$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: h355VgasySA/fPJjFRyOUkZRcIr7gj94aIR92su4Q2w= Subject key identifier: 8C:BD:E4:19:36:02:BC:B1:1B:08:00:42:7D:0B:87:77:05:B1:4D:3D Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01A1DE02E7D1CA404CE30B03F2FFAEE410EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 12EC Signing time: Sun 15 Nov 2026 07:01:34 +0000 Manifest this update: Sun 15 Nov 2026 07:01:34 +0000 Manifest next update: Mon 16 Nov 2026 07:01:34 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: SOXbFVybGJS2gJEA1qIMVgTW7BU.roa (hash: n/XE0/oiALBG0kf+SA+ACZ+OYx36zynBx+it6WapaE0=) 4: YvN3c5C0gSI56HIngcHs4vkpuog.roa (hash: ubAaTn/otWbgsyxFV8W1AJNCfa/GAwIx9VFNuKh67dU=) 5: _LICBjJZdcnVtv4XOgCo4SqTpuE.roa (hash: MGwX7NVampx3U/zgpZqPkbMuAGSccNzFT7L47j8N1WU=) 6: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (hash: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=) 7: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 8: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 9: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: evE6NiP321CjIKLzy7/zDiO5dpeM/Jf0bpI6Gx4ulkc=) 10: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 11: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 12: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (hash: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=) 13: wBGNlpBMOc6u-Aoc6MFRtqxE2ZQ.roa (hash: u+wT+BimsnSpg1n9wfO3eibMx6uV2+gDEF0IS+GeD+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:02:e7:d1:ca:40:4c:e3:0b:03:f2:ff:ae:e4:10:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Nov 15 07:01:34 2026 GMT Not After : Nov 16 07:01:34 2026 GMT Subject: CN=8cbde4193602bcb11b0800427d0b877705b14d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:c2:44:92:ea:71:d7:b0:41:fc:73:eb:62: 8c:72:dc:3f:5e:fb:4d:ad:40:a4:ce:cd:15:f1:7d: bb:55:5d:7d:97:e6:79:ee:b5:22:c6:00:00:22:30: 77:6f:64:83:bb:12:ee:51:97:b1:52:07:3f:8b:6e: 47:cd:10:a7:43:61:e6:45:5f:14:46:c1:56:b6:9d: 93:c4:7d:81:43:82:9d:25:2a:4e:47:4e:9e:de:e7: 12:70:4d:89:e1:2c:e9:23:65:8e:f1:f8:77:a4:16: 05:ec:cd:52:9f:6b:62:d8:23:c3:20:7f:6a:8f:86: 22:b9:31:25:fa:68:fd:b7:8a:33:05:44:1f:b9:0e: 2c:1d:64:31:d3:ff:a1:37:9d:51:98:16:f4:b1:fa: d2:09:16:6a:e9:f5:27:23:b4:90:44:11:06:27:9c: 0a:78:ae:f0:94:96:83:43:13:85:06:af:e5:f1:92: 25:8c:d5:38:3f:36:14:6a:44:08:59:48:19:df:e5: 10:ce:1e:90:59:32:59:92:f6:07:8e:56:8b:14:f2: 77:37:69:33:88:1b:7e:7c:03:d0:e5:90:42:01:fd: 83:53:02:4e:22:8a:ff:3c:9f:63:d6:95:bd:13:5d: a1:a5:8e:10:62:ec:6b:c6:a1:79:c5:69:e0:7c:16: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BD:E4:19:36:02:BC:B1:1B:08:00:42:7D:0B:87:77:05:B1:4D:3D X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c5:a0:46:c9:36:25:09:f0:de:58:60:cf:9a:af:ce:7a:23: 0b:0b:91:e8:87:de:87:e6:6d:c2:59:f5:e0:bf:67:62:e3:51: 5e:b5:dc:78:45:e3:19:96:d8:1e:1c:bd:7f:43:ca:5f:2a:74: af:a1:ed:c3:de:f5:22:1e:96:9b:41:38:4c:67:8a:75:ab:e2: 1c:00:5a:46:6c:02:01:ae:19:c1:0e:f8:d7:54:bb:e3:37:e4: 91:e0:f5:8f:6b:e3:87:94:7c:51:39:35:a3:93:2e:a7:a8:4b: e4:27:23:fa:46:66:ad:3b:4d:50:a7:ec:93:a1:47:1b:e7:2b: e9:25:23:92:8e:b7:4e:7f:50:c0:5d:55:a0:79:a7:3d:6f:a6: a3:72:e6:cc:c8:71:1a:19:c0:f6:c6:a0:b4:bb:0b:d5:1e:c8: c0:f6:90:40:11:2a:28:f1:3f:57:f0:85:9c:5a:5f:ac:88:48: 46:f2:f5:56:45:66:89:a5:7e:92:59:43:56:63:da:47:12:e1: 05:5e:9e:f5:90:81:be:6c:a2:be:ad:68:89:c6:14:ad:c1:57: f5:b4:b7:59:c9:64:5d:e2:67:d7:d6:8a:68:e5:62:3f:c1:e7: b4:af:e8:de:37:aa:b8:4a:8c:aa:90:13:a3:d1:b2:a3:54:8d: 21:69:76:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeAufRykBM4wsD8v+u5BDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYxMTE1MDcwMTM0WhcNMjYxMTE2MDcwMTM0WjAzMTEwLwYDVQQD Eyg4Y2JkZTQxOTM2MDJiY2IxMWIwODAwNDI3ZDBiODc3NzA1YjE0ZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJvCRJLqcdewQfxz62KMctw/XvtN rUCkzs0V8X27VV19l+Z57rUixgAAIjB3b2SDuxLuUZexUgc/i25HzRCnQ2HmRV8U RsFWtp2TxH2BQ4KdJSpOR06e3ucScE2J4SzpI2WO8fh3pBYF7M1Sn2ti2CPDIH9q j4YiuTEl+mj9t4ozBUQfuQ4sHWQx0/+hN51RmBb0sfrSCRZq6fUnI7SQRBEGJ5wK eK7wlJaDQxOFBq/l8ZIljNU4PzYUakQIWUgZ3+UQzh6QWTJZkvYHjlaLFPJ3N2kz iBt+fAPQ5ZBCAf2DUwJOIor/PJ9j1pW9E12hpY4QYuxrxqF5xWngfBZPPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy95Bk2AryxGwgAQn0Lh3cFsU09MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcWgRsk2 JQnw3lhgz5qvznojCwuR6Ifeh+Ztwln14L9nYuNRXrXceEXjGZbYHhy9f0PKXyp0 r6Htw971Ih6Wm0E4TGeKdaviHABaRmwCAa4ZwQ7411S74zfkkeD1j2vjh5R8UTk1 o5Mup6hL5Ccj+kZmrTtNUKfsk6FHG+cr6SUjko63Tn9QwF1VoHmnPW+mo3LmzMhx GhnA9sagtLsL1R7IwPaQQBEqKPE/V/CFnFpfrIhIRvL1VkVmiaV+kllDVmPaRxLh BV6e9ZCBvmyivq1oicYUrcFX9bS3WclkXeJn19aKaOViP8HntK/o3jequEqMqpAT o9Gyo1SNIWl26w== -----END CERTIFICATE-----Generated at Sun Nov 15 17:08:38 2026 by rpki-client