$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: Zodt/dpv009roWhGlHO6RjEUQiDeFnlsD5MjvTXjukM= Subject key identifier: 8F:74:42:F6:74:8D:35:91:66:DD:D2:F0:D4:D3:C6:2E:3D:7A:BA:97 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019DA18967BADDB4DE82B6FAD0AF0958C725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 0171 Signing time: Sat 18 Apr 2026 17:00:29 +0000 Manifest this update: Sat 18 Apr 2026 17:00:29 +0000 Manifest next update: Sun 19 Apr 2026 17:00:29 +0000 Files and hashes: 1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=) 2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: QtcNuUi2OyYkl+gS75T8VvkdRZjuTfP990D8CRH/I8k=) 3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=) 13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a1:89:67:ba:dd:b4:de:82:b6:fa:d0:af:09:58:c7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Apr 18 17:00:29 2026 GMT Not After : Apr 19 17:00:29 2026 GMT Subject: CN=8f7442f6748d359166ddd2f0d4d3c62e3d7aba97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:06:72:ba:d0:95:75:cd:b9:1c:a0:4c:85: ff:d9:02:d3:56:b1:e7:68:31:0b:5e:84:24:98:85: 7d:35:34:d9:ae:59:87:05:3c:8d:33:fe:5c:06:4b: e1:62:4e:0c:1f:9d:3a:d3:4d:e2:22:cb:10:0b:53: e0:d8:f3:ae:87:d4:73:07:52:bb:f2:35:52:b5:f5: 5e:fc:21:a8:13:bc:c3:3c:cc:87:b5:c7:00:73:18: c9:52:c4:08:d9:a7:28:4a:35:32:da:ba:f6:13:d0: 78:7e:d5:c6:09:be:50:4a:28:f3:4f:d9:0a:ec:0d: 18:15:78:86:bb:e5:bb:63:e4:a9:bb:8a:e8:bb:cb: 53:63:08:cd:7d:e5:af:d9:b2:af:db:53:5c:12:49: 22:c4:6c:8f:5a:01:18:54:3a:f5:e4:25:26:e6:fc: b1:67:a6:9c:6a:58:51:bb:58:04:53:70:17:53:ce: 52:99:46:83:0c:e2:cc:93:82:99:09:9e:c6:7d:53: 8a:a1:03:48:a3:75:87:47:cf:9f:dc:fc:d1:e8:fa: 8d:2e:de:3c:a9:9f:b2:eb:32:e2:e3:8e:2f:0e:58: 5a:e3:9e:bc:ee:ee:73:00:8c:79:84:7c:a9:ae:c1: 42:61:d9:ec:a4:5e:4b:1a:93:0f:2c:cb:97:63:34: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:42:F6:74:8D:35:91:66:DD:D2:F0:D4:D3:C6:2E:3D:7A:BA:97 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3f:52:0f:d5:3e:a4:90:2d:77:1c:42:8b:e0:e4:94:9c:47: 78:c2:2a:9a:a9:15:0e:3a:dc:b4:2f:70:d5:c9:08:12:32:c0: 22:50:87:bc:80:1c:1a:95:ad:24:01:e1:66:6d:bf:56:1c:eb: 1f:bb:8a:fd:f1:e4:84:60:81:ee:26:9b:89:8b:be:e2:b8:ad: 5b:04:1b:10:7d:64:ac:da:4a:41:f8:42:ef:73:89:8a:9c:8a: b6:4f:88:25:25:8b:20:87:86:22:1a:fe:3d:34:2c:93:60:57: c1:d9:e3:71:f1:74:ab:79:3a:a1:14:3c:6d:a0:05:c8:d4:7b: 9b:16:05:31:e8:b3:7b:4c:9a:92:93:a0:98:9b:1d:86:63:fc: c9:f0:9c:72:ab:7b:c3:ff:45:0c:4f:45:af:6d:c8:fc:43:e1: 57:83:2d:fc:14:94:39:30:23:08:b8:84:ec:23:19:47:00:e0: f2:87:4e:eb:64:8c:43:4f:25:39:3e:48:92:1a:48:bb:f6:b8: 62:58:5d:15:7c:24:81:05:68:47:13:58:01:91:cc:92:8f:68: c0:ec:88:66:01:df:b0:b2:a0:21:77:44:30:c1:48:c2:9d:ec: df:a6:a1:40:b6:bd:53:98:53:1e:bc:4b:22:ed:df:0f:d0:4c: 98:21:37:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2hiWe63bTegrb60K8JWMclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwNDE4MTcwMDI5WhcNMjYwNDE5MTcwMDI5WjAzMTEwLwYDVQQD Eyg4Zjc0NDJmNjc0OGQzNTkxNjZkZGQyZjBkNGQzYzYyZTNkN2FiYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIIGcrrQlXXNuRygTIX/2QLTVrHn aDELXoQkmIV9NTTZrlmHBTyNM/5cBkvhYk4MH506003iIssQC1Pg2POuh9RzB1K7 8jVStfVe/CGoE7zDPMyHtccAcxjJUsQI2acoSjUy2rr2E9B4ftXGCb5QSijzT9kK 7A0YFXiGu+W7Y+Spu4rou8tTYwjNfeWv2bKv21NcEkkixGyPWgEYVDr15CUm5vyx Z6acalhRu1gEU3AXU85SmUaDDOLMk4KZCZ7GfVOKoQNIo3WHR8+f3PzR6PqNLt48 qZ+y6zLi444vDlha45687u5zAIx5hHyprsFCYdnspF5LGpMPLMuXYzREEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI90QvZ0jTWRZt3S8NTTxi49erqXMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD9SD9U+ pJAtdxxCi+DklJxHeMIqmqkVDjrctC9w1ckIEjLAIlCHvIAcGpWtJAHhZm2/Vhzr H7uK/fHkhGCB7iabiYu+4ritWwQbEH1krNpKQfhC73OJipyKtk+IJSWLIIeGIhr+ PTQsk2BXwdnjcfF0q3k6oRQ8baAFyNR7mxYFMeize0yakpOgmJsdhmP8yfCccqt7 w/9FDE9Fr23I/EPhV4Mt/BSUOTAjCLiE7CMZRwDg8odO62SMQ08lOT5IkhpIu/a4 YlhdFXwkgQVoRxNYAZHMko9owOyIZgHfsLKgIXdEMMFIwp3s36ahQLa9U5hTHrxL Iu3fD9BMmCE3UQ== -----END CERTIFICATE-----Generated at Sat Apr 18 19:39:08 2026 by rpki-client