$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: Dcj9QFaYf9nzR6U8T7nzecbvcEF1k+tdHlCeMY7/Wfw= Subject key identifier: FD:5F:05:DD:D6:37:46:ED:19:43:EA:42:B5:F1:F7:32:A8:A6:DF:05 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019CB7DD817DDDDC9C8B84564D39CC067516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: F8 Signing time: Wed 04 Mar 2026 08:01:12 +0000 Manifest this update: Wed 04 Mar 2026 08:01:12 +0000 Manifest next update: Thu 05 Mar 2026 08:01:12 +0000 Files and hashes: 1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=) 2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: GypeHslWokanxCyPgn3CjuIkFi23NZM5EO9U3aEHMhI=) 3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=) 13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b7:dd:81:7d:dd:dc:9c:8b:84:56:4d:39:cc:06:75:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Mar 4 08:01:12 2026 GMT Not After : Mar 5 08:01:12 2026 GMT Subject: CN=fd5f05ddd63746ed1943ea42b5f1f732a8a6df05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:01:12:88:1a:29:2c:ea:7a:03:89:10:8d: ba:96:27:d2:7b:fe:90:c6:69:2e:e3:e6:28:17:23: fe:51:d7:fd:ed:cb:7a:5f:28:c3:63:26:e9:8f:6c: 15:63:3c:ef:41:c4:ed:48:b8:00:b4:c1:46:cc:63: 99:e5:6d:d9:ea:bf:ab:e8:e3:75:fb:ef:78:de:da: 85:16:97:8b:c8:6e:ed:bf:97:67:39:2a:4a:6c:8d: 8d:72:d5:fd:3d:de:78:3f:21:bd:dd:6e:8a:a4:2a: 5b:3d:39:fb:f9:7f:dd:bb:1b:54:56:cd:83:35:56: 11:50:23:a7:99:04:be:5a:06:a1:12:c5:76:1e:c6: 31:a1:e7:ba:17:0e:43:4e:c4:6b:4c:70:93:f7:d9: 7e:52:ab:58:42:4f:58:44:ad:96:23:d8:3b:6e:6b: 0f:54:f0:a3:a9:b6:d8:1e:77:37:96:44:3f:42:cf: e7:a6:a4:f2:de:6f:a4:43:7e:92:c8:0f:69:31:4b: 47:5f:d2:b5:f5:0c:87:58:4e:5e:ae:59:27:60:00: 9c:ad:ab:39:ca:a0:61:3b:9e:71:52:e6:ed:28:de: 56:ce:7a:27:54:71:8f:f3:6d:90:4b:40:59:22:a1: 20:e4:9a:87:39:79:1d:d9:50:16:35:b7:b8:19:b7: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:05:DD:D6:37:46:ED:19:43:EA:42:B5:F1:F7:32:A8:A6:DF:05 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:45:0c:1b:2b:fc:21:42:35:cb:42:53:a2:9c:1c:f0:57:97: e5:dc:96:22:f7:f3:b1:16:18:39:0b:d8:ab:f7:53:42:ed:31: cc:2f:47:bb:fd:aa:85:48:f5:c3:8b:2c:7a:9e:21:8f:dc:43: bb:25:96:04:44:f5:63:65:7b:f8:a7:eb:78:22:ec:39:32:b0: 70:1c:73:5c:5c:f9:48:14:b5:ae:50:86:7c:da:82:3e:a0:aa: da:11:b1:15:f3:ac:0b:5b:b9:60:ec:96:2b:ee:d9:48:a5:2d: 6c:1d:51:ee:fd:b4:5d:78:2e:8f:37:f4:c0:39:99:f0:5c:71: 05:7b:4a:00:ca:6c:78:72:33:16:ea:23:28:1d:99:59:da:2e: b5:22:c3:6a:5a:f1:97:22:f5:17:40:b8:75:c9:8f:51:1c:73: e7:0d:f1:b7:c2:f1:30:f2:3a:1a:e0:be:a2:8d:ea:14:4a:d0: 6a:3b:e6:0e:69:73:da:b0:c1:89:f0:3b:e9:9a:a0:ef:1b:32: 10:60:24:02:29:16:55:24:62:71:47:e3:9c:66:e1:9b:08:74: b9:55:b6:a2:a5:92:ac:d5:98:0e:95:0f:90:f3:68:be:ad:da: 4b:f4:65:ee:a4:d4:cb:1d:21:26:39:a9:49:1c:d7:75:22:cf: 3a:75:d5:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy33YF93dyci4RWTTnMBnUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMzA0MDgwMTEyWhcNMjYwMzA1MDgwMTEyWjAzMTEwLwYDVQQD EyhmZDVmMDVkZGQ2Mzc0NmVkMTk0M2VhNDJiNWYxZjczMmE4YTZkZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ4BEogaKSzqegOJEI26lifSe/6Q xmku4+YoFyP+Udf97ct6XyjDYybpj2wVYzzvQcTtSLgAtMFGzGOZ5W3Z6r+r6ON1 ++943tqFFpeLyG7tv5dnOSpKbI2NctX9Pd54PyG93W6KpCpbPTn7+X/duxtUVs2D NVYRUCOnmQS+WgahEsV2HsYxoee6Fw5DTsRrTHCT99l+UqtYQk9YRK2WI9g7bmsP VPCjqbbYHnc3lkQ/Qs/npqTy3m+kQ36SyA9pMUtHX9K19QyHWE5erlknYACcras5 yqBhO55xUubtKN5WznonVHGP822QS0BZIqEg5JqHOXkd2VAWNbe4GbcJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1fBd3WN0btGUPqQrXx9zKopt8FMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEUMGyv8 IUI1y0JTopwc8FeX5dyWIvfzsRYYOQvYq/dTQu0xzC9Hu/2qhUj1w4ssep4hj9xD uyWWBET1Y2V7+KfreCLsOTKwcBxzXFz5SBS1rlCGfNqCPqCq2hGxFfOsC1u5YOyW K+7ZSKUtbB1R7v20XXgujzf0wDmZ8FxxBXtKAMpseHIzFuojKB2ZWdoutSLDalrx lyL1F0C4dcmPURxz5w3xt8LxMPI6GuC+oo3qFErQajvmDmlz2rDBifA76Zqg7xsy EGAkAikWVSRicUfjnGbhmwh0uVW2oqWSrNWYDpUPkPNovq3aS/Rl7qTUyx0hJjmp SRzXdSLPOnXVsQ== -----END CERTIFICATE-----Generated at Wed Mar 4 15:39:27 2026 by rpki-client