$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: /DlGlhyreT8CIzrvbNNSfZr9I+q2B4UjsyKqoFkohFs= Subject key identifier: 47:3F:83:81:7D:FB:89:83:15:C7:BF:80:E0:E0:10:25:AD:6B:53:22 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019E1E34E2AB4237BA3CD0AF43E32DE14347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 10F5 Signing time: Tue 12 May 2026 22:00:42 +0000 Manifest this update: Tue 12 May 2026 22:00:42 +0000 Manifest next update: Wed 13 May 2026 22:00:42 +0000 Files and hashes: 1: 1YdqHceUTAJVaWEaWNHB657Hojk.roa (hash: M7yspIucYhPtZQOl9itMxGQaPaYB33ThzI2dg1R1O/8=) 2: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 3: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 4: ZodP2OgEV6Tcb8eizcTh60ow6rk.roa (hash: 2x8RsOXovbTACRckal+rSh/iwVBzDb5YrtolgSEcABM=) 5: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 6: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: D6TJhq7T34mDnlnLtGdx9P1QrbHANbo/rxij97eXFUo=) 8: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 9: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 10: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 11: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:34:e2:ab:42:37:ba:3c:d0:af:43:e3:2d:e1:43:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: May 12 22:00:42 2026 GMT Not After : May 13 22:00:42 2026 GMT Subject: CN=473f83817dfb898315c7bf80e0e01025ad6b5322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:19:23:c8:23:c7:07:4d:d3:33:7e:b0:73: 92:23:d9:ec:17:51:ea:66:0d:3d:83:9d:b7:5b:f6: 6d:fd:31:f2:bd:c8:df:34:0e:3e:71:81:df:6f:e0: dc:e9:95:bc:15:cf:c1:be:95:d2:ea:26:51:21:6a: 64:ad:60:0d:4e:37:e3:97:c0:cc:04:e0:f2:47:c1: 5b:18:b0:0d:51:3f:05:26:10:5c:8c:53:82:d7:ea: e9:c7:ad:34:11:41:bb:de:57:ed:94:7a:be:bc:b1: cd:24:07:82:3f:2b:ce:5d:f8:39:3a:88:99:10:e8: f2:13:89:36:52:80:5a:b0:c6:65:eb:c8:1f:5b:2b: da:93:aa:b8:fe:45:49:5b:81:35:a0:72:1c:f6:5a: 89:c0:7c:c0:c8:61:cb:cf:0c:f9:25:eb:d9:be:db: 9f:ec:a1:68:d8:da:37:33:78:a0:9c:c2:0d:aa:aa: e5:12:ba:a9:80:70:f8:ad:0b:01:c9:0c:16:88:ad: 48:9a:e3:94:82:47:87:70:79:ec:86:38:cc:19:08: 4d:a5:b7:ec:00:2e:b4:c5:23:94:86:bd:b1:66:93: 27:54:55:ef:24:6f:8a:39:c9:0e:7b:59:44:ff:99: eb:97:35:92:fa:26:ac:d4:6c:5d:c8:a5:0b:5a:94: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:83:81:7D:FB:89:83:15:C7:BF:80:E0:E0:10:25:AD:6B:53:22 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:75:2d:04:b6:6e:c9:14:94:3f:a8:03:b9:cd:2c:eb:26:15: 04:c5:17:44:2f:8c:4e:ca:12:ad:11:3b:50:65:1f:2f:70:c7: 75:75:11:41:66:07:3c:89:16:4b:c0:85:74:f1:6d:f7:a2:5f: df:6c:88:b5:65:ff:27:84:9c:9e:3a:b6:0d:f1:4b:df:66:41: a2:50:6b:05:61:ac:1b:27:ee:6a:54:67:78:dd:03:75:3a:34: 08:b8:84:4f:1d:23:1e:d6:ae:18:f4:01:9a:e2:c6:50:6a:19: a2:e1:94:ae:de:62:5d:ba:6f:a1:6a:f6:ad:8a:b5:1d:8d:e2: d5:10:4c:fe:33:cf:ee:f8:9e:a6:da:8d:de:c8:e9:c0:72:52: 73:79:29:ad:d1:f7:40:99:cc:b3:8d:64:ce:f9:45:13:42:be: 0f:68:c2:ef:26:63:f7:06:24:4c:99:99:a7:fe:4b:f7:ba:e2: 6e:5b:1e:87:f1:cc:91:50:42:90:55:a6:eb:8c:3f:52:6e:07: e5:3b:61:c0:a8:03:76:25:dd:d0:6a:f0:87:32:75:03:54:e5: a4:e6:cf:c6:80:95:94:b9:b5:27:6d:3a:c4:19:50:b4:e1:c9: a3:ea:3c:6b:2e:d9:de:4d:65:27:c7:86:21:c6:9b:17:44:1e: f4:3e:4d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNOKrQje6PNCvQ+Mt4UNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwNTEyMjIwMDQyWhcNMjYwNTEzMjIwMDQyWjAzMTEwLwYDVQQD Eyg0NzNmODM4MTdkZmI4OTgzMTVjN2JmODBlMGUwMTAyNWFkNmI1MzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlUZI8gjxwdN0zN+sHOSI9nsF1Hq Zg09g523W/Zt/THyvcjfNA4+cYHfb+Dc6ZW8Fc/BvpXS6iZRIWpkrWANTjfjl8DM BODyR8FbGLANUT8FJhBcjFOC1+rpx600EUG73lftlHq+vLHNJAeCPyvOXfg5OoiZ EOjyE4k2UoBasMZl68gfWyvak6q4/kVJW4E1oHIc9lqJwHzAyGHLzwz5JevZvtuf 7KFo2No3M3ignMINqqrlErqpgHD4rQsByQwWiK1ImuOUgkeHcHnshjjMGQhNpbfs AC60xSOUhr2xZpMnVFXvJG+KOckOe1lE/5nrlzWS+ias1GxdyKULWpQwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc/g4F9+4mDFce/gODgECWta1MiMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHUtBLZu yRSUP6gDuc0s6yYVBMUXRC+MTsoSrRE7UGUfL3DHdXURQWYHPIkWS8CFdPFt96Jf 32yItWX/J4Scnjq2DfFL32ZBolBrBWGsGyfualRneN0DdTo0CLiETx0jHtauGPQB muLGUGoZouGUrt5iXbpvoWr2rYq1HY3i1RBM/jPP7vieptqN3sjpwHJSc3kprdH3 QJnMs41kzvlFE0K+D2jC7yZj9wYkTJmZp/5L97riblseh/HMkVBCkFWm64w/Um4H 5TthwKgDdiXd0GrwhzJ1A1TlpObPxoCVlLm1J206xBlQtOHJo+o8ay7Z3k1lJ8eG IcabF0Qe9D5NLw== -----END CERTIFICATE-----Generated at Wed May 13 01:22:53 2026 by rpki-client