$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: BoAecjWnstrLon8JiLYIO0jqMNwhlRBhB5AMEivlKSc= Subject key identifier: 35:A8:A5:C1:C0:D1:85:6F:16:21:E7:D7:C3:77:12:03:C1:F4:6F:88 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019D60853070714069D20E824E24633F49C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 18AF Signing time: Mon 06 Apr 2026 02:00:34 +0000 Manifest this update: Mon 06 Apr 2026 02:00:34 +0000 Manifest next update: Tue 07 Apr 2026 02:00:34 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: WMMlH8tlRo3a1gEUg3Pkyt4vYpy0JTpaSo6cgPOr0ac=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 06 Apr 2026 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:60:85:30:70:71:40:69:d2:0e:82:4e:24:63:3f:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Apr 6 02:00:34 2026 GMT Not After : Apr 7 02:00:34 2026 GMT Subject: CN=35a8a5c1c0d1856f1621e7d7c3771203c1f46f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:7f:6e:bf:b6:ca:3f:3b:ab:4b:60:ef:f0: c7:e1:fb:f3:d4:ae:d7:67:56:41:00:3c:80:68:45: 0c:90:35:6d:71:80:cd:51:dc:a9:53:c1:0a:30:bc: 75:36:78:1d:17:cc:3b:26:c0:1f:0a:40:1e:5a:8b: 3e:ab:b9:a0:e1:83:0e:f2:e2:46:17:c1:9d:12:51: e4:20:75:11:30:ea:f2:7c:e7:ed:92:97:41:91:a1: cc:52:4c:29:f9:71:ab:0f:49:24:90:02:23:5a:6b: cd:8e:2d:93:8a:60:70:49:c7:31:d6:b2:4c:c8:f6: 58:b8:09:ca:9a:2b:e2:04:8d:24:06:01:6b:5a:cd: 9a:84:5b:7c:9c:14:b9:a2:6a:34:91:d3:5d:b6:66: f2:5a:47:ff:3d:9e:c0:9c:e7:dd:d1:12:c6:20:16: 61:25:21:88:e8:ab:60:da:01:50:04:47:92:6e:e0: 93:08:a7:ce:de:85:ad:88:46:1e:85:c8:2d:8d:85: c6:ff:97:ee:5e:11:eb:6e:50:2e:cd:2b:6d:8d:75: 86:77:10:63:fe:3e:c5:04:5a:8d:72:57:3b:00:67: 6f:4f:96:45:e7:73:c7:5e:d4:96:0f:a0:ca:8b:95: 4a:54:4c:b6:21:0e:90:2e:d9:91:94:41:3d:84:ee: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:A5:C1:C0:D1:85:6F:16:21:E7:D7:C3:77:12:03:C1:F4:6F:88 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1d:d0:9e:d2:8e:e6:5c:fc:bc:d6:13:e7:31:16:d7:53:86: 91:4e:14:37:81:9a:56:48:1a:8d:b1:a8:e3:16:e1:70:34:d9: a8:1d:7e:55:52:0e:cb:ff:80:c2:e3:da:c2:db:8d:aa:6e:fa: fd:1e:c4:86:66:ed:39:84:91:82:fe:cb:17:c3:fc:ca:b9:1c: 0c:fb:55:63:c4:91:09:ea:05:fb:29:64:93:15:93:12:4f:1a: a7:0e:bb:72:fe:d1:0b:a2:56:a0:c5:f9:48:93:96:9c:94:21: ee:93:9e:dd:b9:de:b7:db:bd:20:9f:32:c2:ed:23:c9:d5:8a: e4:7e:52:2c:45:db:22:de:8b:72:c8:d4:1e:d6:5a:41:f3:74: 34:82:04:8c:e6:c4:23:5f:66:8b:d4:1e:93:75:0e:1d:a4:fe: c7:d2:8f:65:34:5f:b4:1d:f2:f4:af:99:a8:c4:3c:80:54:00: 11:d8:68:12:3e:bb:ba:3f:83:ab:cc:79:ab:28:4f:1d:ae:24: 9a:7d:1b:04:7e:af:bd:af:71:7a:05:e1:6b:71:ca:21:6e:a1: a5:e3:c4:5e:35:ef:fa:7c:ca:13:31:32:68:dc:96:64:3e:8e: 2d:35:e3:07:19:da:c6:3a:60:eb:d1:2f:3e:ec:ed:ab:f3:ad: 5e:8e:b9:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1ghTBwcUBp0g6CTiRjP0nAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNDA2MDIwMDM0WhcNMjYwNDA3MDIwMDM0WjAzMTEwLwYDVQQD EygzNWE4YTVjMWMwZDE4NTZmMTYyMWU3ZDdjMzc3MTIwM2MxZjQ2Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnql/br+2yj87q0tg7/DH4fvz1K7X Z1ZBADyAaEUMkDVtcYDNUdypU8EKMLx1NngdF8w7JsAfCkAeWos+q7mg4YMO8uJG F8GdElHkIHURMOryfOftkpdBkaHMUkwp+XGrD0kkkAIjWmvNji2TimBwSccx1rJM yPZYuAnKmiviBI0kBgFrWs2ahFt8nBS5omo0kdNdtmbyWkf/PZ7AnOfd0RLGIBZh JSGI6Ktg2gFQBEeSbuCTCKfO3oWtiEYehcgtjYXG/5fuXhHrblAuzSttjXWGdxBj /j7FBFqNclc7AGdvT5ZF53PHXtSWD6DKi5VKVEy2IQ6QLtmRlEE9hO4qkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWopcHA0YVvFiHn18N3EgPB9G+IMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh3QntKO 5lz8vNYT5zEW11OGkU4UN4GaVkgajbGo4xbhcDTZqB1+VVIOy/+AwuPawtuNqm76 /R7EhmbtOYSRgv7LF8P8yrkcDPtVY8SRCeoF+ylkkxWTEk8apw67cv7RC6JWoMX5 SJOWnJQh7pOe3bnet9u9IJ8ywu0jydWK5H5SLEXbIt6LcsjUHtZaQfN0NIIEjObE I19mi9Qek3UOHaT+x9KPZTRftB3y9K+ZqMQ8gFQAEdhoEj67uj+Dq8x5qyhPHa4k mn0bBH6vva9xegXha3HKIW6hpePEXjXv+nzKEzEyaNyWZD6OLTXjBxnaxjpg69Ev Puztq/OtXo65qg== -----END CERTIFICATE-----Generated at Mon Apr 6 04:47:08 2026 by rpki-client