
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json)
Hash identifier: px89e2JFadvmn586i9B5iL0wL0Ojk8RR/C90h1qCGLk=
Subject key identifier: 45:70:47:BA:D0:DD:B0:28:0C:38:3E:B8:F9:F4:F3:CB:27:CB:6C:2C
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 01A1DA5C8949B81778248F743805B0E49032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
Manifest number: 0366
Signing time: Sat 14 Nov 2026 14:00:59 +0000
Manifest this update: Sat 14 Nov 2026 14:00:59 +0000
Manifest next update: Sun 15 Nov 2026 14:00:59 +0000
Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=)
2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=)
3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=)
4: 9CPMn8n9A5mjkPe1SFXuL0mKi4I.roa (hash: D4EraHxT4/ppNGkdi8N5s7eEH3KKmP9mBFsVKAr04RU=)
5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: 1uRa/2VunVISGGtjj6LXxzJhuv0/91GzRbkTJzqCTCU=)
6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=)
7: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=)
8: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=)
9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=)
10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=)
11: oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa (hash: 2sttQ/LaGMOGWj3sxLpiozuHzg1tWCewZ5VkHDFqrH4=)
12: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=)
13: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:89:49:b8:17:78:24:8f:74:38:05:b0:e4:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Nov 14 14:00:59 2026 GMT
Not After : Nov 15 14:00:59 2026 GMT
Subject: CN=457047bad0ddb0280c383eb8f9f4f3cb27cb6c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:a9:a8:c0:36:42:59:ba:78:8f:89:d4:d4:
fb:d1:c8:18:f0:02:54:dd:93:2a:c1:93:82:45:a3:
60:0b:5c:aa:13:07:df:6b:ac:62:6b:d6:99:b3:7f:
66:75:2e:f7:7d:26:45:2b:37:de:8f:14:31:63:fb:
d2:2e:ff:3d:bc:8e:8b:fe:ba:d7:2e:92:3a:17:82:
67:f0:33:75:52:5c:7a:46:53:b5:43:ca:1d:7e:23:
47:34:4b:42:51:a8:ec:ae:bb:26:6d:ad:1a:a5:09:
44:dc:aa:59:66:47:5b:62:86:38:94:de:31:76:1f:
61:d5:07:35:d2:00:2f:4c:0b:04:4c:ee:45:a3:cc:
91:1a:f6:e5:69:a6:50:ea:67:5e:67:0b:44:29:1e:
31:a1:70:71:c5:33:85:bd:40:b7:5b:63:4a:36:68:
89:cd:7a:8a:9c:64:cd:cc:50:63:09:8c:ec:89:a8:
50:17:83:9e:b6:58:61:be:0a:34:2c:dc:f0:90:ee:
d5:df:7a:b7:6b:9f:0a:90:08:3b:dc:a3:1d:b3:d6:
d9:e4:d0:96:2c:1e:54:d9:91:c2:73:b7:f2:e6:f3:
b3:8d:f5:b6:a3:ea:0f:a8:40:ab:e4:09:9d:17:8e:
ae:f2:94:00:39:39:bf:ef:fb:b9:0c:5b:67:9b:7a:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:70:47:BA:D0:DD:B0:28:0C:38:3E:B8:F9:F4:F3:CB:27:CB:6C:2C
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:58:ae:d5:95:ac:13:ab:df:27:6c:d6:8e:f8:b7:88:21:38:
98:14:2d:1b:35:1f:8c:ed:2c:42:ac:28:f9:ed:24:c3:de:e4:
76:54:e6:6f:11:5c:28:b1:9c:89:b9:d3:44:3e:b8:eb:a8:0d:
52:9e:73:b7:7f:df:eb:b7:1e:af:f5:e9:d7:14:0e:95:7c:b6:
85:1c:f8:9e:52:9c:14:67:d9:e1:ac:17:20:a1:c2:41:1b:cd:
eb:60:3e:a8:ea:0b:c0:b4:03:27:00:0c:50:f3:5e:01:06:2d:
b8:68:bb:a9:a3:6e:85:23:46:6a:68:6f:e9:71:83:45:d1:6f:
d4:9b:0d:58:ac:16:33:20:f6:04:2b:8c:68:90:73:6e:dc:a1:
83:c5:60:e3:23:a0:92:fe:64:a6:0e:dd:1a:1d:b1:b6:a5:43:
b5:da:41:07:0c:b1:f6:f4:ea:db:37:54:d8:d3:f7:02:ee:34:
d3:9d:e7:f1:14:b7:44:e9:35:d0:e4:a6:fb:f1:8b:8e:fd:3c:
03:44:ef:f4:a0:0a:73:1a:18:5c:e5:d9:26:b5:60:05:72:4a:
18:30:15:c9:c8:0e:b4:93:f0:83:1a:60:23:85:ba:c1:e3:5c:
42:59:90:fb:c4:d7:9e:c8:6a:2f:c2:15:8e:38:3a:90:a7:af:
2c:4f:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:22:40 2026 by rpki-client