
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json)
Hash identifier: YEHiS2sw1Az7+k6aljvjknAFtMGwBoB/xczXSypTAIo=
Subject key identifier: 96:B8:00:9D:4B:61:8C:DB:20:00:59:10:08:DB:8F:FA:73:D5:85:09
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 01A1DD272B35F8E978589A56627D3C7227FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
Manifest number: 03A7
Signing time: Sun 15 Nov 2026 03:01:33 +0000
Manifest this update: Sun 15 Nov 2026 03:01:33 +0000
Manifest next update: Mon 16 Nov 2026 03:01:33 +0000
Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: k53Y85uK0NPdBH3RVehloa15XUAtxyGzhOK6yfO0Dz8=)
2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=)
3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=)
4: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=)
5: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=)
6: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=)
7: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=)
8: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=)
9: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=)
10: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=)
11: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=)
12: v-Tz4LNrg-fI0YtXfsTPB9CVhMc.roa (hash: udOow31/Ac3B4eRS03ZbNOgd/QrnseTxomOZNggmN6I=)
13: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:2b:35:f8:e9:78:58:9a:56:62:7d:3c:72:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Nov 15 03:01:33 2026 GMT
Not After : Nov 16 03:01:33 2026 GMT
Subject: CN=96b8009d4b618cdb2000591008db8ffa73d58509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:4a:50:e5:1e:bd:77:45:6b:f3:5c:fc:c5:
4a:3f:91:a0:a4:c0:9e:f8:48:55:cc:6a:36:36:12:
b0:5e:9b:5f:5d:2a:cd:f6:cf:83:bf:5a:2a:36:02:
0f:3d:a4:d1:92:1b:8b:18:86:27:6b:58:e8:98:88:
7c:62:5b:1f:32:ba:a9:a4:9e:64:b9:21:47:04:09:
ad:3a:b1:42:d8:4b:1d:e5:99:2d:48:b8:52:25:81:
a0:51:5c:7f:14:18:bf:0c:11:22:24:9c:49:c8:be:
6e:4d:04:6f:ba:f1:e3:56:94:4a:0f:24:e9:80:78:
6d:32:cb:16:11:f9:4d:c7:84:ab:8a:c7:58:4e:87:
9c:0a:6f:9c:06:b0:cd:97:ce:8e:7c:f3:42:43:7c:
55:6f:b9:7f:7c:d2:ad:f0:58:5c:2b:89:dc:d7:02:
f0:57:d9:21:31:e2:fc:e6:07:9d:65:50:58:21:09:
17:a4:98:31:cc:82:5f:1b:ba:4e:82:49:25:57:87:
e6:1a:f7:74:9d:1a:37:00:b3:ce:a5:4c:42:84:2d:
5e:5d:df:ab:0e:ab:3d:3c:91:6d:76:2d:fe:10:17:
16:32:c4:ce:85:fc:e0:e4:19:56:c7:7c:c7:08:be:
21:e5:f8:a9:1b:e3:a6:44:30:95:ef:7e:4b:e9:88:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:00:9D:4B:61:8C:DB:20:00:59:10:08:DB:8F:FA:73:D5:85:09
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:c9:09:df:aa:dd:5e:ad:0b:a3:b6:27:df:6b:ac:c8:73:
63:bb:ff:0a:88:75:ee:b4:ac:41:ea:e7:b6:78:51:75:44:37:
d7:de:f7:21:b7:31:2e:53:67:7d:c1:80:de:88:00:83:cf:81:
f1:e4:55:b2:07:c4:56:fc:f3:76:0d:be:ae:5e:90:a3:54:99:
fa:4f:20:6e:bf:91:b2:48:e4:88:cc:d5:33:71:cb:d7:31:78:
19:64:09:8f:86:3e:c9:bc:27:6a:6b:c5:9b:f3:55:d9:12:11:
8d:fe:bb:7e:fc:08:57:ac:9a:55:66:06:48:7e:b3:c8:5c:de:
5a:4f:ec:c4:3b:05:ac:7d:8a:6e:ed:a1:d7:43:8f:26:25:01:
7d:cd:9b:59:40:b9:2a:b0:42:d0:f7:5f:4b:dc:ab:47:fc:84:
02:71:f2:b4:8c:0b:54:3e:0e:54:3d:2f:d2:aa:dd:82:b9:75:
96:3c:a2:4c:95:85:0c:f0:15:4c:c9:ed:b9:1b:b7:df:64:2d:
f3:af:cc:00:90:c7:d8:cf:a9:5b:eb:56:4a:6d:aa:77:3a:61:
49:03:ca:e6:2a:19:bf:eb:e5:ff:28:fd:e9:e1:93:d2:b6:74:
c9:79:19:47:be:1a:7f:46:aa:32:9b:45:e8:23:70:7a:56:ba:
e1:cd:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:03:49 2026 by rpki-client