$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: scJhUo/1a2XC+2+ZlYRKnsXQy8oVJm8oR6Dbc4CWfDE= Subject key identifier: ED:B6:75:AC:8D:3B:9F:B4:D8:0A:FB:79:C5:86:A2:C3:DE:23:6F:E6 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019DA56736406E2A9214CD3CFC542AE07ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 0173 Signing time: Sun 19 Apr 2026 11:01:37 +0000 Manifest this update: Sun 19 Apr 2026 11:01:37 +0000 Manifest next update: Mon 20 Apr 2026 11:01:37 +0000 Files and hashes: 1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=) 2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: LOQP3IF2xNQlHqoJbuW9UPqxzNkeOwOVomDlHUnF4ok=) 3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=) 13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a5:67:36:40:6e:2a:92:14:cd:3c:fc:54:2a:e0:7a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Apr 19 11:01:37 2026 GMT Not After : Apr 20 11:01:37 2026 GMT Subject: CN=edb675ac8d3b9fb4d80afb79c586a2c3de236fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:0d:25:10:a7:25:45:0b:db:86:2c:c9:80: 10:ee:cd:a2:53:11:38:09:cf:96:a2:63:64:57:d0: 68:98:32:82:d4:46:e6:3a:6f:da:73:73:4e:9f:ed: b8:a0:0d:25:ff:b0:6e:16:c0:9f:57:bc:00:06:c7: 49:b6:04:7f:98:e4:f4:96:ba:17:04:20:c3:74:39: 98:78:29:c6:b5:e3:b5:cf:36:49:21:b5:1d:5c:55: dc:e5:65:dd:57:87:ed:b6:40:51:99:c2:e2:a2:95: e1:05:55:1e:91:82:77:4b:4d:df:00:be:d3:88:7f: 2c:59:0f:5f:1f:e0:37:22:bd:b8:d9:a2:7a:ff:f2: e0:11:c8:b4:89:2b:4c:c0:de:72:68:43:c3:15:e2: ca:ae:2d:35:9e:d1:4c:de:2f:48:18:cb:40:d5:26: a6:88:ec:0d:b2:7a:5a:bd:61:5f:b6:78:0d:98:4f: ba:dd:38:16:a2:80:90:cb:46:bf:31:60:2f:a8:ba: 69:dc:b7:5d:9d:06:d4:e0:68:c5:6a:e7:aa:23:3e: 67:7f:b3:27:61:4c:f2:62:2e:ac:f7:e7:9d:48:e0: a6:27:83:86:43:90:39:84:69:27:2f:9e:22:41:55: 98:95:69:c5:5e:5d:04:e9:d2:ab:a4:92:09:70:ac: 9c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B6:75:AC:8D:3B:9F:B4:D8:0A:FB:79:C5:86:A2:C3:DE:23:6F:E6 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:00:6c:e9:83:59:26:45:dc:b2:2d:96:ec:94:e8:11:25:6d: e5:fa:b1:73:be:91:ee:97:e9:c8:b1:fd:97:15:dd:d9:28:9d: 0f:53:79:88:59:57:9f:42:9c:cb:1f:6f:79:67:07:9f:02:a1: 0f:a7:5f:bf:5b:49:e6:6c:b8:41:da:7d:26:14:52:24:06:2f: d9:dc:6c:00:0a:b0:27:5b:29:ac:34:22:1a:67:b5:34:eb:db: 5b:a4:ce:47:2d:d6:bd:07:7c:0b:c0:bb:19:c2:08:62:0a:c8: 53:e9:93:97:ed:b4:80:75:0b:0b:6f:92:08:63:e5:0c:4b:51: ce:99:7d:ce:3b:d5:79:9d:45:b3:d4:f4:78:c0:0b:29:7b:51: bc:95:41:7d:90:75:c2:65:a0:4e:6b:db:d8:92:17:93:d6:81: 4b:62:3f:9e:35:8e:ad:26:fd:ab:7c:51:a0:ea:b6:64:e5:5f: 4e:b0:58:6e:9b:6b:f6:40:3b:04:43:b7:74:7f:aa:45:76:72: 0a:e8:4e:2e:02:01:87:e7:77:90:11:04:6e:b8:a1:3a:43:52: 17:3c:51:e7:54:72:b6:c4:12:2a:94:2f:29:ad:62:7b:b5:bd: 87:6c:ad:e1:03:b8:fa:27:f8:d4:6b:c7:87:00:60:db:1d:48: 90:47:cd:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2lZzZAbiqSFM08/FQq4Hq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwNDE5MTEwMTM3WhcNMjYwNDIwMTEwMTM3WjAzMTEwLwYDVQQD EyhlZGI2NzVhYzhkM2I5ZmI0ZDgwYWZiNzljNTg2YTJjM2RlMjM2ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZUNJRCnJUUL24YsyYAQ7s2iUxE4 Cc+WomNkV9BomDKC1EbmOm/ac3NOn+24oA0l/7BuFsCfV7wABsdJtgR/mOT0lroX BCDDdDmYeCnGteO1zzZJIbUdXFXc5WXdV4fttkBRmcLiopXhBVUekYJ3S03fAL7T iH8sWQ9fH+A3Ir242aJ6//LgEci0iStMwN5yaEPDFeLKri01ntFM3i9IGMtA1Sam iOwNsnpavWFftngNmE+63TgWooCQy0a/MWAvqLpp3LddnQbU4GjFaueqIz5nf7Mn YUzyYi6s9+edSOCmJ4OGQ5A5hGknL54iQVWYlWnFXl0E6dKrpJIJcKycbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO22dayNO5+02Ar7ecWGosPeI2/mMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwBs6YNZ JkXcsi2W7JToESVt5fqxc76R7pfpyLH9lxXd2SidD1N5iFlXn0Kcyx9veWcHnwKh D6dfv1tJ5my4Qdp9JhRSJAYv2dxsAAqwJ1sprDQiGme1NOvbW6TORy3WvQd8C8C7 GcIIYgrIU+mTl+20gHULC2+SCGPlDEtRzpl9zjvVeZ1Fs9T0eMALKXtRvJVBfZB1 wmWgTmvb2JIXk9aBS2I/njWOrSb9q3xRoOq2ZOVfTrBYbptr9kA7BEO3dH+qRXZy CuhOLgIBh+d3kBEEbrihOkNSFzxR51RytsQSKpQvKa1ie7W9h2yt4QO4+if41GvH hwBg2x1IkEfNLw== -----END CERTIFICATE-----Generated at Sun Apr 19 14:03:11 2026 by rpki-client