$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: KkidHR9bycVqClwe1kDwSIyHSEyMHalClPibVxucJtg= Subject key identifier: 1C:56:50:DF:C8:A9:EA:CE:AD:23:13:E2:6E:FD:AE:53:22:29:CB:CA Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 01A1BC52059834712C4B9341A6E197139E7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 0396 Signing time: Sun 08 Nov 2026 18:00:54 +0000 Manifest this update: Sun 08 Nov 2026 18:00:54 +0000 Manifest next update: Mon 09 Nov 2026 18:00:54 +0000 Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: tK9xsuizYnUYozJ4qBp6yIJsRItTFgoXcXtCpg5d+OE=) 2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=) 4: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 5: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 6: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 7: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 8: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 9: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 10: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 11: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=) 12: v-Tz4LNrg-fI0YtXfsTPB9CVhMc.roa (hash: udOow31/Ac3B4eRS03ZbNOgd/QrnseTxomOZNggmN6I=) 13: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Nov 2026 17:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:bc:52:05:98:34:71:2c:4b:93:41:a6:e1:97:13:9e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Nov 8 18:00:54 2026 GMT Not After : Nov 9 18:00:54 2026 GMT Subject: CN=1c5650dfc8a9eacead2313e26efdae532229cbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:51:f3:32:a5:96:b9:55:ec:43:00:b5:88: 70:de:42:be:4b:1f:2f:96:1d:d8:f2:b1:9a:9e:ce: 7f:06:61:26:aa:0b:19:21:c2:e7:02:ce:5d:c6:ed: 4e:c4:e7:98:92:71:0f:a6:76:dd:b7:7f:8d:f5:74: 53:ec:89:a7:c7:57:ce:28:33:78:56:1f:6a:49:81: 55:a2:0b:67:13:6e:89:e7:d4:81:96:f8:a0:68:e4: b5:4c:86:43:e7:6c:d4:c9:33:54:6c:b7:bb:9f:79: f6:33:7b:85:7f:92:76:39:2a:f7:d3:f4:0c:7b:b6: da:80:8c:b6:04:f9:b6:e6:fa:b1:0d:c3:3f:79:41: f7:92:1a:86:0a:43:49:e7:92:65:68:21:ac:08:22: a8:8c:d2:b0:b2:81:05:2d:eb:69:5b:cd:f5:83:d6: cb:a9:79:b5:28:5f:a6:80:a0:0c:55:ea:48:aa:95: bc:cd:b5:8b:b5:2d:57:90:57:c4:06:38:a6:30:c1: 22:40:e1:1a:55:5d:ed:f7:b4:52:94:cf:82:a6:16: 84:95:7c:70:74:2f:d4:7f:04:75:cb:19:b7:f2:4f: 49:95:cf:84:b4:d5:27:d9:68:68:e8:c9:3c:1b:86: 8a:bb:2e:90:e8:b4:2e:d3:86:a0:7f:af:9c:3e:03: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:56:50:DF:C8:A9:EA:CE:AD:23:13:E2:6E:FD:AE:53:22:29:CB:CA X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:00:1d:fd:14:75:63:1a:43:1b:de:92:28:8f:ad:6a:7d:80: 97:ef:7e:5a:9d:a7:75:f3:19:9e:42:87:cc:ba:c1:9b:a1:63: 56:39:d0:6c:8f:47:95:a5:36:c6:b5:85:d0:2f:4c:6c:50:22: 2b:aa:e8:3e:c6:eb:ea:11:14:d1:9d:ca:d4:32:c3:7c:76:53: 55:ae:b6:db:d0:e0:c4:d2:79:b2:57:a3:b4:49:01:c7:97:c9: 2a:6e:67:fe:c5:0d:4f:7c:ed:fc:d1:5a:31:dc:6f:17:65:75: 7a:93:fb:80:0a:9e:f6:6d:ed:96:08:20:98:5d:52:b2:14:1f: 59:fc:1d:87:9a:06:9f:1f:53:3b:22:db:35:7b:6d:3c:d8:ed: cd:14:ae:84:8a:f0:27:94:82:8c:6a:ab:75:ef:4f:de:dc:6f: 25:02:7d:8d:dd:d6:04:ee:19:db:1d:22:e4:45:3d:7e:19:3a: 68:66:44:78:7f:bb:e0:7c:21:58:69:b6:44:23:a9:e3:3b:b4: 37:01:9d:c4:d1:4b:22:f1:2e:70:e9:6d:9f:40:52:07:c5:f2: 5b:df:01:25:78:33:d1:ec:b9:b6:95:e7:47:3e:f3:c0:de:0a: a5:a6:2a:e5:1f:26:34:77:5d:af:5b:c7:56:f3:45:3f:dc:fb: 73:30:26:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaG8UgWYNHEsS5NBpuGXE558MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYxMTA4MTgwMDU0WhcNMjYxMTA5MTgwMDU0WjAzMTEwLwYDVQQD EygxYzU2NTBkZmM4YTllYWNlYWQyMzEzZTI2ZWZkYWU1MzIyMjljYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLtR8zKllrlV7EMAtYhw3kK+Sx8v lh3Y8rGans5/BmEmqgsZIcLnAs5dxu1OxOeYknEPpnbdt3+N9XRT7Imnx1fOKDN4 Vh9qSYFVogtnE26J59SBlvigaOS1TIZD52zUyTNUbLe7n3n2M3uFf5J2OSr30/QM e7bagIy2BPm25vqxDcM/eUH3khqGCkNJ55JlaCGsCCKojNKwsoEFLetpW831g9bL qXm1KF+mgKAMVepIqpW8zbWLtS1XkFfEBjimMMEiQOEaVV3t97RSlM+CphaElXxw dC/UfwR1yxm38k9Jlc+EtNUn2Who6Mk8G4aKuy6Q6LQu04agf6+cPgMkpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxWUN/IqerOrSMT4m79rlMiKcvKMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwAd/RR1 YxpDG96SKI+tan2Al+9+Wp2ndfMZnkKHzLrBm6FjVjnQbI9HlaU2xrWF0C9MbFAi K6roPsbr6hEU0Z3K1DLDfHZTVa6229DgxNJ5slejtEkBx5fJKm5n/sUNT3zt/NFa MdxvF2V1epP7gAqe9m3tlgggmF1SshQfWfwdh5oGnx9TOyLbNXttPNjtzRSuhIrw J5SCjGqrde9P3txvJQJ9jd3WBO4Z2x0i5EU9fhk6aGZEeH+74HwhWGm2RCOp4zu0 NwGdxNFLIvEucOltn0BSB8XyW98BJXgz0ey5tpXnRz7zwN4KpaYq5R8mNHddr1vH VvNFP9z7czAmRw== -----END CERTIFICATE-----Generated at Mon Nov 9 06:57:17 2026 by rpki-client