$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: zfw0vths1LtZn5+AkzYmYOuG4r5hOXP/lMWapGaayck= Subject key identifier: A3:0F:56:C7:06:68:8F:31:52:A6:44:63:47:20:49:FC:B3:2C:63:51 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 01A0BFFA44FD8244DD187051A637330935AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: 0312 Signing time: Sun 20 Sep 2026 18:00:44 +0000 Manifest this update: Sun 20 Sep 2026 18:00:44 +0000 Manifest next update: Mon 21 Sep 2026 18:00:44 +0000 Files and hashes: 1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: Y/gGvHuPVtChtxyONMyM3AgVgkqMrWjYMaK0DeGkTZo=) 2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 3: LwkL8JNPGKBmB5BgKUQDN_7UkRc.roa (hash: 1y+oofyBJConbafGQg6XYJc8yYIlOho+25fEGRBOnMI=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 13: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (hash: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:fa:44:fd:82:44:dd:18:70:51:a6:37:33:09:35:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Sep 20 18:00:44 2026 GMT Not After : Sep 21 18:00:44 2026 GMT Subject: CN=a30f56c706688f3152a64463472049fcb32c6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:28:3c:20:a4:75:08:ad:c6:48:ce:3c:16: 71:20:59:a0:ff:75:ac:3d:02:b4:20:f2:98:39:65: 58:d7:e6:18:51:ad:60:95:a5:c3:0b:26:3b:7c:b5: 6c:1a:a0:0a:df:9d:34:b4:22:77:a5:b4:3d:a3:79: db:af:7f:86:4a:40:4b:72:24:f8:c4:ba:5b:35:42: f4:13:00:91:16:ee:6f:d7:32:7d:9a:e1:91:65:8d: a9:fa:b1:c0:19:b6:45:51:e6:83:ac:fe:1b:30:76: 02:31:bd:b4:89:d5:7a:68:f7:bd:f9:01:55:06:b0: 64:4b:d8:f5:4f:78:e7:77:a1:f0:c9:c4:1d:cd:f0: 64:db:dd:93:37:d9:eb:19:16:94:79:56:da:b7:33: a6:2a:1f:47:df:8e:2f:4e:7a:74:b1:ef:33:e9:f3: a4:e1:7b:1d:fe:f1:c0:9f:db:c4:2f:0b:b7:9c:48: e3:e7:99:e0:b1:76:83:d5:2c:a6:70:88:18:c8:73: 8b:da:6b:60:56:fa:94:32:3f:d3:86:f1:3c:2f:2a: e3:6b:81:9c:9f:f6:52:11:3a:ce:c0:03:2b:e9:58: ac:58:9e:28:26:d3:5f:ed:c6:7b:02:1f:5e:6f:b6: f6:8f:0d:f9:f1:f3:e8:34:5c:f7:34:26:28:83:9c: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0F:56:C7:06:68:8F:31:52:A6:44:63:47:20:49:FC:B3:2C:63:51 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b2:db:b3:78:f0:6e:48:33:a9:a8:42:fa:f6:6c:c3:f2:2b: 28:e1:ed:18:71:0c:e0:0d:bf:0d:10:86:d9:1b:b2:18:d1:0a: 35:29:df:3d:92:c5:2e:f6:ae:ed:6a:cb:ef:3a:dc:5f:e0:a5: 9c:3f:48:e5:ab:b6:dd:9c:d8:eb:64:3f:d5:06:a5:3b:88:5f: d1:59:24:a7:c9:f6:77:f9:7e:f4:06:4c:65:5e:1e:1c:c1:c8: a7:65:5d:60:c7:d2:16:8b:3d:f1:88:c3:31:4f:55:1d:1b:1b: 29:38:90:0c:f8:41:d3:b7:2d:8a:ad:df:bc:f5:3d:24:83:67: 6c:49:55:26:39:73:6f:8f:38:47:ba:c3:7d:d9:33:e5:18:ba: d8:82:57:ab:db:db:c3:47:0d:e1:df:f6:9b:88:ca:23:e0:8f: 81:da:ff:b2:9e:f4:a1:d3:42:7f:4c:47:24:8b:5d:2e:91:38: 5f:62:55:51:a8:8d:7f:93:61:f2:fd:d7:e5:20:fc:be:03:ea: 7e:66:d8:72:2b:43:5b:f8:45:0e:9a:57:cc:ef:a2:2c:d1:dd: b5:ae:25:dd:98:26:ea:12:3a:d2:6a:f6:d2:bb:a5:8f:90:63: 66:e8:04:b8:d1:9b:4e:ed:11:22:10:e1:cc:5d:13:40:97:8d: c8:f8:3a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/+kT9gkTdGHBRpjczCTWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwOTIwMTgwMDQ0WhcNMjYwOTIxMTgwMDQ0WjAzMTEwLwYDVQQD EyhhMzBmNTZjNzA2Njg4ZjMxNTJhNjQ0NjM0NzIwNDlmY2IzMmM2MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kwoPCCkdQitxkjOPBZxIFmg/3Ws PQK0IPKYOWVY1+YYUa1glaXDCyY7fLVsGqAK3500tCJ3pbQ9o3nbr3+GSkBLciT4 xLpbNUL0EwCRFu5v1zJ9muGRZY2p+rHAGbZFUeaDrP4bMHYCMb20idV6aPe9+QFV BrBkS9j1T3jnd6HwycQdzfBk292TN9nrGRaUeVbatzOmKh9H344vTnp0se8z6fOk 4Xsd/vHAn9vELwu3nEjj55ngsXaD1SymcIgYyHOL2mtgVvqUMj/ThvE8Lyrja4Gc n/ZSETrOwAMr6VisWJ4oJtNf7cZ7Ah9eb7b2jw358fPoNFz3NCYog5z/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMPVscGaI8xUqZEY0cgSfyzLGNRMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrLbs3jw bkgzqahC+vZsw/IrKOHtGHEM4A2/DRCG2RuyGNEKNSnfPZLFLvau7WrL7zrcX+Cl nD9I5au23ZzY62Q/1QalO4hf0Vkkp8n2d/l+9AZMZV4eHMHIp2VdYMfSFos98YjD MU9VHRsbKTiQDPhB07ctiq3fvPU9JINnbElVJjlzb484R7rDfdkz5Ri62IJXq9vb w0cN4d/2m4jKI+CPgdr/sp70odNCf0xHJItdLpE4X2JVUaiNf5Nh8v3X5SD8vgPq fmbYcitDW/hFDppXzO+iLNHdta4l3Zgm6hI60mr20rulj5BjZugEuNGbTu0RIhDh zF0TQJeNyPg6LQ== -----END CERTIFICATE-----Generated at Sun Sep 20 23:47:11 2026 by rpki-client