$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: JWmjqCVdvkpf2CWOuTe2JllRHGgwKXcNW79X2HzX3SM= Subject key identifier: 48:50:6D:C1:7A:94:DF:A0:C7:64:90:CA:49:9F:FE:25:B3:5B:F7:CD Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019D13464808F172A9923F3E36009CC2D626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1887 Signing time: Sun 22 Mar 2026 02:01:06 +0000 Manifest this update: Sun 22 Mar 2026 02:01:06 +0000 Manifest next update: Mon 23 Mar 2026 02:01:06 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: W1KuwORpiz9b2B3ktfMg8npefdMhrSjMuQsNiEhwjo8=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:13:46:48:08:f1:72:a9:92:3f:3e:36:00:9c:c2:d6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Mar 22 02:01:06 2026 GMT Not After : Mar 23 02:01:06 2026 GMT Subject: CN=48506dc17a94dfa0c76490ca499ffe25b35bf7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:5f:69:50:03:05:ca:96:1c:94:2e:72:4f: 35:0f:8c:ab:a2:a1:65:9d:68:27:51:21:8e:b1:ea: 22:ed:40:ff:12:9c:fb:ed:57:4e:08:5c:00:2c:1b: be:29:37:f8:6b:46:40:13:9b:5e:de:c8:d5:73:81: 4b:94:48:41:64:24:fb:c1:0b:a1:cf:f2:c2:c4:09: 8d:59:7d:7e:36:aa:23:2d:23:75:a8:76:1b:16:3b: 98:cf:72:c3:6c:78:24:13:3e:d1:75:ad:f3:38:c4: a6:bb:02:06:9e:8f:6e:f2:3b:9b:99:63:88:48:89: 1a:37:61:98:75:e9:2c:b5:32:d3:e7:13:ca:bd:2a: 3e:e7:8d:4a:b9:c9:30:2e:90:9d:e4:4c:41:40:19: dc:82:c9:57:db:5d:4e:0e:88:d7:ad:b3:a3:69:58: 43:3f:cd:b9:46:dc:06:c8:53:67:f9:da:82:53:f5: 91:92:8c:a7:dd:04:b1:e8:28:1e:b1:47:2e:99:21: be:67:05:90:7e:df:f4:b6:26:9f:d8:19:c5:34:68: 87:69:0d:80:b9:85:2b:44:21:0c:19:6b:a7:0f:27: 82:1c:0a:cb:68:d4:d0:7c:17:9a:f6:02:b0:25:e4: bc:d5:ba:87:ab:42:85:32:bf:c1:61:d9:f9:82:08: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:50:6D:C1:7A:94:DF:A0:C7:64:90:CA:49:9F:FE:25:B3:5B:F7:CD X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:00:08:7c:4f:ab:df:d3:e7:e7:65:d1:73:61:59:be:7f:e3: c0:1e:28:f1:b7:54:c5:da:a6:2f:c1:7d:cd:3f:6d:dc:85:8b: d5:28:1d:9f:9b:94:0c:18:2d:0c:8d:e3:be:2d:0a:ab:6a:1c: c0:e0:80:5c:54:69:54:72:84:aa:2b:9b:6c:93:d3:1e:ba:f0: a4:38:f3:a6:61:6e:84:6d:12:d4:38:c7:95:c7:17:c5:24:dd: 26:6b:af:7f:54:99:3b:0a:d6:89:a3:8f:cc:77:ed:ae:e1:8f: 7e:dd:45:95:c5:1d:24:62:8c:61:84:b4:cf:e4:22:09:d6:08: 04:ff:65:13:84:18:00:a9:95:43:42:6e:1e:64:9d:d9:37:ce: a0:a3:0f:65:80:73:bf:ab:46:98:c7:3f:76:5c:cf:c1:bf:ed: 6a:0e:8c:17:a7:7b:e2:8c:c5:6b:e0:94:0b:36:3f:b6:1a:84: ab:a6:f6:74:f8:0f:34:ff:11:09:75:ec:20:a1:b8:69:c8:df: 34:19:c8:55:64:6a:39:02:5d:c1:cb:d0:cd:66:79:02:7d:04: e9:01:7d:79:bf:41:e0:b7:72:56:35:e8:6b:6e:e3:e9:fd:00: 59:f8:14:50:d3:df:01:f4:59:db:c0:20:73:cb:fd:b4:1a:a9: 7f:88:f3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0TRkgI8XKpkj8+NgCcwtYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMzIyMDIwMTA2WhcNMjYwMzIzMDIwMTA2WjAzMTEwLwYDVQQD Eyg0ODUwNmRjMTdhOTRkZmEwYzc2NDkwY2E0OTlmZmUyNWIzNWJmN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlNfaVADBcqWHJQuck81D4yroqFl nWgnUSGOseoi7UD/Epz77VdOCFwALBu+KTf4a0ZAE5te3sjVc4FLlEhBZCT7wQuh z/LCxAmNWX1+NqojLSN1qHYbFjuYz3LDbHgkEz7Rda3zOMSmuwIGno9u8jubmWOI SIkaN2GYdekstTLT5xPKvSo+541KuckwLpCd5ExBQBncgslX211ODojXrbOjaVhD P825RtwGyFNn+dqCU/WRkoyn3QSx6CgesUcumSG+ZwWQft/0tiaf2BnFNGiHaQ2A uYUrRCEMGWunDyeCHArLaNTQfBea9gKwJeS81bqHq0KFMr/BYdn5ggg6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhQbcF6lN+gx2SQykmf/iWzW/fNMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwAIfE+r 39Pn52XRc2FZvn/jwB4o8bdUxdqmL8F9zT9t3IWL1Sgdn5uUDBgtDI3jvi0Kq2oc wOCAXFRpVHKEqiubbJPTHrrwpDjzpmFuhG0S1DjHlccXxSTdJmuvf1SZOwrWiaOP zHftruGPft1FlcUdJGKMYYS0z+QiCdYIBP9lE4QYAKmVQ0JuHmSd2TfOoKMPZYBz v6tGmMc/dlzPwb/tag6MF6d74ozFa+CUCzY/thqEq6b2dPgPNP8RCXXsIKG4acjf NBnIVWRqOQJdwcvQzWZ5An0E6QF9eb9B4LdyVjXoa27j6f0AWfgUUNPfAfRZ28Ag c8v9tBqpf4jz1g== -----END CERTIFICATE-----Generated at Sun Mar 22 06:56:25 2026 by rpki-client