
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json)
Hash identifier: 0ef9mmMvvMSFjCarghIwyCgHnSpvZe82CSCmU4nVRTA=
Subject key identifier: 0F:02:52:58:D4:97:8B:00:9F:A4:A0:66:B4:24:5D:31:47:BA:DB:3C
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 019E577FC664359AEDE08B1C187992A563DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
Manifest number: 018E
Signing time: Sun 24 May 2026 01:00:51 +0000
Manifest this update: Sun 24 May 2026 01:00:51 +0000
Manifest next update: Mon 25 May 2026 01:00:51 +0000
Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=)
2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=)
3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=)
4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=)
5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: IjiLmREUpiwC6Mg31QAgSBfyvyLIHBKuusjYHrRXDnM=)
6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=)
7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=)
8: O-QEXm4qSbt72Nnk4qRQFwvPr_0.roa (hash: vVF+iuhTnkhVo+LKbluIv023EO5M+EyUgI75CD2LSB0=)
9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=)
10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=)
11: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=)
12: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=)
13: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=)
14: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:7f:c6:64:35:9a:ed:e0:8b:1c:18:79:92:a5:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: May 24 01:00:51 2026 GMT
Not After : May 25 01:00:51 2026 GMT
Subject: CN=0f025258d4978b009fa4a066b4245d3147badb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:85:92:21:49:11:c3:1b:38:fd:10:85:8d:
fe:95:43:a7:bc:9e:72:b1:db:ba:72:e9:0f:e0:8a:
39:b0:10:38:5c:40:16:d5:8f:73:7b:7f:cc:e2:89:
c8:6a:30:ca:c6:12:1d:2a:68:37:e1:30:05:6b:20:
71:2f:ff:51:96:a6:23:0e:0f:66:68:05:74:75:1c:
a4:6f:16:24:63:98:7e:a7:b1:a2:a4:a8:bc:5d:58:
d3:a6:24:06:ee:39:a8:6c:ad:03:87:2d:28:4f:7f:
3c:e8:f7:54:d8:e5:23:2c:69:0a:02:2b:91:0e:3d:
e8:fb:0a:31:d8:fd:12:49:1f:9d:d4:70:ff:4b:12:
3d:41:65:a4:9a:a7:a7:f2:ab:6d:1d:3d:7c:65:dc:
df:87:0b:46:f6:8f:d4:ae:d8:f5:a1:1a:32:f8:da:
ed:57:0e:17:4b:52:55:67:bb:59:da:b6:b2:53:cf:
2c:89:57:03:37:24:aa:5d:71:16:69:39:56:5f:2f:
22:ed:71:69:4a:ee:de:df:5a:a7:a4:45:b3:48:13:
32:1d:ce:da:41:08:ca:78:c5:46:77:4c:8c:c7:24:
4a:8b:c8:3e:77:7a:9d:e7:b6:28:d8:8e:1a:d3:b6:
4a:17:1a:ff:23:64:4d:1e:0c:2e:04:46:f2:be:64:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:02:52:58:D4:97:8B:00:9F:A4:A0:66:B4:24:5D:31:47:BA:DB:3C
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e9:ed:6c:91:7f:48:56:18:d0:00:a6:e0:c5:fd:48:c9:06:
54:c7:71:a4:db:31:d6:8c:23:cb:97:1f:e9:3c:ce:9f:72:0c:
d8:c8:d6:26:2a:8e:5f:97:55:54:db:ce:ba:5d:1c:91:a0:e3:
70:4a:34:7e:3c:2f:83:13:53:2b:2f:f1:c0:58:8e:ed:bf:b9:
30:03:30:71:31:72:86:b2:a8:d2:73:09:ff:38:27:8d:6b:ed:
b1:28:94:56:3b:5a:87:1d:0b:0d:55:67:3b:8e:c6:b2:72:aa:
a5:e6:d8:67:1e:50:e1:64:fd:44:6d:b8:b5:dc:0e:c6:e7:40:
6f:c1:61:af:19:bc:ac:77:12:32:ab:d4:e2:ae:81:c1:17:83:
ec:7b:91:c7:57:fc:1f:d9:e3:97:35:e3:90:af:fc:5a:4e:3e:
39:52:37:50:a0:54:20:12:32:e8:04:e9:29:bf:56:29:a2:5a:
e9:53:6b:0d:7b:5c:28:33:27:f3:85:b8:b4:43:20:cf:93:29:
fb:f1:dc:64:26:b1:23:91:49:e9:1b:6a:87:e9:77:54:04:5b:
68:78:fb:1b:79:28:55:7b:6d:f0:07:bc:78:de:a4:a0:0e:2b:
a1:12:d7:ce:5b:48:b0:e7:2f:46:c7:1a:d9:66:d7:6a:bc:14:
30:75:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:02:06 2026 by rpki-client