$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: JaU22zJdtlZrKDUjWGdlkDSs61Lr6UXgfMdB1jKggnw= Subject key identifier: C9:00:54:7F:C7:18:0B:61:63:D9:74:03:4A:33:25:AF:7D:19:18:E9 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A0D2377A6B79C130AAB40F4C55B2547D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 125F Signing time: Thu 24 Sep 2026 07:00:46 +0000 Manifest this update: Thu 24 Sep 2026 07:00:46 +0000 Manifest next update: Fri 25 Sep 2026 07:00:46 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: IJxleIKE7_Yq4BnH6TRa6l2d3Gk.roa (hash: y9Axh/mWQdAs8Y1TTOHiGvpIYZwxkG2h6joLIxU4xas=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 5: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 6: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 7: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 8: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: MD7fVkmcpzVSFNeFm1jwpHP4qW1h4jvgAYnUehwMTMk=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 12: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:37:7a:6b:79:c1:30:aa:b4:0f:4c:55:b2:54:7d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Sep 24 07:00:46 2026 GMT Not After : Sep 25 07:00:46 2026 GMT Subject: CN=c900547fc7180b6163d974034a3325af7d1918e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:74:ff:0f:61:9f:29:03:37:b0:aa:fc:a2:b8: 81:65:fe:ae:b6:8a:6a:6b:69:1e:5f:96:02:db:c8: bc:91:3a:d3:20:45:99:23:e3:ca:90:9d:c7:95:5a: 11:8d:49:3f:46:2e:7a:c3:31:a5:12:0e:20:f5:11: 1c:bb:0a:cd:79:f7:85:77:ec:91:77:6b:45:61:a0: 30:b5:6d:10:fd:6c:f7:15:a8:78:97:6b:4a:4d:44: 30:16:17:d8:92:b9:f7:99:ee:cf:f9:a4:f8:1f:24: 08:50:0a:00:e1:66:92:ed:2a:06:f6:34:a1:c8:0b: 6a:6a:44:32:6e:4e:b6:3e:3a:92:b0:84:3b:36:9d: 6e:99:fa:5d:14:55:30:d0:a0:4d:15:c6:b1:9c:e0: 03:58:de:ef:8d:6d:74:40:51:a7:80:60:8f:9d:93: b4:c7:af:18:3d:ae:91:c9:68:95:10:d3:62:83:0e: f3:c4:7b:fe:1e:0a:69:75:5a:15:be:8e:c0:ff:64: 50:9d:87:8b:ed:04:f3:7c:de:80:cb:61:b0:4c:31: ba:57:31:b7:64:d1:59:31:9e:80:3f:91:47:6d:8b: 7c:b9:0b:fd:44:ee:c6:79:7c:a8:6e:7e:fd:9b:d0: 6c:c6:36:83:d4:b1:b3:09:9b:4f:0a:2c:65:0f:ac: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:54:7F:C7:18:0B:61:63:D9:74:03:4A:33:25:AF:7D:19:18:E9 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d2:c6:2b:ab:6d:1a:aa:53:c3:57:54:dc:cb:f3:e5:ec:5f: 30:c8:4c:53:70:91:04:6f:93:c8:e1:db:59:7e:71:b2:e6:e3: 2a:58:79:d3:0f:bd:00:4e:0b:dd:32:cf:bc:f3:60:e6:59:81: 1d:33:ed:77:64:79:8e:dd:28:ba:86:40:90:43:f4:23:11:57: 74:19:cd:81:be:bd:2e:f0:ce:11:f1:d4:c1:32:8e:89:7e:a3: 50:a9:ba:88:18:d3:30:0e:87:32:00:e7:34:f1:59:0d:21:be: 0f:18:a4:c5:f3:1e:3e:33:d1:49:c7:6f:75:be:ea:da:be:e1: 75:ed:ec:6b:86:11:41:fb:b5:7e:17:5f:0b:0a:43:03:ac:39: ae:78:75:32:61:60:ca:66:0d:d0:ee:66:f0:1b:cc:3b:e8:0e: ef:29:f1:11:02:33:96:51:91:22:33:0b:05:37:c2:75:e2:fd: 51:80:29:1e:21:8c:7e:84:84:45:73:a6:5e:ed:0c:c1:12:d1: 5e:3f:8e:91:d3:84:8f:de:cc:bf:bc:af:27:e6:fe:ea:c4:6a: c1:d2:4c:23:6d:29:05:fb:29:da:7f:4e:db:47:d6:f5:55:c0: b1:c8:f5:44:8a:fd:37:4e:b0:cd:fe:f2:60:e7:01:82:b5:76: dc:58:58:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSN3precEwqrQPTFWyVH1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwOTI0MDcwMDQ2WhcNMjYwOTI1MDcwMDQ2WjAzMTEwLwYDVQQD EyhjOTAwNTQ3ZmM3MTgwYjYxNjNkOTc0MDM0YTMzMjVhZjdkMTkxOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33T/D2GfKQM3sKr8oriBZf6utopq a2keX5YC28i8kTrTIEWZI+PKkJ3HlVoRjUk/Ri56wzGlEg4g9REcuwrNefeFd+yR d2tFYaAwtW0Q/Wz3Fah4l2tKTUQwFhfYkrn3me7P+aT4HyQIUAoA4WaS7SoG9jSh yAtqakQybk62PjqSsIQ7Np1umfpdFFUw0KBNFcaxnOADWN7vjW10QFGngGCPnZO0 x68YPa6RyWiVENNigw7zxHv+HgppdVoVvo7A/2RQnYeL7QTzfN6Ay2GwTDG6VzG3 ZNFZMZ6AP5FHbYt8uQv9RO7GeXyobn79m9BsxjaD1LGzCZtPCixlD6xJ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkAVH/HGAthY9l0A0ozJa99GRjpMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNLGK6tt GqpTw1dU3Mvz5exfMMhMU3CRBG+TyOHbWX5xsubjKlh50w+9AE4L3TLPvPNg5lmB HTPtd2R5jt0ouoZAkEP0IxFXdBnNgb69LvDOEfHUwTKOiX6jUKm6iBjTMA6HMgDn NPFZDSG+DxikxfMePjPRScdvdb7q2r7hde3sa4YRQfu1fhdfCwpDA6w5rnh1MmFg ymYN0O5m8BvMO+gO7ynxEQIzllGRIjMLBTfCdeL9UYApHiGMfoSERXOmXu0MwRLR Xj+OkdOEj97Mv7yvJ+b+6sRqwdJMI20pBfsp2n9O20fW9VXAscj1RIr9N06wzf7y YOcBgrV23FhYxA== -----END CERTIFICATE-----Generated at Thu Sep 24 12:01:41 2026 by rpki-client