$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: TBfFFF2jqn7Zo2oOYjjrCHqpBDSDxCJiQ0Ji3TE4sf8= Subject key identifier: F4:1C:82:48:A7:BE:EF:12:E3:10:9E:18:96:44:51:60:8F:02:08:E0 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 01A15E1EF09C7CDC2AC1C592D4CDC03ABE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1AC0 Signing time: Wed 21 Oct 2026 11:00:48 +0000 Manifest this update: Wed 21 Oct 2026 11:00:48 +0000 Manifest next update: Thu 22 Oct 2026 11:00:48 +0000 Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=) 2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=) 3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=) 4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=) 5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: FFKMUvUUuKuWUYzEMv2bb7lYt8htZ1UmM/K/veksO1I=) 6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=) 7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=) 8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=) 9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=) 10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=) 11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=) 12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=) 13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=) 14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=) 15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=) 16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=) 17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=) 18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=) 19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=) 20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=) 21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=) 22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=) 23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=) 24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:1e:f0:9c:7c:dc:2a:c1:c5:92:d4:cd:c0:3a:be:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Oct 21 11:00:48 2026 GMT Not After : Oct 22 11:00:48 2026 GMT Subject: CN=f41c8248a7beef12e3109e18964451608f0208e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:fc:b4:e1:e4:86:59:a5:6f:e3:bd:4a:61: 91:30:f7:7f:4b:57:d4:53:22:6a:8a:a8:00:32:fd: 61:a5:b3:99:ad:99:e8:88:c3:36:5e:40:c5:9d:6b: b0:2a:0e:ad:be:54:eb:c0:de:68:0c:4a:26:65:45: a0:e3:e3:11:36:bb:8d:43:fc:d2:bc:71:b5:45:ae: 75:a0:05:ec:e2:91:61:aa:d9:75:3c:6d:6c:81:69: 99:42:e9:ad:60:56:cc:6f:c5:56:45:0e:2a:67:0e: 0e:7a:1f:07:25:99:05:3e:8b:bf:23:ef:8e:68:21: 4b:2d:12:d1:53:3d:e2:24:cc:0b:c9:f8:eb:43:4a: e2:ca:9c:41:f0:0f:b0:ba:74:a6:15:91:44:4f:2d: 42:a3:96:c7:e9:9c:b9:4e:2a:dd:8e:37:93:9d:e8: eb:ae:e8:11:81:4b:26:a4:eb:da:61:15:a9:67:18: 94:5a:02:3b:ee:0c:76:7f:ac:7b:9f:f9:3e:16:ad: 96:21:e7:1f:e9:98:0d:6d:b8:ce:a7:50:42:82:99: 65:8a:5c:84:f7:c5:cd:18:fd:ba:9b:de:03:d0:3f: 14:7c:41:68:47:a5:f2:d9:c4:d8:ba:95:23:69:a1: 7c:33:db:30:cb:42:0b:5d:5e:16:16:e9:10:ea:74: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:82:48:A7:BE:EF:12:E3:10:9E:18:96:44:51:60:8F:02:08:E0 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:11:b4:cb:2d:67:fe:ed:bd:86:a9:f5:a7:7c:79:a6:09:68: 1b:4a:ce:52:fe:e5:c2:ae:9a:ad:79:16:b0:2c:85:2d:b6:f8: 82:59:bf:93:91:ca:6f:32:e2:51:81:2b:eb:1c:29:c8:cf:72: 42:0f:bb:20:a6:7c:21:f3:97:7a:05:9a:26:9c:e9:a6:e1:fd: 2f:ae:0c:61:c3:53:78:d8:41:17:fd:25:3e:af:5a:62:7c:0b: 7e:36:2a:e7:89:e8:ec:b3:c1:6c:96:60:9f:15:cd:cc:09:f5: 90:39:95:05:45:64:99:23:28:df:46:16:79:db:37:55:71:61: 0b:ef:94:b3:cb:1c:e7:1d:f4:99:92:f5:f8:0b:91:0e:7a:8a: de:18:4e:0b:5a:3d:4b:53:61:41:d0:b7:8d:67:94:d3:36:f7: e0:35:0c:14:b2:68:dc:13:fc:f7:15:8a:6a:14:5c:cd:04:4f: e1:95:9e:de:eb:54:15:34:87:73:3a:8d:1b:4d:fd:f8:4e:46: d2:68:7b:f0:7f:1e:47:8e:4f:5d:a3:84:f2:06:52:c3:7c:6e: 5e:c4:ef:4d:d2:e9:1d:fe:5d:80:83:34:ff:77:a6:fd:28:17: c2:2d:19:15:fa:34:44:fc:97:83:2d:a6:0b:ab:3d:3e:73:75: 5e:9e:85:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFeHvCcfNwqwcWS1M3AOr4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYxMDIxMTEwMDQ4WhcNMjYxMDIyMTEwMDQ4WjAzMTEwLwYDVQQD EyhmNDFjODI0OGE3YmVlZjEyZTMxMDllMTg5NjQ0NTE2MDhmMDIwOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya/8tOHkhlmlb+O9SmGRMPd/S1fU UyJqiqgAMv1hpbOZrZnoiMM2XkDFnWuwKg6tvlTrwN5oDEomZUWg4+MRNruNQ/zS vHG1Ra51oAXs4pFhqtl1PG1sgWmZQumtYFbMb8VWRQ4qZw4Oeh8HJZkFPou/I++O aCFLLRLRUz3iJMwLyfjrQ0riypxB8A+wunSmFZFETy1Co5bH6Zy5TirdjjeTnejr rugRgUsmpOvaYRWpZxiUWgI77gx2f6x7n/k+Fq2WIecf6ZgNbbjOp1BCgpllilyE 98XNGP26m94D0D8UfEFoR6Xy2cTYupUjaaF8M9swy0ILXV4WFukQ6nTX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQcgkinvu8S4xCeGJZEUWCPAgjgMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBG0yy1n /u29hqn1p3x5pgloG0rOUv7lwq6arXkWsCyFLbb4glm/k5HKbzLiUYEr6xwpyM9y Qg+7IKZ8IfOXegWaJpzppuH9L64MYcNTeNhBF/0lPq9aYnwLfjYq54no7LPBbJZg nxXNzAn1kDmVBUVkmSMo30YWeds3VXFhC++Us8sc5x30mZL1+AuRDnqK3hhOC1o9 S1NhQdC3jWeU0zb34DUMFLJo3BP89xWKahRczQRP4ZWe3utUFTSHczqNG039+E5G 0mh78H8eR45PXaOE8gZSw3xuXsTvTdLpHf5dgIM0/3em/SgXwi0ZFfo0RPyXgy2m C6s9PnN1Xp6FFA== -----END CERTIFICATE-----Generated at Wed Oct 21 21:14:35 2026 by rpki-client