$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: rUOZmSnOfD72nBGh1BH+fY5PMNKuRY+ZfyXxLeKzKRQ= Subject key identifier: 74:6A:12:E0:7C:2C:2C:2A:2C:3B:D3:31:70:3E:BC:94:DD:21:60:66 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D687714076D75624D1F15F80EC824A274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18EF Signing time: Tue 07 Apr 2026 15:02:07 +0000 Manifest this update: Tue 07 Apr 2026 15:02:07 +0000 Manifest next update: Wed 08 Apr 2026 15:02:07 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: COyE/BxsPrpye94ncxG0eNm8svVuXGtQWblebjB8+l4=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Apr 2026 14:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:68:77:14:07:6d:75:62:4d:1f:15:f8:0e:c8:24:a2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 7 15:02:07 2026 GMT Not After : Apr 8 15:02:07 2026 GMT Subject: CN=746a12e07c2c2c2a2c3bd331703ebc94dd216066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b1:ec:4f:cc:cc:b9:60:40:5e:10:6a:7c:55: a7:1f:68:56:f9:f5:f9:26:74:7c:78:60:56:93:93: 36:9d:23:6d:f9:8b:e5:8a:62:40:2e:52:6e:e1:13: c5:a5:98:a1:3f:1a:a6:21:60:eb:1c:1c:d1:ef:e4: 7e:f9:cc:8e:c2:3a:41:38:33:2c:aa:e5:ca:27:d3: 3e:23:3a:93:5b:bb:91:17:5f:bb:63:d2:cf:22:88: e9:eb:63:8e:50:08:c2:5d:03:e0:24:95:cf:22:c0: 6c:26:d9:e5:5e:82:8b:7a:1a:ca:fc:8b:3c:d6:d3: dc:27:39:58:eb:84:69:4b:e7:72:c2:b6:91:1f:82: 29:d2:41:b1:a6:9a:8b:15:5d:f8:89:da:36:62:56: ca:cd:e7:b6:6d:e1:36:b1:65:32:2b:94:54:77:2d: 62:c7:fe:86:75:cf:b4:0b:e9:52:60:ed:aa:96:b2: e3:bf:9b:e3:0c:fc:f1:b5:30:db:61:b8:7a:b7:ff: d9:4e:f4:4f:22:71:14:b0:dc:ad:73:8c:93:46:55: f0:ab:69:ff:86:6c:94:05:fd:20:81:94:83:88:c4: a6:80:55:d1:a8:08:b7:1c:82:9f:15:f9:00:b8:6f: 39:aa:86:8f:93:c9:f7:9c:38:6a:af:e8:7e:a1:66: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:12:E0:7C:2C:2C:2A:2C:3B:D3:31:70:3E:BC:94:DD:21:60:66 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:f3:0b:80:13:b3:09:bc:f0:73:1f:6e:e2:81:a3:45:07: 1a:f2:0b:88:34:9f:9b:47:5f:a3:3f:06:de:4f:ab:1b:62:61: d4:a6:07:67:32:ab:a9:c8:1a:48:37:b0:2f:02:57:0c:bd:8f: de:77:5b:17:83:48:33:7d:35:37:5f:04:01:6b:2e:aa:9a:a4: 06:1a:f5:2c:2f:ef:b8:d3:ae:f0:f7:47:83:00:88:f4:2e:7c: c9:03:d8:c3:92:af:03:78:83:71:4b:4d:74:2f:8d:97:8a:8c: d8:a0:e8:74:16:36:94:03:67:fa:8c:42:84:a3:97:a4:7f:f2: 5c:be:7e:b0:11:14:ab:9e:3b:02:9c:cd:89:3c:be:05:d6:6c: c1:8a:b6:ab:c8:b0:9c:2f:fa:cc:d6:aa:5b:1a:b5:12:44:a8: 40:8e:3c:01:75:1d:88:88:19:60:97:47:17:b0:30:23:8a:4f: 09:bc:ef:d5:5a:a6:65:a9:a6:a9:66:32:83:63:7e:09:81:06: cf:65:c5:ef:c0:a9:45:71:f8:94:59:4d:d2:dd:8a:97:77:48: a8:dc:8b:41:7c:85:66:3f:37:3d:45:a4:e5:e6:19:58:3d:65: ad:65:d8:9a:55:2a:57:34:8b:8e:d6:6e:bd:e3:e5:a1:ef:7c: a0:47:ca:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1odxQHbXViTR8V+A7IJKJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDA3MTUwMjA3WhcNMjYwNDA4MTUwMjA3WjAzMTEwLwYDVQQD Eyg3NDZhMTJlMDdjMmMyYzJhMmMzYmQzMzE3MDNlYmM5NGRkMjE2MDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7HsT8zMuWBAXhBqfFWnH2hW+fX5 JnR8eGBWk5M2nSNt+YvlimJALlJu4RPFpZihPxqmIWDrHBzR7+R++cyOwjpBODMs quXKJ9M+IzqTW7uRF1+7Y9LPIojp62OOUAjCXQPgJJXPIsBsJtnlXoKLehrK/Is8 1tPcJzlY64RpS+dywraRH4Ip0kGxppqLFV34ido2YlbKzee2beE2sWUyK5RUdy1i x/6Gdc+0C+lSYO2qlrLjv5vjDPzxtTDbYbh6t//ZTvRPInEUsNytc4yTRlXwq2n/ hmyUBf0ggZSDiMSmgFXRqAi3HIKfFfkAuG85qoaPk8n3nDhqr+h+oWYMsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRqEuB8LCwqLDvTMXA+vJTdIWBmMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOXzC4AT swm88HMfbuKBo0UHGvILiDSfm0dfoz8G3k+rG2Jh1KYHZzKrqcgaSDewLwJXDL2P 3ndbF4NIM301N18EAWsuqpqkBhr1LC/vuNOu8PdHgwCI9C58yQPYw5KvA3iDcUtN dC+Nl4qM2KDodBY2lANn+oxChKOXpH/yXL5+sBEUq547ApzNiTy+BdZswYq2q8iw nC/6zNaqWxq1EkSoQI48AXUdiIgZYJdHF7AwI4pPCbzv1VqmZammqWYyg2N+CYEG z2XF78CpRXH4lFlN0t2Kl3dIqNyLQXyFZj83PUWk5eYZWD1lrWXYmlUqVzSLjtZu vePloe98oEfKIw== -----END CERTIFICATE-----Generated at Tue Apr 7 21:46:05 2026 by rpki-client