$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: 75yy2HcHFu6LbmW2XaggDU52qRI2ZvMxcirzqPEFDro= Subject key identifier: C1:39:A2:93:84:8D:39:9A:DB:42:6A:F2:EB:B8:7A:5D:9D:23:0D:DB Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 01A1163CA42EE195F2F256DE131C715DC6B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 02FE Signing time: Wed 07 Oct 2026 12:00:35 +0000 Manifest this update: Wed 07 Oct 2026 12:00:35 +0000 Manifest next update: Thu 08 Oct 2026 12:00:35 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: UqaI87vDq1VhaTKH1N2nOvQSNNM1qmlOnYW7wqEWMVQ=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: JsPIoXS0PpUsyOfC959Y4j3xCwM.roa (hash: BX1vpydloz/So1cOf6efq9hS22PCaYbgOF7mgCl+KYc=) 9: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=) 10: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=) 11: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 12: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 13: oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa (hash: 2sttQ/LaGMOGWj3sxLpiozuHzg1tWCewZ5VkHDFqrH4=) 14: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 15: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 16: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:16:3c:a4:2e:e1:95:f2:f2:56:de:13:1c:71:5d:c6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Oct 7 12:00:35 2026 GMT Not After : Oct 8 12:00:35 2026 GMT Subject: CN=c139a293848d399adb426af2ebb87a5d9d230ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:9d:27:16:d5:85:8c:42:8b:d2:4c:ac:e4: cb:3a:9b:f9:98:ab:8f:2d:23:cc:91:f9:38:f5:c3: 8d:e9:81:77:eb:fd:7c:11:7d:a2:44:c5:49:d9:11: 05:76:5b:b5:e8:a3:2e:15:a8:e5:09:b1:d5:cb:25: 73:ec:0d:7b:ba:8b:c6:e8:55:0c:4e:6f:3e:aa:53: f2:b3:10:ac:6b:c0:3a:91:46:7a:59:6d:2c:52:ad: 4a:ef:4f:53:84:8b:a2:38:9f:79:ff:b9:e9:88:cd: db:07:73:a8:1d:f5:b4:8d:4b:22:ed:eb:13:e7:7f: a8:4e:e7:ff:99:97:a6:a4:ee:e6:c9:be:e3:b1:38: 58:d2:eb:ec:bb:7e:3b:bd:99:00:c9:81:51:e6:5d: 75:91:d1:59:62:9e:0c:9a:e0:eb:4e:5c:6b:45:52: 66:98:e6:8c:58:7d:d5:22:75:38:ac:68:04:66:b7: 51:cc:88:1e:59:28:2f:67:34:8a:76:8a:82:64:41: 98:cc:be:57:fb:1b:10:38:a1:29:ea:82:60:fa:32: f1:d9:7f:59:d4:f8:73:c4:ed:b3:9e:37:64:a4:7b: 53:68:b0:e2:fe:e3:0c:30:c0:ee:bc:8f:d7:b1:88: c7:72:69:1b:4c:a5:e5:4f:c8:db:ac:0f:16:68:c5: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:39:A2:93:84:8D:39:9A:DB:42:6A:F2:EB:B8:7A:5D:9D:23:0D:DB X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:30:c6:a6:ae:39:57:5e:90:ef:75:cb:f5:b3:a1:11:4e:ad: 73:b3:69:ae:2d:22:7b:ca:48:ec:93:dc:3e:10:8a:a7:6b:a9: 03:8f:e1:22:ae:a5:f4:d7:bc:e4:25:70:b6:a4:3d:1a:fd:b7: 27:d4:41:3a:09:92:c2:15:c1:9f:34:48:14:e8:99:b1:21:44: 48:f8:01:15:1f:05:49:60:24:b1:9e:93:0f:4f:64:e9:07:11: fe:ed:9f:86:09:a5:ae:b6:95:6a:c9:fc:23:20:d8:9a:47:8b: 1f:84:33:17:88:b6:d0:f4:7d:be:0a:69:29:aa:3c:0a:98:bf: a9:2f:d8:c9:33:86:59:58:97:cc:49:d8:44:52:84:85:af:0c: 11:00:de:81:8c:8f:3c:f9:44:fe:ec:50:64:f6:25:72:4e:fa: 34:f2:75:83:db:8e:66:e7:bc:08:71:51:20:a7:f1:4e:24:d5: 66:49:e5:e7:d5:62:f6:3d:6e:b9:fb:58:c2:ea:27:b6:83:f8: 73:21:19:49:05:21:00:ba:ec:fb:f8:bc:fb:36:f6:63:50:07: 0a:7e:1c:7c:d3:35:ba:c9:9b:2b:a0:e8:60:77:76:db:10:18: 6d:2c:0b:12:8e:87:4f:c8:64:e4:2c:ec:6d:94:a0:9a:87:15: a5:e9:44:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEWPKQu4ZXy8lbeExxxXca5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYxMDA3MTIwMDM1WhcNMjYxMDA4MTIwMDM1WjAzMTEwLwYDVQQD EyhjMTM5YTI5Mzg0OGQzOTlhZGI0MjZhZjJlYmI4N2E1ZDlkMjMwZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzedJxbVhYxCi9JMrOTLOpv5mKuP LSPMkfk49cON6YF36/18EX2iRMVJ2REFdlu16KMuFajlCbHVyyVz7A17uovG6FUM Tm8+qlPysxCsa8A6kUZ6WW0sUq1K709ThIuiOJ95/7npiM3bB3OoHfW0jUsi7esT 53+oTuf/mZempO7myb7jsThY0uvsu347vZkAyYFR5l11kdFZYp4MmuDrTlxrRVJm mOaMWH3VInU4rGgEZrdRzIgeWSgvZzSKdoqCZEGYzL5X+xsQOKEp6oJg+jLx2X9Z 1PhzxO2znjdkpHtTaLDi/uMMMMDuvI/XsYjHcmkbTKXlT8jbrA8WaMWmXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFME5opOEjTma20Jq8uu4el2dIw3bMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzDGpq45 V16Q73XL9bOhEU6tc7Npri0ie8pI7JPcPhCKp2upA4/hIq6l9Ne85CVwtqQ9Gv23 J9RBOgmSwhXBnzRIFOiZsSFESPgBFR8FSWAksZ6TD09k6QcR/u2fhgmlrraVasn8 IyDYmkeLH4QzF4i20PR9vgppKao8Cpi/qS/YyTOGWViXzEnYRFKEha8MEQDegYyP PPlE/uxQZPYlck76NPJ1g9uOZue8CHFRIKfxTiTVZknl59Vi9j1uuftYwuontoP4 cyEZSQUhALrs+/i8+zb2Y1AHCn4cfNM1usmbK6DoYHd22xAYbSwLEo6HT8hk5Czs bZSgmocVpelEog== -----END CERTIFICATE-----Generated at Wed Oct 7 23:12:16 2026 by rpki-client