$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft File: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json) Hash identifier: GuI+AACPOVQAqpSqKHPW8TpfbUiLTNuD5jpaWvj8H04= Subject key identifier: 46:E6:C5:56:C0:EC:EC:FB:5C:27:BE:7B:15:0E:5C:38:80:D0:6D:5F Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019CAA586315F459893AA634F33AF268A9A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft Manifest number: F1 Signing time: Sun 01 Mar 2026 17:00:45 +0000 Manifest this update: Sun 01 Mar 2026 17:00:45 +0000 Manifest next update: Mon 02 Mar 2026 17:00:45 +0000 Files and hashes: 1: 8y88NJXHcEaqu4Abu5SxQh3fBpU.roa (hash: 6HPf79kWBhuWHiKXiOUnzlg4Ue3tB5koJ57WYMqtooc=) 2: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: bC8HtuY2SUFyB0Pfm754NXgoYVhT99R5V1wWbawKeHQ=) 3: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=) 4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=) 5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=) 6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=) 7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=) 8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=) 9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=) 10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=) 11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=) 12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=) 13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=) 14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:58:63:15:f4:59:89:3a:a6:34:f3:3a:f2:68:a9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Mar 1 17:00:45 2026 GMT Not After : Mar 2 17:00:45 2026 GMT Subject: CN=46e6c556c0ececfb5c27be7b150e5c3880d06d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:d2:5b:bf:6a:64:a1:80:e3:88:3c:fa:80: f1:85:d2:2e:9c:b9:b5:08:66:0f:ed:ba:0b:d6:3c: c6:95:d7:72:27:a3:d8:0e:ee:b9:f8:65:bf:59:f3: 63:a0:85:3c:da:2a:8f:b8:64:1d:5d:d1:3a:0b:0c: 85:8b:16:28:c3:cd:a3:d9:00:3f:9c:00:40:77:31: ae:58:0d:77:13:96:ed:9c:36:48:53:23:bb:3a:de: a3:4d:de:3e:06:61:21:bb:99:8f:4f:a6:3b:32:7f: 63:7d:9f:68:4c:71:35:02:b1:c7:96:27:58:fd:26: ef:5a:c1:6f:35:88:df:35:60:8b:3a:da:97:0f:44: 66:e5:58:a6:22:28:16:7a:db:81:67:f5:96:8f:36: 4f:a3:2e:93:dd:0a:27:5e:55:2b:ca:13:5f:85:12: c1:9e:94:11:7b:61:01:c7:fa:93:f2:26:01:84:28: bc:e6:3f:b9:b9:73:84:55:7b:54:66:5a:2a:0c:e0: d8:70:a4:34:22:86:a3:8e:9e:d1:a3:a8:6c:06:11: f9:7e:62:85:46:ba:9c:30:58:29:33:4e:e8:23:68: 4a:e0:b6:67:f6:0d:08:52:e1:fe:5b:49:1b:7c:10: e5:40:0d:92:18:4f:93:23:ce:d3:d0:04:61:ab:0e: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:C5:56:C0:EC:EC:FB:5C:27:BE:7B:15:0E:5C:38:80:D0:6D:5F X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:0f:09:16:80:06:40:3e:9c:7d:ab:e1:59:c2:31:a0:03: b9:42:b5:b2:12:4a:29:a2:05:34:04:8a:ac:e6:1e:3f:69:e7: f1:2d:04:df:27:85:2c:8a:53:67:55:72:3e:13:0f:0c:50:01: d1:58:cb:5c:ea:64:04:a8:6f:40:c7:b4:67:04:4d:b2:32:56: 9e:09:c2:bf:87:27:13:ec:c2:64:c6:7b:67:80:9f:ae:b7:15: 05:14:4e:67:6e:3b:10:10:55:81:4b:81:a0:91:1e:a3:68:74: a0:db:0f:4a:a8:b7:eb:7f:f0:e0:78:a6:e5:7f:c9:13:a6:21: 0a:fd:35:6a:9e:4b:17:ab:f6:54:60:8f:82:a4:e0:35:49:a0: c6:85:a4:04:8e:75:69:ce:d9:bc:47:86:cb:1c:4b:18:e0:16: 6c:e3:0c:61:ef:35:94:42:46:83:ed:fe:d3:e9:d9:b8:a7:8f: b4:c7:47:0d:35:cb:e0:6d:f2:06:da:34:79:e5:87:af:ae:df: 8f:4d:b7:c2:0f:b0:4a:01:fd:29:38:cf:b0:da:96:d8:36:54: 37:3c:c2:3c:6d:99:19:b5:1f:b2:19:8e:2b:2c:a0:3e:79:da: 51:19:51:d8:8a:85:df:be:72:6a:60:9e:48:38:a9:07:34:90: 5b:c6:d8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWGMV9FmJOqY08zryaKmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMzAxMTcwMDQ1WhcNMjYwMzAyMTcwMDQ1WjAzMTEwLwYDVQQD Eyg0NmU2YzU1NmMwZWNlY2ZiNWMyN2JlN2IxNTBlNWMzODgwZDA2ZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNHSW79qZKGA44g8+oDxhdIunLm1 CGYP7boL1jzGlddyJ6PYDu65+GW/WfNjoIU82iqPuGQdXdE6CwyFixYow82j2QA/ nABAdzGuWA13E5btnDZIUyO7Ot6jTd4+BmEhu5mPT6Y7Mn9jfZ9oTHE1ArHHlidY /SbvWsFvNYjfNWCLOtqXD0Rm5VimIigWetuBZ/WWjzZPoy6T3QonXlUryhNfhRLB npQRe2EBx/qT8iYBhCi85j+5uXOEVXtUZloqDODYcKQ0Ioajjp7Ro6hsBhH5fmKF RrqcMFgpM07oI2hK4LZn9g0IUuH+W0kbfBDlQA2SGE+TI87T0ARhqw43GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbmxVbA7Oz7XCe+exUOXDiA0G1fMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARawPCRaA BkA+nH2r4VnCMaADuUK1shJKKaIFNASKrOYeP2nn8S0E3yeFLIpTZ1VyPhMPDFAB 0VjLXOpkBKhvQMe0ZwRNsjJWngnCv4cnE+zCZMZ7Z4CfrrcVBRROZ247EBBVgUuB oJEeo2h0oNsPSqi363/w4Him5X/JE6YhCv01ap5LF6v2VGCPgqTgNUmgxoWkBI51 ac7ZvEeGyxxLGOAWbOMMYe81lEJGg+3+0+nZuKePtMdHDTXL4G3yBto0eeWHr67f j023wg+wSgH9KTjPsNqW2DZUNzzCPG2ZGbUfshmOKyygPnnaURlR2IqF375yamCe SDipBzSQW8bYcA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:55:22 2026 by rpki-client