$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: ihqa3sfYACqCaEWK7HxVO0SohxAGxBHXK09QscHbpKo= Subject key identifier: B4:96:03:12:A6:64:EB:61:DA:9C:F3:EB:51:00:91:72:A1:CF:50:48 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0E92B7634AF619DAE914DA7B79E1B30FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1ACE Signing time: Mon 28 Sep 2026 17:58:54 +0000 Manifest this update: Mon 28 Sep 2026 17:58:54 +0000 Manifest next update: Tue 29 Sep 2026 17:58:54 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=) 3: A6LfDgEy1-CIq_wKeSafF7owxGw.roa (hash: 2eSRz1uTsX5V8ge1JFn7YOgJsteUxb9SFLJxq6LxphY=) 4: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 5: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=) 6: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=) 7: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=) 8: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: tK7vH9bDZounazJMPhUkFZl7O2SYOtkxm1lzc4G9bUY=) 9: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=) 10: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 11: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 12: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 13: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 14: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=) 15: op5I0zZmxj_KZWaz0I1w-PMQtiM.roa (hash: UqBj2kYM4AhsljyiEXdBTgXWr+0Yw8Z9/cE6WVYCTko=) 16: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=) 17: plplcojObk3dawLZH3Mnt5_h870.roa (hash: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=) 18: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 19: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e9:2b:76:34:af:61:9d:ae:91:4d:a7:b7:9e:1b:30:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 28 17:58:54 2026 GMT Not After : Sep 29 17:58:54 2026 GMT Subject: CN=b4960312a664eb61da9cf3eb51009172a1cf5048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:fa:1a:3a:35:f7:ba:66:6f:af:0e:da:d7: de:2b:3b:ef:ac:bc:23:37:7e:2b:a7:4f:63:c0:c5: 14:16:f0:8e:bf:f2:b4:11:ca:72:66:cf:bd:12:7e: 66:eb:82:dc:a7:54:58:40:f0:30:a5:8d:a3:22:db: 40:47:ff:d8:a2:83:3d:d3:99:52:af:45:27:2f:23: 9c:61:8b:2f:19:6d:fc:c8:8b:97:15:b4:20:e3:c4: db:67:1a:92:53:a2:1f:46:23:53:dd:1c:35:f5:fa: 8a:41:f3:85:83:b6:2c:8b:ab:9a:33:f9:9c:46:52: 95:d6:ff:fa:aa:48:2a:22:9c:cb:da:f1:8e:37:e0: 61:8d:9c:5e:c7:74:c3:31:c2:61:0d:eb:87:92:ed: 2a:34:08:8d:e2:06:a0:3c:5d:19:2b:b3:28:7e:24: 86:c7:d2:53:bf:24:ec:78:4f:6a:8f:24:5a:53:b5: 5d:b6:8c:e7:e5:f4:ab:93:c5:d4:aa:34:0b:5a:a1: 53:01:66:8e:96:32:55:16:fd:b9:57:c7:11:e2:e5: 14:1f:59:d0:1d:e2:56:eb:4b:80:1a:fb:77:13:05: 94:1f:b4:c8:92:28:25:1f:99:a7:58:42:6b:e8:6d: f7:d1:0a:02:3d:d0:0f:71:d4:4a:c5:ed:56:3a:15: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:03:12:A6:64:EB:61:DA:9C:F3:EB:51:00:91:72:A1:CF:50:48 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:db:8f:7c:f8:ba:06:93:e7:48:23:dc:9a:7e:d4:76:4e:e9: fc:11:16:f9:3f:86:ff:02:b6:09:c8:a2:2a:14:5c:fc:7a:f7: 25:8e:d0:5f:82:cc:83:3e:a5:37:26:2a:5e:1c:58:b9:11:e5: ec:3d:90:da:33:11:de:73:f2:f2:80:20:f3:ec:a6:40:ab:26: 3c:fe:f7:f9:df:d9:29:98:c0:23:27:67:7e:93:2b:0c:1b:64: 81:c4:a7:9f:9a:a2:60:f3:42:e8:e4:41:e4:d2:a6:6d:f4:50: ea:0d:6f:b1:f7:a8:80:34:9f:40:de:bb:17:71:46:d2:ee:25: dc:c7:fa:fd:da:37:7d:61:e0:35:bb:c5:fb:03:96:67:b3:04: 23:80:e1:57:af:ec:4c:4d:f9:f1:df:1a:8b:b5:e7:7f:96:48: ce:e2:e3:95:7a:f9:9e:cf:b7:88:dc:06:9b:16:7b:0d:b0:2b: 95:6f:32:70:ea:b3:62:77:d5:f2:d9:cc:e9:df:3c:ed:61:d1: 0d:06:e8:35:f8:8a:79:82:65:15:c6:95:40:75:f3:d4:68:d4: a3:31:64:d1:28:6b:78:66:26:dd:80:0b:d9:5a:6f:7e:a9:48: 59:ec:a1:b9:9f:97:b8:0a:24:70:e9:05:a3:ba:f0:cc:4e:51: 2a:ef:46:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDpK3Y0r2GdrpFNp7eeGzD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTI4MTc1ODU0WhcNMjYwOTI5MTc1ODU0WjAzMTEwLwYDVQQD EyhiNDk2MDMxMmE2NjRlYjYxZGE5Y2YzZWI1MTAwOTE3MmExY2Y1MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p/6Gjo197pmb68O2tfeKzvvrLwj N34rp09jwMUUFvCOv/K0EcpyZs+9En5m64Lcp1RYQPAwpY2jIttAR//YooM905lS r0UnLyOcYYsvGW38yIuXFbQg48TbZxqSU6IfRiNT3Rw19fqKQfOFg7Ysi6uaM/mc RlKV1v/6qkgqIpzL2vGON+BhjZxex3TDMcJhDeuHku0qNAiN4gagPF0ZK7MofiSG x9JTvyTseE9qjyRaU7Vdtozn5fSrk8XUqjQLWqFTAWaOljJVFv25V8cR4uUUH1nQ HeJW60uAGvt3EwWUH7TIkiglH5mnWEJr6G330QoCPdAPcdRKxe1WOhWpUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSWAxKmZOth2pzz61EAkXKhz1BIMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtuPfPi6 BpPnSCPcmn7Udk7p/BEW+T+G/wK2CciiKhRc/Hr3JY7QX4LMgz6lNyYqXhxYuRHl 7D2Q2jMR3nPy8oAg8+ymQKsmPP73+d/ZKZjAIydnfpMrDBtkgcSnn5qiYPNC6ORB 5NKmbfRQ6g1vsfeogDSfQN67F3FG0u4l3Mf6/do3fWHgNbvF+wOWZ7MEI4DhV6/s TE358d8ai7Xnf5ZIzuLjlXr5ns+3iNwGmxZ7DbArlW8ycOqzYnfV8tnM6d887WHR DQboNfiKeYJlFcaVQHXz1GjUozFk0ShreGYm3YAL2VpvfqlIWeyhuZ+XuAokcOkF o7rwzE5RKu9Gwg== -----END CERTIFICATE-----Generated at Mon Sep 28 22:48:05 2026 by rpki-client