$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: /iUVXhU5oo7bh/ip0/2pEGawJ5+2LjPqJUfTqY2zDdw= Subject key identifier: 7B:C9:4F:65:15:D0:C7:D8:B7:E1:AC:2E:A0:81:C1:21:04:39:41:D8 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019CAA21A77AC2E110A31FBEA51F20759272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: AE Signing time: Sun 01 Mar 2026 16:00:58 +0000 Manifest this update: Sun 01 Mar 2026 16:00:58 +0000 Manifest next update: Mon 02 Mar 2026 16:00:58 +0000 Files and hashes: 1: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 2: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 3: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 4: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: rf6U5YbljLx+Mx9auder/9z66ME14p8UrpGa8jDF+R4=) 5: EJCxpMqO_3L2hhD7DEajsG5R4G4.roa (hash: RyaRFqoui2dNP2kbmLeH5dCdfOnH4VJIMS/8wRVXHdw=) 6: Ej7B9J_rVO2zcIf5hAYu1ObfUcQ.roa (hash: V2zmAUg3oulZRaXhgL53OAZLNVTSebC9zUoEWgNUVyA=) 7: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 8: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 9: WScdMd0aWt_OtbcvgTIGER8O-qU.roa (hash: 8o7qzj0f2oKlSlfetwvAe5E/ZOiSOP7vaR/Yzo4OTdo=) 10: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 11: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 12: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 13: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 14: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 15: zO3LOujTyQrqgjACwCas72KgoSk.roa (hash: 6p5B/dq4WILGBIMaHKd//dbp8ITI+l4IZk/Fi6tJX1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:a7:7a:c2:e1:10:a3:1f:be:a5:1f:20:75:92:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Mar 1 16:00:58 2026 GMT Not After : Mar 2 16:00:58 2026 GMT Subject: CN=7bc94f6515d0c7d8b7e1ac2ea081c121043941d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:6e:f9:0c:07:81:c2:d3:d9:22:90:dd:2f: 12:f0:49:ab:fe:e8:2a:cd:35:cf:ce:c1:f0:7c:d3: 00:4c:74:60:ae:2b:30:19:f1:fc:92:67:83:16:81: 64:50:c6:e4:4d:19:12:b7:61:bd:79:f6:57:b6:7e: a4:40:00:c8:6d:2e:97:cc:75:b0:53:bd:d2:ef:a7: 08:dd:eb:ff:20:67:d4:59:e5:1f:40:d0:11:37:e4: 66:87:8a:9b:92:8c:3d:10:c2:59:72:b6:e7:6f:98: b7:06:01:a2:e2:b5:8d:f0:e3:cf:39:00:f1:7f:2b: 2f:c1:09:4f:06:35:0e:54:31:6a:a2:04:b2:d8:b5: 05:24:e3:50:81:51:17:e4:77:8f:cc:83:ac:99:94: 4e:a1:de:fb:a2:23:18:d1:d9:62:b2:b3:f4:4c:97: 2f:2f:12:47:21:30:93:07:26:6b:89:25:98:7f:fc: 3e:95:a4:24:a3:15:48:d9:b0:81:22:d7:e3:2d:d9: e0:97:cd:65:55:63:61:a5:3f:55:4f:44:5e:2a:14: 6f:22:ec:38:aa:10:ee:86:23:fc:57:c8:cf:f1:6f: 32:52:8c:9c:98:2c:eb:a2:40:a4:6e:15:fd:ff:2e: 04:20:bf:6b:87:ed:2f:a4:86:bc:48:8f:d7:ef:bc: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C9:4F:65:15:D0:C7:D8:B7:E1:AC:2E:A0:81:C1:21:04:39:41:D8 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:da:ac:9a:d8:8b:b1:a9:9a:39:3b:0d:15:63:1f:28:3b: 1c:9d:ff:01:61:a1:45:99:d6:09:cb:3d:1d:80:b1:56:9c:06: e4:75:d0:49:c4:9c:39:12:17:ae:d9:ed:9d:bb:92:62:da:0e: b6:13:0c:26:e3:46:b3:12:0f:47:20:c7:81:a1:ca:6e:f8:4f: c3:20:25:8b:a0:97:5b:e9:db:ab:45:66:18:42:18:51:d0:f8: 98:dc:de:c1:ac:03:cb:45:f5:15:ff:4c:0c:3a:14:b9:5a:24: 54:e0:2d:da:d2:66:15:84:15:f2:bd:96:14:4f:6c:13:8e:64: ed:d9:b2:fe:d3:91:33:d4:7c:5e:68:7c:da:8d:06:16:a7:d7: f5:01:41:1c:b6:08:46:f0:47:8c:fe:be:1d:1b:72:16:a3:e5: b3:0a:90:52:b2:ba:fa:c8:3e:55:d3:45:d6:70:60:9d:10:03: 46:f3:12:3e:c8:da:40:50:df:3f:b0:73:7c:d8:c7:a8:e8:dd: 99:78:d2:cd:64:3f:45:32:ee:a8:d8:fe:c0:3b:e7:64:4f:77: 18:10:bf:3f:8c:54:90:eb:73:ab:47:f4:0f:23:25:9a:6f:9b: 80:b8:77:c7:70:65:d4:5a:61:fb:ba:9e:d4:c6:8f:86:df:bd: f8:55:e3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIad6wuEQox++pR8gdZJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwMzAxMTYwMDU4WhcNMjYwMzAyMTYwMDU4WjAzMTEwLwYDVQQD Eyg3YmM5NGY2NTE1ZDBjN2Q4YjdlMWFjMmVhMDgxYzEyMTA0Mzk0MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBpu+QwHgcLT2SKQ3S8S8Emr/ugq zTXPzsHwfNMATHRgriswGfH8kmeDFoFkUMbkTRkSt2G9efZXtn6kQADIbS6XzHWw U73S76cI3ev/IGfUWeUfQNARN+Rmh4qbkow9EMJZcrbnb5i3BgGi4rWN8OPPOQDx fysvwQlPBjUOVDFqogSy2LUFJONQgVEX5HePzIOsmZROod77oiMY0dlisrP0TJcv LxJHITCTByZriSWYf/w+laQkoxVI2bCBItfjLdngl81lVWNhpT9VT0ReKhRvIuw4 qhDuhiP8V8jP8W8yUoycmCzrokCkbhX9/y4EIL9rh+0vpIa8SI/X77zF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvJT2UV0MfYt+GsLqCBwSEEOUHYMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJHarJrY i7Gpmjk7DRVjHyg7HJ3/AWGhRZnWCcs9HYCxVpwG5HXQScScORIXrtntnbuSYtoO thMMJuNGsxIPRyDHgaHKbvhPwyAli6CXW+nbq0VmGEIYUdD4mNzewawDy0X1Ff9M DDoUuVokVOAt2tJmFYQV8r2WFE9sE45k7dmy/tORM9R8Xmh82o0GFqfX9QFBHLYI RvBHjP6+HRtyFqPlswqQUrK6+sg+VdNF1nBgnRADRvMSPsjaQFDfP7BzfNjHqOjd mXjSzWQ/RTLuqNj+wDvnZE93GBC/P4xUkOtzq0f0DyMlmm+bgLh3x3Bl1Fph+7qe 1MaPht+9+FXjYA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:57:48 2026 by rpki-client