
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json)
Hash identifier: DG0pgYLJH09BoMMhZBDO/SYyssKOTIYQztKVqPc+j+A=
Subject key identifier: C8:D1:5C:56:80:5A:C7:94:F9:B9:50:26:93:A5:4E:10:62:E4:4B:05
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 019F905A986A657306FEE13D2352EA13B6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
Manifest number: 0231
Signing time: Thu 23 Jul 2026 19:01:23 +0000
Manifest this update: Thu 23 Jul 2026 19:01:23 +0000
Manifest next update: Fri 24 Jul 2026 19:01:23 +0000
Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=)
2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=)
3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=)
4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=)
5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: 2lilIeODzVnnX7cZFLsG/ed8uAz8z4EsYEn1GPB1ZtU=)
6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=)
7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=)
8: O-QEXm4qSbt72Nnk4qRQFwvPr_0.roa (hash: vVF+iuhTnkhVo+LKbluIv023EO5M+EyUgI75CD2LSB0=)
9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=)
10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=)
11: _zcItGlmx6998FM_OkVMktHXtJY.roa (hash: BVU2FfRsrCVxlC5hx2l9rOZ/f3ofzH78ETxGPtN8M6c=)
12: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=)
13: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=)
14: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=)
15: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:98:6a:65:73:06:fe:e1:3d:23:52:ea:13:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Jul 23 19:01:23 2026 GMT
Not After : Jul 24 19:01:23 2026 GMT
Subject: CN=c8d15c56805ac794f9b9502693a54e1062e44b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4a:33:c9:cb:e3:4d:14:78:8a:d8:59:3e:7f:
98:fb:35:2d:37:00:84:4a:6c:d9:e5:cb:30:5d:59:
96:85:27:26:e1:31:0a:fd:a9:7e:a3:23:43:01:29:
8d:d6:1f:3c:85:11:76:9c:fb:25:a8:48:bb:40:0d:
7d:e9:fb:76:b1:e4:21:85:e4:14:21:07:46:4d:a9:
4b:99:c6:06:2e:c5:11:a6:9e:bf:a6:ee:3d:74:67:
d6:fe:c0:96:75:e2:48:48:ee:5d:af:df:58:18:db:
d4:4f:4d:af:2c:9f:9e:9b:61:2c:44:30:6b:da:4e:
99:ac:36:28:a6:35:ad:75:17:38:86:2d:f4:75:2b:
c3:ad:47:b2:e9:5e:84:6d:81:25:11:fd:59:8b:46:
03:df:1a:b5:fa:cc:2e:39:7d:b2:de:cf:30:09:65:
d5:5d:5a:1f:b8:c3:30:d2:89:f2:8b:fb:8d:a7:f0:
e3:0a:ba:86:ff:b3:3f:a9:ac:24:29:d8:75:0b:b6:
8f:46:8f:48:a1:83:fa:f4:26:66:02:35:38:80:47:
ee:71:16:2d:83:dc:36:e8:79:39:4f:4a:fd:4d:42:
ba:86:99:4e:d2:a1:32:3c:82:b1:3f:6c:79:53:88:
c4:a7:f3:d4:4f:0c:0b:2d:44:ad:b6:11:9f:e7:9e:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:5C:56:80:5A:C7:94:F9:B9:50:26:93:A5:4E:10:62:E4:4B:05
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ed:4c:9c:ae:dc:6d:ab:19:84:85:66:92:6f:33:a2:f8:b9:
cb:35:d4:1b:74:4f:72:9a:69:28:83:66:d3:89:51:15:56:75:
76:d8:31:d2:8d:eb:fe:d8:c6:1b:1b:c8:56:d1:f0:56:55:7e:
be:eb:a2:66:fd:06:18:a0:99:da:c6:74:95:ec:02:cb:32:8b:
8a:bf:6e:34:2f:14:14:4d:4e:dc:44:f0:d9:c0:64:37:a0:44:
6c:48:cf:c9:72:63:55:60:93:cf:be:b9:50:52:6f:90:2b:a6:
31:c0:0b:4b:ea:bc:c1:3b:4a:aa:79:55:7a:39:4e:cc:0e:30:
8f:fa:d3:dc:7b:22:3f:26:c5:b9:73:10:d0:2d:62:9b:e0:f6:
71:05:26:5d:b5:6c:d6:3f:6b:31:e2:ea:66:c1:7e:40:ea:3f:
6a:d9:f1:d7:df:1c:b4:05:74:3e:43:fa:28:b4:e2:47:95:6c:
53:ad:b6:47:b6:3e:e1:30:1b:c0:c3:71:8c:1e:06:05:e1:86:
8e:27:8a:5a:6e:ab:98:29:f9:af:0d:01:69:55:4b:9d:78:8b:
74:c3:2f:8b:25:0f:15:e1:bd:f8:96:6e:8f:ee:28:7f:50:9f:
5b:c0:07:d8:7e:b9:6a:55:30:bb:b7:cf:98:11:97:82:cc:26:
a1:c4:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:48 2026 by rpki-client