
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json)
Hash identifier: fDJoQUd0ZwXRrg/PKVCVfcLYbsGZSpvDDp4pL00QRd8=
Subject key identifier: A0:78:44:C2:C9:1A:0E:0F:A3:78:52:0A:A9:75:75:F6:64:81:98:38
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 019EBF5A81FD844D32631D0478B98B73DD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
Manifest number: 0205
Signing time: Sat 13 Jun 2026 05:00:40 +0000
Manifest this update: Sat 13 Jun 2026 05:00:40 +0000
Manifest next update: Sun 14 Jun 2026 05:00:40 +0000
Files and hashes: 1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=)
2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: CLYz3gJz0/kmdURzkwyApVTW86iiZo+SKpYNGTUlBkE=)
3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=)
4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=)
5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=)
6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=)
7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=)
8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=)
9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=)
10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=)
11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=)
12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=)
13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=)
14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:81:fd:84:4d:32:63:1d:04:78:b9:8b:73:dd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Jun 13 05:00:40 2026 GMT
Not After : Jun 14 05:00:40 2026 GMT
Subject: CN=a07844c2c91a0e0fa378520aa97575f664819838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:90:70:ae:28:d6:97:a3:0e:23:64:ae:20:
6b:1e:80:b1:e1:60:3a:41:9f:a1:a8:cc:18:36:3b:
74:a2:94:a5:5b:00:ff:7d:ee:d6:b9:f1:b8:57:b6:
d1:96:30:f6:b8:91:d1:c8:54:f5:e6:5c:11:ba:98:
f4:15:37:31:ff:2b:47:a5:b7:ce:e9:50:2b:e5:b9:
de:86:4c:5a:18:cb:4f:f2:d1:63:cd:fe:8f:70:40:
fa:f4:ca:94:c9:4f:2a:0f:a8:c4:d0:9c:42:62:26:
41:f7:a0:c6:65:b7:b6:02:6e:f3:76:ec:e7:64:d3:
e0:16:07:b7:b7:5b:e3:bb:17:57:ad:49:83:07:f0:
bc:93:c9:80:9e:e2:9c:01:7a:5d:d4:58:b3:65:07:
28:e0:2d:91:10:f4:58:28:0f:c7:57:15:ae:ec:36:
c4:71:85:78:5b:da:d1:2a:1e:9a:8c:8c:b3:3c:93:
71:41:73:8e:bd:8c:f4:b4:cd:62:b6:34:63:13:fd:
82:9b:0b:81:d5:50:3c:e4:6b:2f:fa:01:41:0e:d3:
ed:49:54:b6:12:db:99:f0:98:12:c0:b6:72:ff:da:
c8:c7:f7:8a:d2:f0:7c:52:5b:ec:19:bf:0d:b9:92:
3b:63:b6:1a:b1:27:6b:75:a3:83:36:f4:ed:31:00:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:44:C2:C9:1A:0E:0F:A3:78:52:0A:A9:75:75:F6:64:81:98:38
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5f:b4:bf:3c:40:47:2b:e8:ac:29:f0:e0:7b:f1:a6:f7:78:
6c:85:80:60:72:b3:a9:5d:9e:74:73:dd:11:12:c2:dc:21:6b:
1e:19:91:f2:72:4d:3f:99:6b:d6:b0:02:15:f1:47:08:3b:d8:
59:86:a3:54:f0:bd:85:e3:96:d8:2f:01:24:8f:23:18:9e:be:
d5:1a:df:3d:e6:70:24:55:25:cd:aa:08:49:ec:25:1a:7e:e5:
1f:b4:d2:7b:25:4c:a1:bc:6a:3a:04:01:ca:e6:a3:bd:79:ac:
a3:57:14:3e:59:37:ed:f2:7d:ac:df:0d:eb:38:25:1c:38:e0:
34:0c:fe:03:0d:5c:17:8a:1c:7e:12:bd:89:7e:54:a1:d0:d0:
24:d3:a5:71:48:64:ae:87:4a:ed:35:34:26:2d:21:10:60:06:
83:f6:5a:e9:eb:bd:ab:1e:a2:58:b8:44:1e:9e:e6:ec:e5:87:
fe:e8:f7:0d:40:b9:4a:a3:1d:ab:05:d9:3a:bb:f8:55:c4:4e:
bd:0b:ac:22:af:7e:11:df:41:4c:11:28:7d:f8:8f:b0:f8:af:
a8:23:14:2b:60:c8:15:88:0f:dc:e6:ac:0e:6a:d1:9f:36:ab:
71:28:9e:27:7c:ab:f4:55:24:06:02:24:35:5a:4a:4f:db:eb:
f6:0f:14:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WoH9hE0yYx0EeLmLc91GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy
ODE1YjkwHhcNMjYwNjEzMDUwMDQwWhcNMjYwNjE0MDUwMDQwWjAzMTEwLwYDVQQD
EyhhMDc4NDRjMmM5MWEwZTBmYTM3ODUyMGFhOTc1NzVmNjY0ODE5ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRCQcK4o1pejDiNkriBrHoCx4WA6
QZ+hqMwYNjt0opSlWwD/fe7WufG4V7bRljD2uJHRyFT15lwRupj0FTcx/ytHpbfO
6VAr5bnehkxaGMtP8tFjzf6PcED69MqUyU8qD6jE0JxCYiZB96DGZbe2Am7zduzn
ZNPgFge3t1vjuxdXrUmDB/C8k8mAnuKcAXpd1FizZQco4C2REPRYKA/HVxWu7DbE
cYV4W9rRKh6ajIyzPJNxQXOOvYz0tM1itjRjE/2CmwuB1VA85Gsv+gFBDtPtSVS2
EtuZ8JgSwLZy/9rIx/eK0vB8UlvsGb8NuZI7Y7YasSdrdaODNvTtMQAD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB4RMLJGg4Po3hSCql1dfZkgZg4MB8GA1UdIwQY
MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt
YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy
LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1+0vzxA
RyvorCnw4Hvxpvd4bIWAYHKzqV2edHPdERLC3CFrHhmR8nJNP5lr1rACFfFHCDvY
WYajVPC9heOW2C8BJI8jGJ6+1RrfPeZwJFUlzaoISewlGn7lH7TSeyVMobxqOgQB
yuajvXmso1cUPlk37fJ9rN8N6zglHDjgNAz+Aw1cF4ocfhK9iX5UodDQJNOlcUhk
rodK7TU0Ji0hEGAGg/Za6eu9qx6iWLhEHp7m7OWH/uj3DUC5SqMdqwXZOrv4VcRO
vQusIq9+Ed9BTBEoffiPsPivqCMUK2DIFYgP3OasDmrRnzarcSieJ3yr9FUkBgIk
NVpKT9vr9g8UfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:57:52 2026 by rpki-client