$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: pryGBcevGSZGOPBcuvvF/brqYvLxfV3aq7+BA950RCE= Subject key identifier: 96:BF:B5:E3:A4:4A:C9:3E:D1:8E:63:7B:9F:F2:E7:01:45:DC:34:FD Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 01A02921CF52D2A429CDE112EF0F1DAF8469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1A20 Signing time: Sat 22 Aug 2026 11:01:16 +0000 Manifest this update: Sat 22 Aug 2026 11:01:16 +0000 Manifest next update: Sun 23 Aug 2026 11:01:16 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: YcEjoKia5XePYixsPuaInlmNNfraEm42tLUYvDsaC6I=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:29:21:cf:52:d2:a4:29:cd:e1:12:ef:0f:1d:af:84:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Aug 22 11:01:16 2026 GMT Not After : Aug 23 11:01:16 2026 GMT Subject: CN=96bfb5e3a44ac93ed18e637b9ff2e70145dc34fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:d0:53:21:9c:67:e1:91:6a:24:1d:3b:9f: 9d:b4:6f:25:07:25:73:3d:f8:bb:f4:51:04:d5:27: a2:84:98:37:5a:65:6d:5d:43:2d:1c:03:c0:b7:28: e6:cb:b2:2b:8b:bb:b4:29:94:b4:65:60:87:fc:9e: 2f:5c:bc:e4:09:0b:6e:b0:80:ce:da:51:54:30:74: 1a:80:f6:38:1e:17:7b:ba:53:06:6d:ea:68:b3:f3: 8b:e3:be:6d:ba:9d:3f:1a:ad:2e:28:c7:2e:04:49: 41:bf:d7:2c:49:c2:c4:7e:12:d0:47:66:e3:34:93: 9b:59:c9:9a:6f:cb:c3:ed:ac:71:99:d4:98:e7:7c: fc:37:0f:ff:47:c5:07:d4:91:ad:bf:4c:be:23:fd: 7d:d2:d9:37:20:38:c5:00:bc:e8:b8:65:d9:b2:83: 45:5c:7d:c7:0e:b6:6b:d8:3a:34:67:7a:9e:72:5b: 98:99:69:52:1d:94:be:b5:af:98:bd:c0:2d:c6:9d: 5d:13:4c:23:a3:58:a3:78:5a:21:78:89:85:6a:9b: c0:ba:0f:65:9d:a0:cc:5c:a4:b6:b5:f9:44:d4:c6: 83:dd:15:3e:bd:60:9e:e4:68:3d:c8:de:71:c8:f7: dd:b5:08:1e:0d:f5:b5:b6:4f:1f:a7:40:13:99:a4: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:B5:E3:A4:4A:C9:3E:D1:8E:63:7B:9F:F2:E7:01:45:DC:34:FD X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:8c:e5:0a:d5:83:12:9a:21:5f:9c:6a:75:4c:67:04:c4:2a: 13:b6:4e:93:8d:e7:5b:95:83:3e:63:a9:d3:77:2d:2a:22:4b: e0:0c:cd:6b:51:8c:d0:9a:26:5f:39:27:c7:9a:c2:8d:25:bb: 58:c2:48:9a:78:80:29:9b:c9:d7:e9:d7:5c:5b:56:bb:b3:63: ed:82:bd:7c:4b:2a:16:ba:01:e0:37:30:eb:11:f7:cc:c8:88: 44:a8:b5:15:17:f0:9f:ae:6c:54:80:15:fe:9f:13:bb:3c:71: b7:d9:fd:e7:cd:2b:3e:56:f4:4e:84:ee:e9:b7:9a:09:59:67: fa:4d:cd:81:a8:86:56:98:d3:cc:21:61:38:38:dd:07:39:79: 63:d2:72:65:c2:1b:7d:aa:54:fb:66:75:c5:63:e8:f9:49:13: d0:11:2d:13:dd:f6:ff:5e:9b:9f:97:d2:f1:54:3a:46:f0:3f: 61:6f:36:78:e1:9e:2c:3c:50:fc:95:2e:28:c6:10:ad:ef:05: ed:87:77:3c:92:d4:36:6c:55:75:46:fc:4f:4b:8c:ae:78:bf: 09:62:fc:29:56:c2:43:2b:1d:fe:36:3a:af:51:ee:e4:12:b4: 74:39:be:a4:c7:d9:ef:cd:59:df:20:01:8b:1e:fb:8a:ee:88: c4:3a:67:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaApIc9S0qQpzeES7w8dr4RpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwODIyMTEwMTE2WhcNMjYwODIzMTEwMTE2WjAzMTEwLwYDVQQD Eyg5NmJmYjVlM2E0NGFjOTNlZDE4ZTYzN2I5ZmYyZTcwMTQ1ZGMzNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18jQUyGcZ+GRaiQdO5+dtG8lByVz Pfi79FEE1SeihJg3WmVtXUMtHAPAtyjmy7Iri7u0KZS0ZWCH/J4vXLzkCQtusIDO 2lFUMHQagPY4Hhd7ulMGbepos/OL475tup0/Gq0uKMcuBElBv9csScLEfhLQR2bj NJObWcmab8vD7axxmdSY53z8Nw//R8UH1JGtv0y+I/190tk3IDjFALzouGXZsoNF XH3HDrZr2Do0Z3qecluYmWlSHZS+ta+YvcAtxp1dE0wjo1ijeFoheImFapvAug9l naDMXKS2tflE1MaD3RU+vWCe5Gg9yN5xyPfdtQgeDfW1tk8fp0ATmaSlFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa/teOkSsk+0Y5je5/y5wFF3DT9MB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4zlCtWD EpohX5xqdUxnBMQqE7ZOk43nW5WDPmOp03ctKiJL4AzNa1GM0JomXzknx5rCjSW7 WMJImniAKZvJ1+nXXFtWu7Nj7YK9fEsqFroB4Dcw6xH3zMiIRKi1FRfwn65sVIAV /p8Tuzxxt9n9580rPlb0ToTu6beaCVln+k3NgaiGVpjTzCFhODjdBzl5Y9JyZcIb fapU+2Z1xWPo+UkT0BEtE932/16bn5fS8VQ6RvA/YW82eOGeLDxQ/JUuKMYQre8F 7Yd3PJLUNmxVdUb8T0uMrni/CWL8KVbCQysd/jY6r1Hu5BK0dDm+pMfZ781Z3yAB ix77iu6IxDpnYw== -----END CERTIFICATE-----Generated at Sat Aug 22 17:15:57 2026 by rpki-client