$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: mekoz0z100Cj6Q59LLH/1F/eH0CPj7MxprYW66Cjqsc= Subject key identifier: BF:96:8C:08:05:E2:6E:C7:47:A2:D6:B2:8A:F7:6A:93:D7:88:E6:4D Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 01A150D1813C2E317EC7FF31993666C34D77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 035D Signing time: Sun 18 Oct 2026 21:01:09 +0000 Manifest this update: Sun 18 Oct 2026 21:01:09 +0000 Manifest next update: Mon 19 Oct 2026 21:01:09 +0000 Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: wKmQlDS7L49Jq7BeDSJ26N6hkZuJWmyuQbEKsXu3trw=) 2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 13: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:50:d1:81:3c:2e:31:7e:c7:ff:31:99:36:66:c3:4d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Oct 18 21:01:09 2026 GMT Not After : Oct 19 21:01:09 2026 GMT Subject: CN=bf968c0805e26ec747a2d6b28af76a93d788e64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:51:17:a1:58:0a:d6:7d:98:9d:eb:07:0f: 1c:2b:dd:19:2b:c1:3b:80:d2:02:8a:c1:a0:d1:04: e5:e5:7a:6d:c1:24:d1:1e:42:80:bc:b1:a7:2e:5a: d7:25:fb:45:fc:a7:ec:0e:d5:7b:f7:89:dc:8a:fb: 5d:ac:7a:8b:4b:4d:6c:83:d7:98:5f:cc:c2:7c:24: e9:c7:a5:91:54:bd:b0:76:36:71:31:4b:72:42:b2: 5a:97:39:7e:1b:c4:57:da:dd:91:73:cb:6c:a5:db: c4:a8:82:8b:95:7d:8a:82:2b:43:7e:d7:09:54:da: 8a:72:73:a1:ac:c1:e6:5b:3a:f5:85:72:0a:7d:56: ab:0c:c3:90:8c:cd:02:e4:23:c3:1f:99:f7:c4:0c: 29:1a:1a:c9:89:dd:d2:1c:d7:01:2c:9c:2f:fb:4a: bf:c0:86:12:e7:75:6f:2d:b1:a6:ee:f5:90:82:69: bf:c5:8a:05:d3:41:18:a4:88:ee:e6:fa:c0:4c:a8: 7a:32:ed:c0:96:96:db:ea:6d:e9:44:71:ab:5d:59: 3e:a9:33:12:53:a4:75:7b:e0:88:90:5d:9a:c1:99: da:0c:72:7d:54:fd:48:87:ea:4f:25:76:3c:2b:ff: 59:2e:a7:81:53:a5:f4:5d:86:af:f3:76:28:27:6b: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:96:8C:08:05:E2:6E:C7:47:A2:D6:B2:8A:F7:6A:93:D7:88:E6:4D X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a1:13:b7:69:5d:bb:49:45:40:93:e0:5f:08:21:5a:bd:7d: 77:74:e0:3b:71:30:8b:42:e1:69:ac:c2:5e:a7:fc:f2:dd:8a: 5d:a9:b7:f1:64:d2:c0:7f:7f:69:17:e0:fb:59:60:98:5e:1a: 2e:99:36:8c:00:6c:ab:d2:eb:34:b1:9b:90:ab:a3:f5:d5:51: b6:19:54:ab:6b:ce:5d:23:ea:d9:3d:11:8f:15:2f:69:d3:fe: 67:83:c4:96:5d:a3:00:3c:f3:86:e1:90:91:7c:9f:ad:cf:65: 00:b1:f1:ce:7e:00:5a:ea:c3:bb:a6:e0:0d:f8:94:b0:61:87: 47:80:28:9b:20:f6:9a:03:86:fe:7e:af:3b:62:fa:5f:59:1a: ed:e6:45:89:2e:57:d0:5a:1d:23:78:ff:e4:95:19:ad:42:7d: 7f:9a:a1:b3:5f:74:d6:c2:1f:20:02:e9:90:b7:dd:fc:a3:9b: 3b:6f:bd:97:55:a7:a9:bc:9d:f8:1f:f4:d1:27:fc:58:03:34: c9:c8:20:f4:f8:7d:48:62:d3:34:61:7e:7f:af:8e:4b:7a:3d: 01:1d:ec:07:57:53:5f:16:bd:4d:21:9b:3a:a5:a4:b9:a4:17: c2:f1:31:73:d2:8d:e5:9f:fa:57:f1:72:e3:e6:db:e1:05:da: af:d3:c6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFQ0YE8LjF+x/8xmTZmw013MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYxMDE4MjEwMTA5WhcNMjYxMDE5MjEwMTA5WjAzMTEwLwYDVQQD EyhiZjk2OGMwODA1ZTI2ZWM3NDdhMmQ2YjI4YWY3NmE5M2Q3ODhlNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdhRF6FYCtZ9mJ3rBw8cK90ZK8E7 gNICisGg0QTl5XptwSTRHkKAvLGnLlrXJftF/KfsDtV794ncivtdrHqLS01sg9eY X8zCfCTpx6WRVL2wdjZxMUtyQrJalzl+G8RX2t2Rc8tspdvEqIKLlX2KgitDftcJ VNqKcnOhrMHmWzr1hXIKfVarDMOQjM0C5CPDH5n3xAwpGhrJid3SHNcBLJwv+0q/ wIYS53VvLbGm7vWQgmm/xYoF00EYpIju5vrATKh6Mu3Alpbb6m3pRHGrXVk+qTMS U6R1e+CIkF2awZnaDHJ9VP1Ih+pPJXY8K/9ZLqeBU6X0XYav83YoJ2vN7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+WjAgF4m7HR6LWsor3apPXiOZNMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqETt2ld u0lFQJPgXwghWr19d3TgO3Ewi0LhaazCXqf88t2KXam38WTSwH9/aRfg+1lgmF4a Lpk2jABsq9LrNLGbkKuj9dVRthlUq2vOXSPq2T0RjxUvadP+Z4PEll2jADzzhuGQ kXyfrc9lALHxzn4AWurDu6bgDfiUsGGHR4AomyD2mgOG/n6vO2L6X1ka7eZFiS5X 0FodI3j/5JUZrUJ9f5qhs1901sIfIALpkLfd/KObO2+9l1Wnqbyd+B/00Sf8WAM0 ycgg9Ph9SGLTNGF+f6+OS3o9AR3sB1dTXxa9TSGbOqWkuaQXwvExc9KN5Z/6V/Fy 4+bb4QXar9PGkA== -----END CERTIFICATE-----Generated at Mon Oct 19 02:54:05 2026 by rpki-client