$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: RxGxUxyU0/UrbILs+GmNcLcTXrA/AiSU+ybDMY3QjXE= Subject key identifier: A9:AB:F5:92:2B:FE:2C:A1:26:29:F9:39:C6:56:F3:99:FA:B7:FC:4F Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 01A0CE9164026DCFAA7B3050AF2A20BE2356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 02D8 Signing time: Wed 23 Sep 2026 14:00:29 +0000 Manifest this update: Wed 23 Sep 2026 14:00:29 +0000 Manifest next update: Thu 24 Sep 2026 14:00:29 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: CZPjU68izhp/yLh25l0HXO3+Muu9pK3QFjvbmG1ofUw=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: JsPIoXS0PpUsyOfC959Y4j3xCwM.roa (hash: BX1vpydloz/So1cOf6efq9hS22PCaYbgOF7mgCl+KYc=) 9: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=) 10: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=) 11: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 12: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 13: _zcItGlmx6998FM_OkVMktHXtJY.roa (hash: BVU2FfRsrCVxlC5hx2l9rOZ/f3ofzH78ETxGPtN8M6c=) 14: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 15: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 16: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:91:64:02:6d:cf:aa:7b:30:50:af:2a:20:be:23:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Sep 23 14:00:29 2026 GMT Not After : Sep 24 14:00:29 2026 GMT Subject: CN=a9abf5922bfe2ca12629f939c656f399fab7fc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:76:e5:3c:05:4a:39:6d:ce:9c:f7:17:b4: 49:07:a0:07:27:a5:63:74:40:87:f8:c2:82:fc:74: bd:06:f9:1d:87:bb:e7:fa:16:77:43:6d:e4:29:f0: a1:22:b8:3c:8c:02:8b:9d:7e:13:34:6c:86:af:c6: 24:69:b5:9c:50:42:85:00:8d:35:12:71:af:67:89: d8:11:da:14:f9:1c:82:11:44:c4:0a:e2:34:2c:93: 07:0f:d8:7b:08:5c:70:0f:60:c0:78:50:cd:68:34: 16:86:22:1e:b1:4e:54:6b:e3:92:65:5a:b8:8d:34: 13:12:1d:fd:51:03:bf:60:3d:47:31:ea:9a:7e:32: 22:91:b4:4e:c0:8d:4e:35:45:9b:e1:48:40:99:3b: ee:18:48:d4:45:5f:54:a9:95:10:c1:67:19:22:ba: 0c:2a:78:92:25:9b:21:63:c0:ff:32:d5:9b:e9:12: a0:45:e6:51:fc:9c:36:ee:ab:9a:51:90:57:19:82: bc:4a:75:1a:8c:bf:76:9e:3f:dd:ba:ae:75:74:c8: 6a:68:48:f4:7f:ae:08:70:6c:6c:ce:db:90:1b:e8: 57:79:12:ca:7e:82:5e:96:93:6e:d0:a5:5c:36:f0: 76:76:17:7e:83:50:70:d4:2b:59:c9:5c:d4:ab:95: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AB:F5:92:2B:FE:2C:A1:26:29:F9:39:C6:56:F3:99:FA:B7:FC:4F X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:33:0f:bc:9f:d6:75:b2:6a:00:e2:09:9c:5c:98:1e:92:3a: f1:34:b2:e4:55:c2:46:37:7b:2d:98:50:6e:78:f1:18:08:bf: bc:b7:82:2d:be:c4:20:65:00:56:f1:d1:ca:d5:49:51:f3:42: 24:45:b2:7b:95:21:b8:02:dd:98:18:ad:f5:b6:7d:9c:c5:8d: 6e:ea:4e:8d:b0:2d:55:47:56:db:fa:0e:a8:99:45:69:5d:ff: ee:dd:fd:26:fc:f4:c0:b8:ea:d8:3d:28:75:9e:ce:63:3b:52: 1d:ba:11:79:79:a1:41:4e:20:b8:30:90:d0:48:14:66:74:27: 4c:e2:93:29:8b:53:7d:e2:7c:ef:df:ca:92:63:b9:52:bf:df: b8:be:99:ec:49:8e:7c:f8:94:12:74:13:42:d2:a6:17:a2:0e: 6c:ab:77:43:1e:d1:71:9f:9e:d7:49:51:bc:23:74:c0:09:5f: 6b:57:3f:b6:ed:a6:a3:9d:8c:e2:77:41:e3:b0:1a:8c:f5:09: c5:07:e9:95:51:e2:dd:27:79:df:99:38:e4:dd:5d:41:18:e9: e5:f4:00:ad:37:eb:a3:29:ca:c8:29:5a:0c:5c:04:06:82:f7: 9e:4e:d8:9c:8b:e3:cb:66:26:37:63:2c:6e:cf:82:df:b8:cc: b8:0c:ab:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOkWQCbc+qezBQryogviNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwOTIzMTQwMDI5WhcNMjYwOTI0MTQwMDI5WjAzMTEwLwYDVQQD EyhhOWFiZjU5MjJiZmUyY2ExMjYyOWY5MzljNjU2ZjM5OWZhYjdmYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstp25TwFSjltzpz3F7RJB6AHJ6Vj dECH+MKC/HS9Bvkdh7vn+hZ3Q23kKfChIrg8jAKLnX4TNGyGr8YkabWcUEKFAI01 EnGvZ4nYEdoU+RyCEUTECuI0LJMHD9h7CFxwD2DAeFDNaDQWhiIesU5Ua+OSZVq4 jTQTEh39UQO/YD1HMeqafjIikbROwI1ONUWb4UhAmTvuGEjURV9UqZUQwWcZIroM KniSJZshY8D/MtWb6RKgReZR/Jw27quaUZBXGYK8SnUajL92nj/duq51dMhqaEj0 f64IcGxsztuQG+hXeRLKfoJelpNu0KVcNvB2dhd+g1Bw1CtZyVzUq5UwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmr9ZIr/iyhJin5OcZW85n6t/xPMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzMPvJ/W dbJqAOIJnFyYHpI68TSy5FXCRjd7LZhQbnjxGAi/vLeCLb7EIGUAVvHRytVJUfNC JEWye5UhuALdmBit9bZ9nMWNbupOjbAtVUdW2/oOqJlFaV3/7t39Jvz0wLjq2D0o dZ7OYztSHboReXmhQU4guDCQ0EgUZnQnTOKTKYtTfeJ879/KkmO5Ur/fuL6Z7EmO fPiUEnQTQtKmF6IObKt3Qx7RcZ+e10lRvCN0wAlfa1c/tu2mo52M4ndB47AajPUJ xQfplVHi3Sd535k45N1dQRjp5fQArTfroynKyClaDFwEBoL3nk7YnIvjy2YmN2Ms bs+C37jMuAyrsA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:18:06 2026 by rpki-client