$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: CCgvZJZ9Ij8KVqBWodu6uHuIU0qqmxTCjW+/VwYqiJ4= Subject key identifier: DB:DC:AE:86:D9:5A:57:2D:E3:87:67:10:13:5A:2E:D2:92:D0:05:51 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019D27DF6A7C1809652CDA2EAEDFE84DF6CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 0132 Signing time: Thu 26 Mar 2026 02:00:46 +0000 Manifest this update: Thu 26 Mar 2026 02:00:46 +0000 Manifest next update: Fri 27 Mar 2026 02:00:46 +0000 Files and hashes: 1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=) 2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: GFjxNLu18JtiIxwIq0oOiZbjQj3enHrO1nR1p+bKiQY=) 3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=) 13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:6a:7c:18:09:65:2c:da:2e:ae:df:e8:4d:f6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Mar 26 02:00:46 2026 GMT Not After : Mar 27 02:00:46 2026 GMT Subject: CN=dbdcae86d95a572de3876710135a2ed292d00551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:74:ce:37:db:a1:39:8e:96:77:9e:23:8d: 3c:b0:14:bd:d8:bf:6d:25:ef:c6:44:d0:ce:98:9f: 04:a2:27:3f:e9:a4:10:5d:2b:89:46:f1:1d:57:ed: b1:e3:48:4b:42:05:fd:e0:83:e3:34:b0:53:ad:23: 18:04:3d:a8:b6:0b:fd:fc:09:5d:80:3d:8e:24:fc: 6e:96:d6:fe:73:c0:ea:ce:44:dd:4a:f2:a3:04:57: e4:2e:17:de:46:ef:03:9c:35:c1:d6:7b:57:0b:c5: 3d:af:a5:a2:73:ef:ee:fe:b4:4a:31:bc:35:77:ab: 00:8f:70:53:75:47:6b:bc:78:ea:39:67:54:21:ef: ff:8d:8f:bf:e8:4e:8d:64:93:27:90:31:72:ed:55: 5d:24:37:ab:22:b3:c5:0a:2c:cb:1c:13:d7:c0:31: cd:9b:78:52:47:40:8e:16:98:25:b5:9d:5a:87:09: 30:38:4c:22:22:30:15:fa:b9:42:94:42:87:e4:c0: e4:17:5a:0a:73:5a:a4:dd:6a:49:70:f1:b6:51:59: c2:6c:c2:be:21:c6:f8:5d:92:80:7d:ac:94:c6:8a: 94:40:c2:c1:84:7b:f3:67:57:87:be:47:15:ac:9d: 63:81:bb:17:81:6a:29:aa:34:6e:fb:8b:93:7b:22: 23:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DC:AE:86:D9:5A:57:2D:E3:87:67:10:13:5A:2E:D2:92:D0:05:51 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5e:c3:f3:77:75:42:38:47:ff:88:89:b5:de:17:a6:65:5c: ce:84:dc:c1:69:9e:2e:56:25:70:e3:74:94:37:8a:f0:a4:75: 57:71:c3:24:21:87:21:96:2e:d1:ed:15:41:d1:fc:b7:84:ab: e4:7b:85:18:3c:b0:5d:df:2f:af:e1:f7:43:a1:94:70:18:23: 67:62:e4:f8:7d:2f:46:e7:4e:22:99:85:7b:a1:9c:b7:38:f7: e1:cc:32:7b:01:4d:f9:0e:00:21:e9:63:c5:da:14:c6:fb:10: 3c:22:4b:e8:6e:b0:d1:83:25:de:65:0e:5e:0a:1d:32:2a:14: f3:1e:76:2c:e4:4d:93:ad:4e:ab:82:61:a6:75:c3:fe:d9:a1: 15:5b:eb:82:11:58:c0:b4:0f:fa:53:0b:1c:a7:1c:c2:f9:35: 96:3e:a1:c8:f1:8f:7d:db:50:fb:e6:6b:c6:fe:11:04:c3:49: 17:f1:39:4a:ed:bc:98:7d:6b:ef:a0:85:32:28:bc:64:45:88: ba:86:ea:5e:e7:e3:74:cc:09:1e:b3:0b:d9:96:a1:43:71:3b: 76:47:97:84:c1:77:d9:d5:5a:0f:df:47:a8:9d:53:02:67:7c: c2:eb:e2:f8:eb:c4:01:e7:2b:2d:f9:55:cd:4f:a9:13:bd:b4: 6d:81:32:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n32p8GAllLNourt/oTfbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMzI2MDIwMDQ2WhcNMjYwMzI3MDIwMDQ2WjAzMTEwLwYDVQQD EyhkYmRjYWU4NmQ5NWE1NzJkZTM4NzY3MTAxMzVhMmVkMjkyZDAwNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF50zjfboTmOlneeI408sBS92L9t Je/GRNDOmJ8Eoic/6aQQXSuJRvEdV+2x40hLQgX94IPjNLBTrSMYBD2otgv9/Ald gD2OJPxultb+c8DqzkTdSvKjBFfkLhfeRu8DnDXB1ntXC8U9r6Wic+/u/rRKMbw1 d6sAj3BTdUdrvHjqOWdUIe//jY+/6E6NZJMnkDFy7VVdJDerIrPFCizLHBPXwDHN m3hSR0COFpgltZ1ahwkwOEwiIjAV+rlClEKH5MDkF1oKc1qk3WpJcPG2UVnCbMK+ Icb4XZKAfayUxoqUQMLBhHvzZ1eHvkcVrJ1jgbsXgWopqjRu+4uTeyIjIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvcrobZWlct44dnEBNaLtKS0AVRMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl7D83d1 QjhH/4iJtd4XpmVczoTcwWmeLlYlcON0lDeK8KR1V3HDJCGHIZYu0e0VQdH8t4Sr 5HuFGDywXd8vr+H3Q6GUcBgjZ2Lk+H0vRudOIpmFe6Gctzj34cwyewFN+Q4AIelj xdoUxvsQPCJL6G6w0YMl3mUOXgodMioU8x52LORNk61Oq4JhpnXD/tmhFVvrghFY wLQP+lMLHKccwvk1lj6hyPGPfdtQ++Zrxv4RBMNJF/E5Su28mH1r76CFMii8ZEWI uobqXufjdMwJHrML2ZahQ3E7dkeXhMF32dVaD99HqJ1TAmd8wuvi+OvEAecrLflV zU+pE720bYEy0w== -----END CERTIFICATE-----Generated at Thu Mar 26 06:44:25 2026 by rpki-client