:40:F5:E2:73:83:6D:BB:91:8F Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019FBB0DFF17FF491792F935048B77651F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 19E7 Signing time: Sat 01 Aug 2026 02:01:24 +0000 Manifest this update: Sat 01 Aug 2026 02:01:24 +0000 Manifest next update: Sun 02 Aug 2026 02:01:24 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 8MAXulaFhhtEdn4EJm7ZD2vnuhblCzZSOo4+349rnSk=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Aug 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:bb:0d:ff:17:ff:49:17:92:f9:35:04:8b:77:65:1f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Aug 1 02:01:24 2026 GMT Not After : Aug 2 02:01:24 2026 GMT Subject: CN=a73713ae5f65a0cb91073e40f5e273836dbb918f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:bb:e1:23:b9:cb:2c:4c:7d:a4:a0:c4:e1: f3:1a:02:1b:c4:a2:bc:1e:a2:43:15:a8:f9:c7:fd: 4d:51:65:0a:dd:8e:b8:22:fb:78:6b:a0:67:5e:c8: 73:6f:be:30:21:6c:06:89:f1:6f:f6:04:a2:e2:cd: 88:48:15:89:70:d5:40:cc:fc:de:ec:a3:c3:87:60: 0c:56:3f:74:8f:3a:9b:49:92:e9:04:37:c6:cb:27: 25:a6:af:32:67:20:d5:80:83:48:30:47:26:f1:8d: 48:1d:c8:5f:70:1b:fe:a2:f0:1b:d7:24:7f:7e:e7: e6:ee:27:60:9d:12:a2:4e:68:e2:cf:36:02:7d:d7: 27:89:b8:31:4c:eb:fb:01:32:e7:39:b7:8a:72:bf: 98:ed:a7:18:24:27:a8:df:35:58:71:fe:6e:41:e5: 64:10:3b:7c:72:41:6c:7d:1b:8b:ce:79:7d:78:92: 3e:44:9d:46:ca:3c:bd:00:a0:63:f8:e0:b1:9e:17: bf:5e:3a:81:b9:4b:1a:cb:ee:38:8e:2d:bd:27:f2: 5b:40:3f:77:fe:1d:df:70:e4:01:90:cd:1a:f7:ea: 7e:7a:e8:ae:20:42:f9:e5:67:9d:36:05:55:ab:4c: 69:f9:2d:b5:7f:22:3f:11:c4:1e:69:5d:b9:1e:15: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:13:AE:5F:65:A0:CB:91:07:3E:40:F5:E2:73:83:6D:BB:91:8F X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:68:2d:7a:8f:da:63:c8:ec:cc:c7:0c:52:18:d8:f1:95:87: 95:c0:45:a9:84:42:d7:cf:57:a4:c9:b1:33:d4:c5:9e:21:65: a2:df:c0:3f:20:5a:94:ee:f7:76:ea:e0:f3:f9:1d:04:bf:8d: b7:0e:5c:32:9a:90:5e:b9:33:22:86:89:37:a7:87:05:a3:35: 87:51:28:9f:d7:1e:03:51:30:4c:44:4c:5e:40:f6:17:54:93: d0:5e:9a:c0:cf:6d:0e:88:0f:71:59:c2:c5:85:7f:63:45:a7: 11:30:88:70:2f:45:bd:d2:14:35:5b:af:7c:f3:0d:08:ab:d2: 18:fb:9b:84:59:e3:47:76:d1:15:e7:09:e1:dd:8e:49:1f:5a: 06:a4:72:8c:11:05:18:52:7b:25:da:91:b9:03:c9:83:57:c9: ab:3f:1d:f0:bc:6d:2f:65:9e:f7:ae:ba:a0:e6:eb:dc:c8:11: eb:d8:33:79:25:5d:c3:ac:74:12:95:0a:05:c8:34:0a:f2:a6: dd:1f:f9:a4:1e:eb:5f:e8:21:57:93:b2:35:48:6a:da:34:6d: 68:9d:38:89:c2:81:38:0f:42:d4:29:c5:04:b7:1d:c9:93:96: a0:05:66:50:f3:14:8e:8f:f9:d4:82:78:9d:31:77:a2:15:5f: b8:c2:8a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+7Df8X/0kXkvk1BIt3ZR8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwODAxMDIwMTI0WhcNMjYwODAyMDIwMTI0WjAzMTEwLwYDVQQD EyhhNzM3MTNhZTVmNjVhMGNiOTEwNzNlNDBmNWUyNzM4MzZkYmI5MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVu74SO5yyxMfaSgxOHzGgIbxKK8 HqJDFaj5x/1NUWUK3Y64Ivt4a6BnXshzb74wIWwGifFv9gSi4s2ISBWJcNVAzPze 7KPDh2AMVj90jzqbSZLpBDfGyyclpq8yZyDVgINIMEcm8Y1IHchfcBv+ovAb1yR/ fufm7idgnRKiTmjizzYCfdcnibgxTOv7ATLnObeKcr+Y7acYJCeo3zVYcf5uQeVk EDt8ckFsfRuLznl9eJI+RJ1Gyjy9AKBj+OCxnhe/XjqBuUsay+44ji29J/JbQD93 /h3fcOQBkM0a9+p+euiuIEL55WedNgVVq0xp+S21fyI/EcQeaV25HhVkZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc3E65fZaDLkQc+QPXic4Ntu5GPMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmgteo/a Y8jszMcMUhjY8ZWHlcBFqYRC189XpMmxM9TFniFlot/APyBalO73durg8/kdBL+N tw5cMpqQXrkzIoaJN6eHBaM1h1Eon9ceA1EwTERMXkD2F1ST0F6awM9tDogPcVnC xYV/Y0WnETCIcC9FvdIUNVuvfPMNCKvSGPubhFnjR3bRFecJ4d2OSR9aBqRyjBEF GFJ7JdqRuQPJg1fJqz8d8LxtL2We9666oObr3MgR69gzeSVdw6x0EpUKBcg0CvKm 3R/5pB7rX+ghV5OyNUhq2jRtaJ04icKBOA9C1CnFBLcdyZOWoAVmUPMUjo/51IJ4 nTF3ohVfuMKKIA== -----END CERTIFICATE-----Generated at Sat Aug 1 09:15:01 2026 by rpki-client