$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: Uf7JtjSD2Rwss0sy8HDEzYKciGSyeZaiGmZa7djbUvI= Subject key identifier: C2:84:84:EE:7F:24:44:99:F2:A4:9A:D4:B2:A8:03:11:EE:FC:55:E5 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 01A0CF6CD7A65463325B1ADB91FC58C1871D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 031A Signing time: Wed 23 Sep 2026 18:00:11 +0000 Manifest this update: Wed 23 Sep 2026 18:00:11 +0000 Manifest next update: Thu 24 Sep 2026 18:00:11 +0000 Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: 3aRAJj3uarVjbVShuy1QmS1ABjZAMheL2mByTpObvgM=) 2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 13: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:6c:d7:a6:54:63:32:5b:1a:db:91:fc:58:c1:87:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Sep 23 18:00:11 2026 GMT Not After : Sep 24 18:00:11 2026 GMT Subject: CN=c28484ee7f244499f2a49ad4b2a80311eefc55e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:7f:06:9b:2a:33:d0:08:92:1e:f5:71:43: af:d6:6f:c6:d0:d1:46:83:21:ad:3f:2f:96:67:86: 79:49:2e:eb:b0:49:db:7b:82:ec:0b:05:aa:eb:87: a0:ed:9b:fc:a9:75:cc:5a:c6:b5:8a:22:54:49:f3: 8a:b6:84:2e:1f:e7:ff:f3:83:c9:ed:b0:08:16:64: f5:fe:45:96:48:ad:f9:3a:a9:b7:e8:c2:38:d5:1d: 97:82:34:ed:cd:a4:de:8e:d0:92:cd:8a:d1:d8:65: 01:6d:b5:25:ed:36:c4:7b:19:3c:a3:e4:77:8a:72: 16:8f:cc:4b:89:df:ec:d2:19:2e:19:df:c8:73:11: a0:9f:2d:28:f9:91:ad:e3:fa:56:43:df:ce:95:99: 2b:2c:63:60:84:9f:13:e4:c4:5f:2a:60:1c:5f:f7: 39:96:12:35:46:04:51:48:43:85:5c:f3:58:9b:d0: 91:02:6e:e9:fd:9d:03:d7:af:66:58:e5:fc:97:d8: 7a:59:ea:d6:dc:be:06:7e:3b:9b:34:ee:07:88:56: e3:ca:02:66:d3:99:a0:ec:a2:67:17:dc:a1:a6:ec: 12:c5:75:42:4d:b9:58:c4:39:99:2b:4c:7b:51:83: b6:a4:59:cd:8a:58:9a:fc:97:f4:4b:b5:db:fa:45: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:84:84:EE:7F:24:44:99:F2:A4:9A:D4:B2:A8:03:11:EE:FC:55:E5 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:b8:0f:a4:66:f7:1f:f2:d3:c1:00:4d:0e:de:c6:b8:be: b5:7f:05:8d:51:97:c2:de:21:ca:07:41:f0:1e:02:38:d7:55: 8b:1c:98:dc:92:e2:e8:a5:0f:eb:6d:e9:0d:1c:e6:7a:13:a2: 6a:fd:67:77:fe:ed:eb:09:a2:e2:84:c3:21:bb:d4:7e:6b:b4: 82:69:21:a3:45:fa:80:89:3c:0c:d7:af:e5:ae:68:b0:cc:93: 24:9d:bd:fd:40:65:14:2e:0e:88:b8:8d:76:6e:67:83:41:55: e4:9f:69:94:09:dc:62:20:0a:d8:da:98:83:b3:ea:ba:92:bd: 30:8e:ef:e3:f1:27:03:18:fd:42:18:09:cd:86:b0:5c:e4:49: 24:09:19:94:e7:54:e2:c0:07:40:ea:10:98:ab:bd:21:8b:0d: b3:2c:cf:71:60:ef:4a:f3:4f:ba:6a:56:c0:13:92:35:cb:fe: fa:ea:19:db:e4:a2:d2:7b:13:d8:51:bc:b7:2f:4c:79:39:ec: 7a:3f:cd:d0:1f:a9:72:f9:2c:fd:30:fd:dd:b2:6a:b9:14:1a: f7:53:f9:49:01:8a:26:1b:23:c8:c1:fe:45:10:d7:40:ec:dd: 0e:d6:35:dc:31:7e:3f:dd:24:f9:a4:f8:c3:92:32:9c:b2:dc: e9:57:04:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPbNemVGMyWxrbkfxYwYcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwOTIzMTgwMDExWhcNMjYwOTI0MTgwMDExWjAzMTEwLwYDVQQD EyhjMjg0ODRlZTdmMjQ0NDk5ZjJhNDlhZDRiMmE4MDMxMWVlZmM1NWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuh/BpsqM9AIkh71cUOv1m/G0NFG gyGtPy+WZ4Z5SS7rsEnbe4LsCwWq64eg7Zv8qXXMWsa1iiJUSfOKtoQuH+f/84PJ 7bAIFmT1/kWWSK35Oqm36MI41R2XgjTtzaTejtCSzYrR2GUBbbUl7TbEexk8o+R3 inIWj8xLid/s0hkuGd/IcxGgny0o+ZGt4/pWQ9/OlZkrLGNghJ8T5MRfKmAcX/c5 lhI1RgRRSEOFXPNYm9CRAm7p/Z0D169mWOX8l9h6WerW3L4GfjubNO4HiFbjygJm 05mg7KJnF9yhpuwSxXVCTblYxDmZK0x7UYO2pFnNilia/Jf0S7Xb+kUXQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKEhO5/JESZ8qSa1LKoAxHu/FXlMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/+4D6Rm 9x/y08EATQ7exri+tX8FjVGXwt4hygdB8B4CONdVixyY3JLi6KUP623pDRzmehOi av1nd/7t6wmi4oTDIbvUfmu0gmkho0X6gIk8DNev5a5osMyTJJ29/UBlFC4OiLiN dm5ng0FV5J9plAncYiAK2NqYg7PqupK9MI7v4/EnAxj9QhgJzYawXORJJAkZlOdU 4sAHQOoQmKu9IYsNsyzPcWDvSvNPumpWwBOSNcv++uoZ2+Si0nsT2FG8ty9MeTns ej/N0B+pcvks/TD93bJquRQa91P5SQGKJhsjyMH+RRDXQOzdDtY13DF+P90k+aT4 w5IynLLc6VcELw== -----END CERTIFICATE-----Generated at Wed Sep 23 23:06:07 2026 by rpki-client