$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 4Sf1jGPcZdBLTmWCusyQGMOgv0n96DceChbyef23JrQ= Subject key identifier: 3D:6A:C3:2E:76:45:8B:53:56:46:0D:A7:9D:2E:6E:36:BD:25:23:2C Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019ECFA965BCD7D69BF976F7D5DF66237707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 19A9 Signing time: Tue 16 Jun 2026 09:00:45 +0000 Manifest this update: Tue 16 Jun 2026 09:00:45 +0000 Manifest next update: Wed 17 Jun 2026 09:00:45 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: yeM9OHlWwowHN0EI+j+VbCiCbB/bGYKGKE7fbg8ld7k=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:cf:a9:65:bc:d7:d6:9b:f9:76:f7:d5:df:66:23:77:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jun 16 09:00:45 2026 GMT Not After : Jun 17 09:00:45 2026 GMT Subject: CN=3d6ac32e76458b5356460da79d2e6e36bd25232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:03:b6:4d:d1:ac:69:d0:d9:06:e5:85:1b: 5f:af:3f:44:ce:35:9e:05:7a:c8:c1:97:59:74:53: 5f:82:a6:15:6f:95:3c:2a:2e:cd:56:10:e1:68:88: f6:c7:89:5d:11:3b:6f:6c:ad:b7:ee:ae:ad:cc:a2: 63:ad:b0:f3:d0:2c:39:93:51:90:2a:23:fd:29:e5: 53:2b:9e:00:89:6d:19:2f:71:24:1f:66:67:0e:95: c3:c1:f0:18:68:49:2e:c1:08:f8:70:69:4b:ac:9b: 50:ff:87:49:30:ec:fd:8d:39:61:ca:d0:10:3a:54: d7:bf:95:4f:1b:d5:f7:b1:99:1e:36:09:e9:c9:7d: 55:eb:c3:29:0b:ec:34:06:89:6c:ec:b9:80:1f:a7: 7a:da:58:2e:be:ed:8b:ef:d2:72:f2:af:8b:b7:5f: c5:55:2f:6c:69:f2:40:90:2e:f7:1e:d8:91:74:6e: b6:25:3f:e0:b4:c2:fc:20:49:25:49:7e:68:b1:c2: b6:d6:11:3b:d1:72:77:a8:8e:02:8c:10:d9:fa:52: f9:f5:24:fa:b6:34:b9:e1:c4:ce:46:6f:60:a9:dc: c8:61:1e:63:ec:80:3d:81:1e:fb:bf:a0:8e:e0:59: 42:02:49:6d:6c:bd:3f:25:c4:a8:81:8c:7b:e8:b6: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:C3:2E:76:45:8B:53:56:46:0D:A7:9D:2E:6E:36:BD:25:23:2C X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e4:cd:3a:ea:cf:95:9b:f5:56:78:2f:71:eb:c8:18:0c:11: 71:fb:b9:f9:92:76:69:c4:c6:4e:c6:c6:c6:d9:e1:8d:3f:3c: 8e:42:b2:2a:e8:f4:d7:ff:76:71:42:6a:76:0f:1a:18:69:7b: d1:4c:d1:9f:bc:7e:b3:db:5b:79:e8:e8:cb:ed:46:6a:f1:e2: 2f:de:87:3e:87:58:4c:ca:1c:d2:ee:b4:de:0b:4d:e3:27:c5: 1c:b1:55:17:97:3b:17:8a:21:3e:13:95:f1:81:84:e8:1e:61: 18:3a:a0:a6:b1:41:0f:79:ca:33:54:36:af:c0:08:10:14:e1: c9:5e:97:3e:3a:1e:e1:a7:8e:cf:5e:d9:0f:61:a8:95:bd:91: 10:e8:63:cd:ee:18:da:35:64:3a:4b:95:5f:bc:ed:0c:ab:ba: 0a:bd:89:f3:75:b4:36:ba:f2:28:d5:11:33:23:49:d5:c6:f8: 01:b1:62:9d:72:80:81:4b:79:0b:f2:82:8a:36:02:89:a8:91: bf:d1:cd:25:b1:e0:82:f2:b2:b6:d9:18:39:b2:c8:20:5d:b9: 4c:ad:24:e7:88:0f:f6:ef:39:9a:e8:77:c4:ca:20:94:60:20: b8:0f:ec:51:4c:36:01:17:a0:c8:e4:2d:4b:04:9d:d8:ec:9a: ab:8f:44:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7PqWW819ab+Xb31d9mI3cHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNjE2MDkwMDQ1WhcNMjYwNjE3MDkwMDQ1WjAzMTEwLwYDVQQD EygzZDZhYzMyZTc2NDU4YjUzNTY0NjBkYTc5ZDJlNmUzNmJkMjUyMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmcDtk3RrGnQ2QblhRtfrz9EzjWe BXrIwZdZdFNfgqYVb5U8Ki7NVhDhaIj2x4ldETtvbK237q6tzKJjrbDz0Cw5k1GQ KiP9KeVTK54AiW0ZL3EkH2ZnDpXDwfAYaEkuwQj4cGlLrJtQ/4dJMOz9jTlhytAQ OlTXv5VPG9X3sZkeNgnpyX1V68MpC+w0Bols7LmAH6d62lguvu2L79Jy8q+Lt1/F VS9safJAkC73HtiRdG62JT/gtML8IEklSX5oscK21hE70XJ3qI4CjBDZ+lL59ST6 tjS54cTORm9gqdzIYR5j7IA9gR77v6CO4FlCAkltbL0/JcSogYx76LafFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1qwy52RYtTVkYNp50ubja9JSMsMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuTNOurP lZv1VngvcevIGAwRcfu5+ZJ2acTGTsbGxtnhjT88jkKyKuj01/92cUJqdg8aGGl7 0UzRn7x+s9tbeejoy+1GavHiL96HPodYTMoc0u603gtN4yfFHLFVF5c7F4ohPhOV 8YGE6B5hGDqgprFBD3nKM1Q2r8AIEBThyV6XPjoe4aeOz17ZD2Golb2REOhjze4Y 2jVkOkuVX7ztDKu6Cr2J83W0NrryKNURMyNJ1cb4AbFinXKAgUt5C/KCijYCiaiR v9HNJbHggvKyttkYObLIIF25TK0k54gP9u85muh3xMoglGAguA/sUUw2ARegyOQt SwSd2Oyaq49EMw== -----END CERTIFICATE-----Generated at Tue Jun 16 12:27:13 2026 by rpki-client