$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: 6rGQmY1P0/h316uQ7ZwNfSLzFY8woRT8eDq13uNE8Gw= Subject key identifier: 06:E1:C7:41:05:01:31:02:1E:0E:29:0F:59:CE:9D:21:A7:F4:AE:1F Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019F4EE815053A7FEF5A0DAA4810D904ABFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 19AF Signing time: Sat 11 Jul 2026 02:01:00 +0000 Manifest this update: Sat 11 Jul 2026 02:01:00 +0000 Manifest next update: Sun 12 Jul 2026 02:01:00 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: EqkXTyvuJ+Iz2vASAbOUOOwm//s50VJp/b2qZlQYQ2g=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:4e:e8:15:05:3a:7f:ef:5a:0d:aa:48:10:d9:04:ab:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jul 11 02:01:00 2026 GMT Not After : Jul 12 02:01:00 2026 GMT Subject: CN=06e1c741050131021e0e290f59ce9d21a7f4ae1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:cc:18:de:ba:50:eb:e9:3d:f9:aa:c4:e0: 5f:0f:15:ed:27:78:00:b8:a4:2d:5b:60:64:e7:81: e7:94:a2:16:03:a0:54:77:c7:3e:28:45:42:59:d5: 76:22:25:98:f2:19:87:2b:11:80:af:88:1f:0c:78: 38:99:98:eb:fd:92:55:88:2d:54:ca:cf:30:d7:de: fe:0b:47:9f:ee:42:c6:73:67:7a:06:09:e5:02:94: 85:e1:14:e9:37:fb:3e:49:70:a6:37:ce:d0:55:ee: b8:91:c3:2a:fd:83:48:19:71:96:f6:c0:2c:e8:e8: 09:46:7a:b5:d6:93:64:a8:53:91:9d:48:8e:b4:b7: 49:2e:fb:63:2d:cc:af:1b:ee:27:0a:9a:9b:30:a7: 1f:70:a8:a0:de:ea:28:6f:4d:e0:27:8a:d3:57:b1: d9:15:a3:44:2c:63:fe:00:12:f1:1d:7b:1e:8a:bf: fa:ce:f2:0f:58:4e:e9:3e:08:13:ea:84:0f:c7:42: b9:bd:5a:6a:64:f7:d4:bf:61:33:db:2f:25:ac:a6: 8e:7f:39:9c:92:d5:68:be:66:4d:13:5e:2d:26:5c: 8c:99:b6:7e:06:6c:58:71:7e:24:bc:0f:de:0d:8f: 18:84:90:7d:43:13:7d:24:88:6e:36:58:a7:f4:df: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E1:C7:41:05:01:31:02:1E:0E:29:0F:59:CE:9D:21:A7:F4:AE:1F X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:05:60:a0:85:eb:d2:75:c9:b8:f8:95:8e:bb:4f:d8:12:e6: 1d:b1:51:57:5e:40:dd:e2:7a:14:56:24:77:31:25:b2:96:10: 74:52:5b:fa:11:7e:f3:cc:7b:e7:0e:3b:57:46:52:58:ed:de: 50:c5:df:bb:ca:ba:02:b5:7f:27:0d:8d:3a:a6:9e:02:aa:1e: 20:48:db:91:d3:31:5c:72:de:ad:8c:72:e8:e1:e1:ce:6f:71: c2:6d:06:37:98:66:85:1d:71:b9:eb:7f:09:6d:7d:79:d2:e2: e9:f1:c0:c1:d7:54:df:c6:a9:2b:cd:70:07:4e:8c:99:1c:a6: d9:dd:1a:bf:72:2e:64:fa:45:2b:02:be:ce:c1:9b:8b:90:2b: 8c:2b:b4:73:a7:32:12:d7:4b:38:5f:42:c6:73:81:f8:5c:e4: 90:86:9b:95:cb:e4:49:3f:00:18:7a:ef:92:a0:28:a8:cf:40: 32:09:02:c8:76:04:2b:60:ce:0b:5c:03:5a:3f:5c:ec:24:a2: 8e:53:b8:d0:b6:78:ff:d9:12:91:09:f7:bf:1a:b5:97:98:3a: bb:ad:e2:aa:21:52:cc:ac:17:cc:d8:f5:9a:c4:08:03:ea:fb: d2:39:96:09:c1:0b:14:e4:11:19:fd:82:de:39:77:05:8c:d9: 44:66:cc:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9O6BUFOn/vWg2qSBDZBKv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwNzExMDIwMTAwWhcNMjYwNzEyMDIwMTAwWjAzMTEwLwYDVQQD EygwNmUxYzc0MTA1MDEzMTAyMWUwZTI5MGY1OWNlOWQyMWE3ZjRhZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJLMGN66UOvpPfmqxOBfDxXtJ3gA uKQtW2Bk54HnlKIWA6BUd8c+KEVCWdV2IiWY8hmHKxGAr4gfDHg4mZjr/ZJViC1U ys8w197+C0ef7kLGc2d6BgnlApSF4RTpN/s+SXCmN87QVe64kcMq/YNIGXGW9sAs 6OgJRnq11pNkqFORnUiOtLdJLvtjLcyvG+4nCpqbMKcfcKig3uoob03gJ4rTV7HZ FaNELGP+ABLxHXseir/6zvIPWE7pPggT6oQPx0K5vVpqZPfUv2Ez2y8lrKaOfzmc ktVovmZNE14tJlyMmbZ+BmxYcX4kvA/eDY8YhJB9QxN9JIhuNlin9N/4nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbhx0EFATECHg4pD1nOnSGn9K4fMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAVgoIXr 0nXJuPiVjrtP2BLmHbFRV15A3eJ6FFYkdzElspYQdFJb+hF+88x75w47V0ZSWO3e UMXfu8q6ArV/Jw2NOqaeAqoeIEjbkdMxXHLerYxy6OHhzm9xwm0GN5hmhR1xuet/ CW19edLi6fHAwddU38apK81wB06MmRym2d0av3IuZPpFKwK+zsGbi5ArjCu0c6cy EtdLOF9CxnOB+FzkkIablcvkST8AGHrvkqAoqM9AMgkCyHYEK2DOC1wDWj9c7CSi jlO40LZ4/9kSkQn3vxq1l5g6u63iqiFSzKwXzNj1msQIA+r70jmWCcELFOQRGf2C 3jl3BYzZRGbMFw== -----END CERTIFICATE-----Generated at Sat Jul 11 06:23:10 2026 by rpki-client