$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: NeUNCnq7b5JYLomu5cLERshmuC9uv2S3b8Yl4YBl6vw= Subject key identifier: 84:14:B1:ED:C6:F5:35:EF:F5:D5:71:A1:65:84:A7:2D:E5:58:C3:D1 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 01A154AE544749A4485705D77333A18A3034 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 035F Signing time: Mon 19 Oct 2026 15:01:13 +0000 Manifest this update: Mon 19 Oct 2026 15:01:13 +0000 Manifest next update: Tue 20 Oct 2026 15:01:13 +0000 Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: VEKUWUy41VkzfSJ/bdWWr21BMoxNMfOK02+8ISI+3h0=) 2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 13: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:54:ae:54:47:49:a4:48:57:05:d7:73:33:a1:8a:30:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Oct 19 15:01:13 2026 GMT Not After : Oct 20 15:01:13 2026 GMT Subject: CN=8414b1edc6f535eff5d571a16584a72de558c3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:d7:70:82:26:e8:ee:a1:06:f4:ca:aa:62: 6d:73:2d:f2:09:8d:46:51:27:8f:f1:15:05:b2:93: 4c:66:7b:96:6d:ba:02:aa:21:aa:c2:4c:82:19:53: 80:d6:60:ff:c6:a7:05:11:fe:12:27:3d:14:86:95: 8a:96:3f:0e:bd:73:b8:76:ec:36:2e:d7:1a:89:ef: 58:4a:e2:b2:9a:28:be:bb:c9:b8:1a:55:38:e3:1c: 3c:38:1b:39:d1:b8:39:4c:9b:ae:f4:27:10:a0:8d: 1e:e3:c6:8f:d5:38:1b:47:7d:cb:7f:1d:b9:a2:ba: be:37:c1:b1:44:8a:1d:1c:65:03:de:62:08:98:c1: ca:39:79:a8:f9:1f:4a:e3:14:9e:65:e8:0b:df:21: 32:9b:35:fd:f8:2e:cb:ef:f4:6f:fd:9d:fb:c5:f1: d5:1c:3d:e1:f5:67:6b:42:07:0d:57:8a:0d:0d:39: 61:3c:0c:aa:cd:70:2b:02:db:33:f0:67:2c:7d:56: 82:ac:90:05:76:d0:c4:32:28:c7:b7:98:5b:72:d3: c8:5e:57:d7:cc:3e:87:be:b2:6a:c7:da:46:12:5f: c3:de:f4:47:88:c5:d4:56:57:af:69:2e:fb:0b:90: 2e:c1:4c:ad:6a:e9:e1:76:d5:a1:b0:9a:59:c5:86: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:B1:ED:C6:F5:35:EF:F5:D5:71:A1:65:84:A7:2D:E5:58:C3:D1 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:62:5d:5f:24:73:51:18:9f:1c:59:c7:23:b9:2f:f6:05:2c: 4b:95:aa:0e:f8:02:c0:26:52:60:6f:64:f9:1b:f0:e3:46:34: e5:b2:51:94:9b:e6:87:8c:37:ab:bf:f3:74:28:22:54:25:76: 80:e5:e3:43:bd:f6:e4:06:db:7b:eb:47:3a:6d:b1:60:60:70: 2a:08:f5:0e:96:be:de:97:67:70:71:70:d3:9c:1b:28:70:2e: f6:0f:0a:72:9f:5b:fe:c2:81:c3:82:9c:40:e6:cd:f5:a7:09: 9f:cd:85:2b:39:5a:2a:29:d5:0e:2f:0c:05:19:81:12:c6:50: 50:a4:78:91:00:a5:46:32:bf:38:7e:ae:a9:fc:5d:97:ba:94: 1a:89:a1:1e:b2:d3:01:c8:bd:fe:10:fe:96:53:86:c6:0d:f4: a8:f1:5f:a1:dc:ee:23:64:70:2e:54:9f:f7:a3:37:31:54:5b: e7:6a:00:6b:d0:16:4e:c1:cc:5c:2e:5d:3e:2f:01:63:27:3e: de:3c:39:42:25:c8:4a:db:da:88:da:9c:3e:4d:01:1c:82:3f: 3e:45:cf:89:70:cc:fd:bc:e7:fa:50:0f:a1:e0:d6:52:5b:ce: 35:28:6d:3b:04:f4:68:4c:57:e5:ed:da:e4:b1:d1:68:b8:6c: 8f:de:78:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFUrlRHSaRIVwXXczOhijA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYxMDE5MTUwMTEzWhcNMjYxMDIwMTUwMTEzWjAzMTEwLwYDVQQD Eyg4NDE0YjFlZGM2ZjUzNWVmZjVkNTcxYTE2NTg0YTcyZGU1NThjM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zjXcIIm6O6hBvTKqmJtcy3yCY1G USeP8RUFspNMZnuWbboCqiGqwkyCGVOA1mD/xqcFEf4SJz0UhpWKlj8OvXO4duw2 Ltcaie9YSuKymii+u8m4GlU44xw8OBs50bg5TJuu9CcQoI0e48aP1TgbR33Lfx25 orq+N8GxRIodHGUD3mIImMHKOXmo+R9K4xSeZegL3yEymzX9+C7L7/Rv/Z37xfHV HD3h9WdrQgcNV4oNDTlhPAyqzXArAtsz8GcsfVaCrJAFdtDEMijHt5hbctPIXlfX zD6HvrJqx9pGEl/D3vRHiMXUVlevaS77C5AuwUytaunhdtWhsJpZxYYH7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQUse3G9TXv9dVxoWWEpy3lWMPRMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGJdXyRz URifHFnHI7kv9gUsS5WqDvgCwCZSYG9k+Rvw40Y05bJRlJvmh4w3q7/zdCgiVCV2 gOXjQ7325Abbe+tHOm2xYGBwKgj1Dpa+3pdncHFw05wbKHAu9g8Kcp9b/sKBw4Kc QObN9acJn82FKzlaKinVDi8MBRmBEsZQUKR4kQClRjK/OH6uqfxdl7qUGomhHrLT Aci9/hD+llOGxg30qPFfodzuI2RwLlSf96M3MVRb52oAa9AWTsHMXC5dPi8BYyc+ 3jw5QiXIStvaiNqcPk0BHII/PkXPiXDM/bzn+lAPoeDWUlvONShtOwT0aExX5e3a 5LHRaLhsj954Cw== -----END CERTIFICATE-----Generated at Mon Oct 19 22:21:12 2026 by rpki-client