$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: NBtwVaChYOUgPIpfYt9/T3isOf8bDESqI4QUsMMcp3g= Subject key identifier: 46:B9:D8:57:72:F7:C4:41:2D:4C:10:68:57:B3:C3:60:F4:A3:5D:08 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019D2A72D20A86B7D4425272B216C8DD4693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1893 Signing time: Thu 26 Mar 2026 14:01:01 +0000 Manifest this update: Thu 26 Mar 2026 14:01:01 +0000 Manifest next update: Fri 27 Mar 2026 14:01:01 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: KY/hj4aUIfE/pc12idcYNx3f6m7TYSnyOVTbmXMBj8c=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:72:d2:0a:86:b7:d4:42:52:72:b2:16:c8:dd:46:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Mar 26 14:01:01 2026 GMT Not After : Mar 27 14:01:01 2026 GMT Subject: CN=46b9d85772f7c4412d4c106857b3c360f4a35d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:39:37:7f:58:94:0e:46:e1:61:f1:11:21: 43:54:e5:98:6a:07:0d:1c:7e:80:1c:cc:b1:fd:d9: 2e:b1:fc:6c:26:b1:2b:77:82:a1:ab:7f:fc:99:ac: 21:fa:c1:6e:30:8f:58:35:6c:69:be:fe:23:26:39: b6:e8:48:e5:8b:ac:47:65:c9:f5:4b:8a:65:63:6e: c1:46:c3:6b:33:72:e7:0e:10:4d:38:80:83:7a:c3: 74:6b:90:bb:e3:25:f5:bf:23:b2:88:c0:b1:95:6a: 2b:40:42:6f:3c:60:8d:1a:75:56:79:50:f7:73:b4: 82:14:e2:a8:47:25:c3:a0:43:d3:4e:ba:ec:e9:f0: 00:09:0c:de:4e:a2:7f:01:29:49:ac:7e:c7:41:ec: 43:58:b0:a4:23:86:db:ea:99:4c:0b:e9:40:5c:cd: 35:51:0d:e6:3a:b4:0a:20:e7:da:f9:5d:10:11:5f: c8:ca:2e:9f:85:00:1c:91:62:13:56:c0:c5:12:a3: 6d:1c:1d:ec:7b:a1:8e:42:7b:b9:b7:d7:07:03:05: f0:6d:61:28:3b:f6:b4:72:58:a2:2a:ce:86:14:d2: ed:bf:a8:c7:4d:26:52:00:c5:1f:50:73:29:ad:88: 64:f0:12:30:ed:69:32:1a:c9:df:4b:eb:56:c5:a1: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B9:D8:57:72:F7:C4:41:2D:4C:10:68:57:B3:C3:60:F4:A3:5D:08 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ff:7e:05:e9:ab:b0:a1:2e:2a:0c:42:3d:b7:3d:45:39:8a: db:4f:ba:c3:d9:ef:ef:76:4e:c6:e2:52:d4:04:64:cb:c3:95: 59:2b:41:73:c2:3e:82:1d:0e:02:15:74:de:67:3a:cb:3f:ad: da:0f:a4:7f:64:f0:c5:e6:eb:3f:88:ef:f9:a7:d0:bd:f1:ff: ce:29:e7:44:bf:4f:f9:85:5c:0e:54:4d:28:73:fb:3d:65:8b: dc:69:c9:16:90:13:76:eb:3f:ad:22:ca:7c:e6:80:68:43:0b: b2:2a:72:45:74:57:c1:d9:dc:e9:f5:12:31:ea:6d:73:ce:c1: 3d:64:ab:27:7b:15:15:31:b9:05:03:27:05:12:66:55:f8:38: d6:1a:f0:78:ae:c0:f4:a8:b1:01:44:f0:7b:da:2f:5b:fd:af: 70:83:80:49:8d:89:1d:3e:65:28:fb:79:1f:81:cd:c5:3a:1c: 56:8b:ca:96:33:f2:dc:ea:6a:41:a0:5d:ea:0b:3d:26:fe:e8: 8b:40:a5:9c:c4:8b:a7:14:85:d0:ec:da:29:b9:50:66:81:4f: ae:d4:4d:63:ef:8c:3d:9c:6d:09:d7:e7:20:e8:0a:dc:44:c8: c8:54:b7:d2:b9:63:19:d7:96:99:d8:26:06:f0:43:fc:45:f2: 45:48:b5:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qctIKhrfUQlJyshbI3UaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMzI2MTQwMTAxWhcNMjYwMzI3MTQwMTAxWjAzMTEwLwYDVQQD Eyg0NmI5ZDg1NzcyZjdjNDQxMmQ0YzEwNjg1N2IzYzM2MGY0YTM1ZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Q5N39YlA5G4WHxESFDVOWYagcN HH6AHMyx/dkusfxsJrErd4Khq3/8mawh+sFuMI9YNWxpvv4jJjm26Ejli6xHZcn1 S4plY27BRsNrM3LnDhBNOICDesN0a5C74yX1vyOyiMCxlWorQEJvPGCNGnVWeVD3 c7SCFOKoRyXDoEPTTrrs6fAACQzeTqJ/ASlJrH7HQexDWLCkI4bb6plMC+lAXM01 UQ3mOrQKIOfa+V0QEV/Iyi6fhQAckWITVsDFEqNtHB3se6GOQnu5t9cHAwXwbWEo O/a0cliiKs6GFNLtv6jHTSZSAMUfUHMprYhk8BIw7WkyGsnfS+tWxaGvFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEa52Fdy98RBLUwQaFezw2D0o10IMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/9+Bemr sKEuKgxCPbc9RTmK20+6w9nv73ZOxuJS1ARky8OVWStBc8I+gh0OAhV03mc6yz+t 2g+kf2TwxebrP4jv+afQvfH/zinnRL9P+YVcDlRNKHP7PWWL3GnJFpATdus/rSLK fOaAaEMLsipyRXRXwdnc6fUSMeptc87BPWSrJ3sVFTG5BQMnBRJmVfg41hrweK7A 9KixAUTwe9ovW/2vcIOASY2JHT5lKPt5H4HNxTocVovKljPy3OpqQaBd6gs9Jv7o i0ClnMSLpxSF0OzaKblQZoFPrtRNY++MPZxtCdfnIOgK3ETIyFS30rljGdeWmdgm BvBD/EXyRUi1vw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:00:51 2026 by rpki-client