$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: tba4pAqTozEgk7AT7DtogS9YUAi7XKQpye5g42A3skw= Subject key identifier: 58:4A:58:05:CA:9B:0D:10:E1:83:1F:0B:91:2E:73:1C:B0:15:4B:40 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019DDA6739E712F560CFFF7711298A51E175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 192A Signing time: Wed 29 Apr 2026 18:01:31 +0000 Manifest this update: Wed 29 Apr 2026 18:01:31 +0000 Manifest next update: Thu 30 Apr 2026 18:01:31 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 1rkDvWSrcn6JK/DOvTj9RDNTr3BVsLoglA70sLRAuEQ=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 16:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:da:67:39:e7:12:f5:60:cf:ff:77:11:29:8a:51:e1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 29 18:01:31 2026 GMT Not After : Apr 30 18:01:31 2026 GMT Subject: CN=584a5805ca9b0d10e1831f0b912e731cb0154b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:3a:ae:b0:0e:fd:b3:7d:57:0b:0d:e8:a4: 11:e2:db:93:3d:60:c1:2d:55:a8:b2:26:ec:c9:0d: 5e:9c:4b:80:bf:c7:0a:4e:7c:06:7e:35:62:88:46: 67:a4:be:8d:45:7d:42:29:f8:ed:9a:28:d5:61:9b: c7:cf:46:77:63:4c:9d:7f:0a:4c:58:86:94:cc:b2: cc:c0:59:75:5f:b9:ce:99:10:bf:4c:fb:95:ba:0d: ec:04:10:36:22:4e:93:e0:7e:51:74:eb:1c:1b:04: 97:12:39:86:a4:b7:6f:87:97:9a:06:ca:7e:b8:4e: af:fb:c6:ae:53:f6:fe:17:24:f5:6d:8a:d7:af:6b: c6:8c:76:37:1e:8c:fb:84:c8:d2:84:52:65:61:3e: 06:80:b7:05:90:a6:61:b0:3f:6c:43:e5:5d:d3:a3: f1:30:9e:3c:18:c1:a7:ef:c6:d8:96:91:81:fd:c7: df:fe:48:98:14:bb:8e:9e:ae:45:7b:90:cb:a2:ef: c2:13:2d:9c:cd:8e:e1:e6:7a:be:9c:a5:19:06:8a: c0:f8:28:21:5d:2e:d2:55:f9:e9:26:5a:d6:12:5f: 6b:bc:8a:c5:d5:69:5f:2e:6c:06:c6:66:f1:07:10: 34:5b:d7:92:f6:80:b4:63:9b:ad:fb:26:c9:92:4b: 0d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4A:58:05:CA:9B:0D:10:E1:83:1F:0B:91:2E:73:1C:B0:15:4B:40 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:84:a8:ad:69:e8:95:4b:7b:78:56:11:ed:2f:9b:ed:5e:45: 21:96:e8:44:00:af:40:01:80:a7:b6:d7:dd:cb:bf:20:59:50: 96:1d:18:98:1c:ff:08:3e:f2:82:47:41:8a:46:c7:7d:bf:f2: 51:d8:98:e3:23:94:9b:f9:07:a8:71:b2:50:f1:b8:a7:34:c9: c0:c6:8a:84:bc:96:1f:e3:3d:a5:af:9a:1a:c2:5b:f2:f7:0a: 8c:76:2f:58:a0:b4:c4:5d:23:a2:7a:45:98:f0:76:ee:f5:75: 97:4e:43:64:ff:3c:3f:2a:30:fa:5e:09:dc:3d:e0:45:66:ee: f6:86:3a:d5:54:69:3e:f6:ae:65:04:d2:b9:0e:0d:b2:c2:ac: 4e:66:38:77:20:b3:86:b7:c0:9b:e6:53:f2:69:2c:27:a4:9b: 65:7f:99:61:5e:89:30:be:d1:c4:05:c5:67:0f:73:b6:38:e1: 45:d8:ab:79:c2:53:18:94:6e:01:6e:4f:10:48:41:ff:9a:26: dd:b4:6d:bb:50:4e:a3:d8:f0:52:7f:9e:0b:4e:c5:30:f9:c8: b2:ec:c2:a3:e4:5f:59:3f:f6:66:d2:9d:94:69:a2:21:90:35: 8d:15:ae:b9:8d:a8:18:0f:2b:a6:e6:7b:e4:bc:8c:ee:0d:85: f8:20:0f:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3aZznnEvVgz/93ESmKUeF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDI5MTgwMTMxWhcNMjYwNDMwMTgwMTMxWjAzMTEwLwYDVQQD Eyg1ODRhNTgwNWNhOWIwZDEwZTE4MzFmMGI5MTJlNzMxY2IwMTU0YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oY6rrAO/bN9VwsN6KQR4tuTPWDB LVWosibsyQ1enEuAv8cKTnwGfjViiEZnpL6NRX1CKfjtmijVYZvHz0Z3Y0ydfwpM WIaUzLLMwFl1X7nOmRC/TPuVug3sBBA2Ik6T4H5RdOscGwSXEjmGpLdvh5eaBsp+ uE6v+8auU/b+FyT1bYrXr2vGjHY3Hoz7hMjShFJlYT4GgLcFkKZhsD9sQ+Vd06Px MJ48GMGn78bYlpGB/cff/kiYFLuOnq5Fe5DLou/CEy2czY7h5nq+nKUZBorA+Cgh XS7SVfnpJlrWEl9rvIrF1WlfLmwGxmbxBxA0W9eS9oC0Y5ut+ybJkksNoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhKWAXKmw0Q4YMfC5EucxywFUtAMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYSorWno lUt7eFYR7S+b7V5FIZboRACvQAGAp7bX3cu/IFlQlh0YmBz/CD7ygkdBikbHfb/y UdiY4yOUm/kHqHGyUPG4pzTJwMaKhLyWH+M9pa+aGsJb8vcKjHYvWKC0xF0jonpF mPB27vV1l05DZP88Pyow+l4J3D3gRWbu9oY61VRpPvauZQTSuQ4NssKsTmY4dyCz hrfAm+ZT8mksJ6SbZX+ZYV6JML7RxAXFZw9ztjjhRdirecJTGJRuAW5PEEhB/5om 3bRtu1BOo9jwUn+eC07FMPnIsuzCo+RfWT/2ZtKdlGmiIZA1jRWuuY2oGA8rpuZ7 5LyM7g2F+CAPeA== -----END CERTIFICATE-----Generated at Thu Apr 30 00:26:34 2026 by rpki-client