$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: L4F4RDCK/1s8vj++HTFdnQK29vCaiyHajrabTPzfqxw= Subject key identifier: 97:DC:9A:84:95:6C:29:F7:52:DE:58:B7:E5:F6:D2:8D:21:F5:A9:6D Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D21019DC1BCB06F39BB2E97E6FF29A1E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18CA Signing time: Tue 24 Mar 2026 18:00:47 +0000 Manifest this update: Tue 24 Mar 2026 18:00:47 +0000 Manifest next update: Wed 25 Mar 2026 18:00:47 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: k0vw2LPIXa8XnkQr0TPKP4faPvGl3hK3PKR7tOFOH8g=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:21:01:9d:c1:bc:b0:6f:39:bb:2e:97:e6:ff:29:a1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Mar 24 18:00:47 2026 GMT Not After : Mar 25 18:00:47 2026 GMT Subject: CN=97dc9a84956c29f752de58b7e5f6d28d21f5a96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:35:ec:4a:f7:df:24:e9:e4:71:6f:2d:93: fe:a8:54:39:7f:2a:f4:a8:2d:9c:20:cb:40:3c:8a: ef:13:54:98:e1:ca:57:1f:2d:07:75:0c:05:46:9f: 10:75:76:83:96:56:b3:93:a2:81:9b:1f:2e:9a:6a: 87:4c:aa:ad:94:30:70:ce:28:72:89:b3:fc:5a:6b: 17:60:c7:f9:0d:85:f4:f8:9b:e6:30:52:06:33:64: ff:51:15:e6:67:85:cd:84:46:d8:35:23:2f:b7:31: d3:76:ad:52:4c:ca:67:70:0d:a1:a2:5a:e4:e7:60: 91:9d:d0:6c:ff:4d:e3:14:8d:4d:12:8d:43:62:cd: a9:6e:45:73:65:eb:74:c3:0b:32:b8:95:1e:37:13: b6:fb:99:f5:50:9c:c5:e0:55:f0:b0:8c:66:4d:3e: 08:b0:b1:3d:a1:b7:27:17:c1:28:ff:54:95:06:4a: 5f:79:ed:ad:8d:5f:90:58:fe:c3:df:a9:b9:7e:80: b4:31:b5:2e:7c:fd:f4:75:31:87:9b:74:45:96:cd: b2:c5:66:32:a6:4b:fc:15:b7:20:e8:c4:f3:21:73: 8e:a7:9d:60:6e:6e:ef:f9:fa:97:40:be:12:86:9c: 00:09:a8:d2:18:e4:66:b2:b8:50:72:c3:bb:82:cf: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DC:9A:84:95:6C:29:F7:52:DE:58:B7:E5:F6:D2:8D:21:F5:A9:6D X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4d:cb:e9:6a:ec:b3:f6:1b:30:df:f2:75:55:f8:49:aa:0e: 3b:a2:9a:2d:6e:96:40:ba:a1:14:14:97:dd:c7:07:f5:0a:23: e7:c4:65:b3:0a:59:e8:70:22:b2:5f:a2:56:c3:f8:fe:f6:71: ff:4f:7b:22:5b:77:24:da:df:e0:29:2b:d6:dd:8c:eb:04:f2: 88:b1:f9:4e:16:f4:94:07:ae:91:42:9d:d5:22:6c:37:24:8f: a2:a8:14:0b:3a:5d:a2:09:74:35:c5:05:12:36:87:7c:a5:fc: 16:f3:cc:b8:86:38:25:d4:c8:7f:44:89:d4:df:d4:c0:03:ac: ff:8e:7c:68:96:66:72:13:85:46:1f:90:27:b5:c2:97:e5:3e: f0:2b:fa:9f:1a:7d:d3:f5:7e:f9:18:db:24:0e:91:98:c9:e6: ce:35:1a:75:c2:eb:ea:d0:1a:75:d4:19:19:9e:a5:c0:ae:fa: 64:36:b2:6b:a9:1b:9a:4e:b4:2a:20:1d:69:2c:32:07:93:2a: 24:68:98:e9:9a:cd:a1:b7:c0:6e:e5:31:6b:83:d1:df:62:55: 1a:55:df:5f:1a:21:8d:37:e9:28:cf:9d:d0:d1:02:6b:44:66: 88:55:db:d0:63:34:e2:82:f1:c5:84:65:f1:45:0e:e3:93:88: 60:25:f6:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0hAZ3BvLBvObsul+b/KaHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMzI0MTgwMDQ3WhcNMjYwMzI1MTgwMDQ3WjAzMTEwLwYDVQQD Eyg5N2RjOWE4NDk1NmMyOWY3NTJkZTU4YjdlNWY2ZDI4ZDIxZjVhOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkQ17Er33yTp5HFvLZP+qFQ5fyr0 qC2cIMtAPIrvE1SY4cpXHy0HdQwFRp8QdXaDllazk6KBmx8ummqHTKqtlDBwzihy ibP8WmsXYMf5DYX0+JvmMFIGM2T/URXmZ4XNhEbYNSMvtzHTdq1STMpncA2holrk 52CRndBs/03jFI1NEo1DYs2pbkVzZet0wwsyuJUeNxO2+5n1UJzF4FXwsIxmTT4I sLE9obcnF8Eo/1SVBkpfee2tjV+QWP7D36m5foC0MbUufP30dTGHm3RFls2yxWYy pkv8Fbcg6MTzIXOOp51gbm7v+fqXQL4ShpwACajSGORmsrhQcsO7gs/U5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfcmoSVbCn3Ut5Yt+X20o0h9altMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE3L6Wrs s/YbMN/ydVX4SaoOO6KaLW6WQLqhFBSX3ccH9Qoj58RlswpZ6HAisl+iVsP4/vZx /097Ilt3JNrf4Ckr1t2M6wTyiLH5Thb0lAeukUKd1SJsNySPoqgUCzpdogl0NcUF EjaHfKX8FvPMuIY4JdTIf0SJ1N/UwAOs/458aJZmchOFRh+QJ7XCl+U+8Cv6nxp9 0/V++RjbJA6RmMnmzjUadcLr6tAaddQZGZ6lwK76ZDaya6kbmk60KiAdaSwyB5Mq JGiY6ZrNobfAbuUxa4PR32JVGlXfXxohjTfpKM+d0NECa0RmiFXb0GM04oLxxYRl 8UUO45OIYCX2qw== -----END CERTIFICATE-----Generated at Wed Mar 25 03:45:22 2026 by rpki-client