$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: 27GVhnXrzOT2fPAHaBsmnFl3zfFJJWUpzpWt73vein8= Subject key identifier: 2D:15:66:68:50:B3:F7:77:E4:29:DC:FC:AA:92:F4:32:62:0D:DC:26 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019D6EAF2FAC63E5CD3C633E1ED7334D2448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 0114 Signing time: Wed 08 Apr 2026 20:01:07 +0000 Manifest this update: Wed 08 Apr 2026 20:01:07 +0000 Manifest next update: Thu 09 Apr 2026 20:01:07 +0000 Files and hashes: 1: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 2: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 3: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 4: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: 91OqtGkbFCfpWkH1jHUlcV9K/Cis3c+5ZjN8BR7GxOA=) 5: EJCxpMqO_3L2hhD7DEajsG5R4G4.roa (hash: RyaRFqoui2dNP2kbmLeH5dCdfOnH4VJIMS/8wRVXHdw=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: WScdMd0aWt_OtbcvgTIGER8O-qU.roa (hash: 8o7qzj0f2oKlSlfetwvAe5E/ZOiSOP7vaR/Yzo4OTdo=) 9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 11: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 12: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 13: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Apr 2026 15:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:6e:af:2f:ac:63:e5:cd:3c:63:3e:1e:d7:33:4d:24:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Apr 8 20:01:07 2026 GMT Not After : Apr 9 20:01:07 2026 GMT Subject: CN=2d15666850b3f777e429dcfcaa92f432620ddc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:4a:44:b1:cc:ae:6d:4a:5c:91:8d:4a:0b: 10:5f:25:68:88:d6:d9:8a:1a:f8:24:f5:e3:64:63: a8:16:a8:3a:24:3d:d1:48:7a:11:10:47:f2:21:69: 48:3d:cf:ea:29:49:67:bd:b9:99:45:95:9e:05:5c: 2f:66:3d:74:8d:f5:71:16:45:78:85:6c:95:64:43: 02:e8:fa:09:82:43:91:ea:6e:dc:7f:0c:22:6e:2f: c4:aa:80:1d:a7:ae:19:43:d5:63:49:e2:2d:10:87: 7d:19:92:5d:61:90:7d:c6:ab:55:89:68:be:b4:d0: 6a:20:09:ec:0d:bc:56:41:86:57:63:7f:a4:7e:6f: c9:0c:bc:cc:ce:93:2d:4c:11:13:35:13:0f:c9:0e: 09:a3:02:33:97:28:cc:e1:97:75:3e:59:45:85:d9: c4:07:e9:05:9f:1a:71:65:14:37:ea:e9:f0:3e:be: 4f:31:08:ea:6e:08:58:c9:84:ea:8e:41:05:d4:6c: 21:d4:97:d6:4d:37:d4:48:72:5f:41:6b:b1:b8:43: 64:5a:e3:51:20:92:85:cb:b4:c5:e2:b3:e2:47:33: be:8e:03:3a:2d:57:2b:30:c4:50:36:7e:c7:e2:b7: c6:bd:52:ad:4e:08:ca:c0:8b:73:31:1d:ee:06:41: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:66:68:50:B3:F7:77:E4:29:DC:FC:AA:92:F4:32:62:0D:DC:26 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c9:dc:56:df:56:be:1e:65:f8:13:40:f0:79:2c:5f:7b:f1: 2a:23:ce:21:b8:10:c9:9e:13:0b:97:62:f8:c0:65:74:39:ed: bf:24:c2:8b:be:01:ce:74:09:db:1d:f6:fc:4f:9a:57:52:7f: 39:15:c7:8b:5e:84:02:c8:93:a7:2b:79:cd:c8:68:c7:84:bb: 8e:ed:ee:93:d7:49:fd:a2:9e:86:3a:b3:a8:c2:4a:ce:81:0a: 4c:20:f3:13:bb:d0:20:ae:a4:0e:e3:1b:98:54:fc:d9:5a:dd: 62:1a:3e:7d:71:67:6f:46:0e:24:0d:bc:3c:07:f2:52:d9:99: bb:c0:18:3d:b1:e5:f2:e8:aa:11:63:85:0e:97:28:00:47:e4: c6:1d:83:56:36:0c:00:4b:0f:8b:39:88:13:f0:1a:d5:a1:35: c2:cd:91:06:ef:de:b0:65:41:98:a8:68:42:58:01:88:7b:89: f0:3a:58:16:4d:97:4a:05:9d:ff:fe:52:fe:31:92:b3:7b:4b: 0f:32:fe:85:86:ab:5c:8d:d1:49:08:ba:e5:63:f6:53:8d:03: 34:31:8d:59:d9:f2:4c:18:86:f3:17:49:76:a5:79:2a:c4:e6: a6:7f:6d:78:18:6c:ea:46:12:29:b1:f3:1d:fb:06:87:26:22: 2c:51:c5:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1ury+sY+XNPGM+HtczTSRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwNDA4MjAwMTA3WhcNMjYwNDA5MjAwMTA3WjAzMTEwLwYDVQQD EygyZDE1NjY2ODUwYjNmNzc3ZTQyOWRjZmNhYTkyZjQzMjYyMGRkYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ZKRLHMrm1KXJGNSgsQXyVoiNbZ ihr4JPXjZGOoFqg6JD3RSHoREEfyIWlIPc/qKUlnvbmZRZWeBVwvZj10jfVxFkV4 hWyVZEMC6PoJgkOR6m7cfwwibi/EqoAdp64ZQ9VjSeItEId9GZJdYZB9xqtViWi+ tNBqIAnsDbxWQYZXY3+kfm/JDLzMzpMtTBETNRMPyQ4JowIzlyjM4Zd1PllFhdnE B+kFnxpxZRQ36unwPr5PMQjqbghYyYTqjkEF1Gwh1JfWTTfUSHJfQWuxuENkWuNR IJKFy7TF4rPiRzO+jgM6LVcrMMRQNn7H4rfGvVKtTgjKwItzMR3uBkEB+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0VZmhQs/d35Cnc/KqS9DJiDdwmMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcncVt9W vh5l+BNA8HksX3vxKiPOIbgQyZ4TC5di+MBldDntvyTCi74BznQJ2x32/E+aV1J/ ORXHi16EAsiTpyt5zchox4S7ju3uk9dJ/aKehjqzqMJKzoEKTCDzE7vQIK6kDuMb mFT82VrdYho+fXFnb0YOJA28PAfyUtmZu8AYPbHl8uiqEWOFDpcoAEfkxh2DVjYM AEsPizmIE/Aa1aE1ws2RBu/esGVBmKhoQlgBiHuJ8DpYFk2XSgWd//5S/jGSs3tL DzL+hYarXI3RSQi65WP2U40DNDGNWdnyTBiG8xdJdqV5KsTmpn9teBhs6kYSKbHz HfsGhyYiLFHF7A== -----END CERTIFICATE-----Generated at Thu Apr 9 00:21:54 2026 by rpki-client