$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: bIR5xG3zJ4BQImEyTUGJ2jzC1wPrHm/RoKNznrDL1OQ= Subject key identifier: B4:2E:FC:E6:D2:16:21:12:A9:D1:89:C1:AB:25:A7:67:E2:E1:E2:CF Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019E2B4C2DDBFC1FF0303E52B9F78C370E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1918 Signing time: Fri 15 May 2026 11:01:13 +0000 Manifest this update: Fri 15 May 2026 11:01:13 +0000 Manifest next update: Sat 16 May 2026 11:01:13 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: 0Qstv1BYtyTou4GQZXDFVjuVcke/y43z8VodjNzHVTA=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2b:4c:2d:db:fc:1f:f0:30:3e:52:b9:f7:8c:37:0e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: May 15 11:01:13 2026 GMT Not After : May 16 11:01:13 2026 GMT Subject: CN=b42efce6d2162112a9d189c1ab25a767e2e1e2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:b4:44:30:66:b9:b6:33:1d:42:13:dc:52: 2c:62:c7:4d:fd:27:ad:1f:a9:c6:db:7a:aa:85:43: 02:6e:ac:c7:3f:49:de:f1:ea:c2:84:9c:60:a8:74: af:da:79:74:88:15:9d:3b:b3:e3:e8:d0:83:87:34: f9:0a:f9:3a:40:2a:f6:71:23:57:06:e4:9f:da:8b: 2f:fc:a4:a5:40:9c:7d:19:ee:57:cb:70:03:88:7b: 33:63:a9:cb:32:23:c7:ce:0f:07:ff:bb:7a:c5:22: ca:d2:3f:18:1d:d8:ad:ad:f9:ee:52:f8:c3:42:f1: aa:80:1b:a4:25:7e:94:b4:04:b6:1a:14:0a:62:cb: 28:52:db:47:b8:82:90:8d:62:fa:c7:a2:86:dd:f7: 0d:71:a7:ad:9b:65:d1:c2:6e:9c:db:f4:41:fb:40: f7:86:be:f8:09:dc:ce:10:f0:18:e9:b0:21:81:60: fb:a1:5a:1e:94:8a:2d:b7:fc:f3:d3:06:55:de:ed: d4:74:36:61:38:7c:1f:6c:c8:43:32:ea:60:2e:f9: 4d:81:79:88:58:e0:c2:e5:ea:cb:7e:25:95:67:e7: 04:4a:c4:50:ec:c8:b4:16:d1:d3:85:99:ad:8f:40: 56:69:64:9e:16:5c:df:c3:68:9c:d3:64:9d:b8:46: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2E:FC:E6:D2:16:21:12:A9:D1:89:C1:AB:25:A7:67:E2:E1:E2:CF X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3f:05:a6:e7:6c:96:d4:ea:b9:cc:48:f3:40:ff:a4:b1:a4: a6:cc:69:70:35:0f:a9:23:21:58:b4:1b:a3:b4:a5:1b:59:44: 50:01:26:33:51:f8:55:c7:e8:f9:89:ed:72:20:68:88:de:03: ff:6c:68:5e:ae:71:d7:5d:52:12:b3:56:b2:63:1b:c3:ad:c2: 98:80:29:14:40:83:7e:48:b5:24:cf:3a:f8:a4:5a:1c:bc:aa: 12:a8:8e:5d:18:84:cb:36:1f:14:d2:f7:51:64:04:32:63:cc: 8e:8a:1b:c5:38:27:62:a9:b0:20:3b:4a:9e:b8:46:e7:a3:7a: 24:fd:c6:68:25:98:f0:2c:59:2c:99:e0:9e:d0:0d:a6:1e:92: a7:d9:20:6c:d1:92:15:37:40:ee:c2:93:67:4d:42:15:51:8c: 6f:81:19:49:81:af:c9:7a:96:90:41:59:14:94:7b:b3:7c:aa: e6:d7:2f:35:b1:f5:c0:57:f1:58:14:b7:b8:d0:fc:81:83:f8: 1f:77:8a:0f:93:ad:a2:9d:15:b4:a1:4e:a7:3c:50:66:dc:89: ae:8b:19:cf:55:2a:89:ee:ca:f7:85:a7:b0:60:c2:eb:ad:b1: 69:f5:96:4d:46:f1:25:e4:dc:c8:59:98:60:a2:de:d3:1a:6d: dd:7c:0b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4rTC3b/B/wMD5SufeMNw59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNTE1MTEwMTEzWhcNMjYwNTE2MTEwMTEzWjAzMTEwLwYDVQQD EyhiNDJlZmNlNmQyMTYyMTEyYTlkMTg5YzFhYjI1YTc2N2UyZTFlMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGW0RDBmubYzHUIT3FIsYsdN/Set H6nG23qqhUMCbqzHP0ne8erChJxgqHSv2nl0iBWdO7Pj6NCDhzT5Cvk6QCr2cSNX BuSf2osv/KSlQJx9Ge5Xy3ADiHszY6nLMiPHzg8H/7t6xSLK0j8YHditrfnuUvjD QvGqgBukJX6UtAS2GhQKYssoUttHuIKQjWL6x6KG3fcNcaetm2XRwm6c2/RB+0D3 hr74CdzOEPAY6bAhgWD7oVoelIott/zz0wZV3u3UdDZhOHwfbMhDMupgLvlNgXmI WODC5erLfiWVZ+cESsRQ7Mi0FtHThZmtj0BWaWSeFlzfw2ic02SduEbVQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQu/ObSFiESqdGJwaslp2fi4eLPMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUT8Fpuds ltTqucxI80D/pLGkpsxpcDUPqSMhWLQbo7SlG1lEUAEmM1H4Vcfo+YntciBoiN4D /2xoXq5x111SErNWsmMbw63CmIApFECDfki1JM86+KRaHLyqEqiOXRiEyzYfFNL3 UWQEMmPMjoobxTgnYqmwIDtKnrhG56N6JP3GaCWY8CxZLJngntANph6Sp9kgbNGS FTdA7sKTZ01CFVGMb4EZSYGvyXqWkEFZFJR7s3yq5tcvNbH1wFfxWBS3uND8gYP4 H3eKD5Otop0VtKFOpzxQZtyJrosZz1Uqie7K94WnsGDC662xafWWTUbxJeTcyFmY YKLe0xpt3XwLMQ== -----END CERTIFICATE-----Generated at Fri May 15 19:03:51 2026 by rpki-client