$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: A14ISH7RGlJFwm6V1kWqvFzXcPhn49k0BPvqfhOHqws= Subject key identifier: F3:83:42:01:D6:C6:8C:D8:81:8F:2E:A4:4F:C7:3E:93:AD:51:6E:00 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FD5E0C20A35FB8747E2152D245616F1D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A32 Signing time: Thu 06 Aug 2026 07:01:44 +0000 Manifest this update: Thu 06 Aug 2026 07:01:44 +0000 Manifest next update: Fri 07 Aug 2026 07:01:44 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: MlAI3WAiXLegadQaIogCtmNMb6pK/BIWpwcE6kIewM8=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Aug 2026 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:d5:e0:c2:0a:35:fb:87:47:e2:15:2d:24:56:16:f1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 6 07:01:44 2026 GMT Not After : Aug 7 07:01:44 2026 GMT Subject: CN=f3834201d6c68cd8818f2ea44fc73e93ad516e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:04:2e:7a:96:d8:f7:68:b6:95:ff:29:b7: 18:cf:1f:e6:bb:ae:ef:58:07:2e:e5:18:52:9d:e5: fe:62:7e:1f:cd:7a:49:79:58:e9:af:98:3a:cf:c3: a7:6f:fa:9d:cd:41:de:78:f6:c7:cd:48:3d:c3:ab: 23:45:0e:88:32:20:9c:26:3f:37:50:ee:11:9f:59: b1:49:65:22:85:dd:1c:ac:79:30:6f:ff:4b:91:33: c2:b5:50:89:b3:3c:de:5d:59:29:9d:81:88:fd:c1: ff:5f:8a:1c:30:01:8b:15:01:25:03:d4:21:1e:97: 13:35:b1:3b:11:6b:4c:98:4e:84:90:c3:83:c6:99: a1:63:fe:c4:b3:58:68:78:a7:6c:6f:9a:c6:e3:c3: df:c2:7c:d5:b5:96:86:e2:72:b2:27:05:88:5f:59: 5d:24:fa:56:3f:26:e1:61:33:d1:f0:cc:a3:ff:c7: 81:75:31:a0:ac:20:68:65:ef:76:7b:94:52:ac:64: d1:b5:58:59:64:c9:a7:a4:59:7e:8d:e3:bf:85:cc: f6:79:3b:b7:7d:9f:53:9b:10:35:fe:64:99:3f:4b: 00:c1:c3:6d:e4:b7:8c:c5:60:40:20:0b:5e:93:8e: 18:cd:f7:e6:f5:85:8a:b3:3b:4d:bb:41:ce:3f:c8: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:83:42:01:D6:C6:8C:D8:81:8F:2E:A4:4F:C7:3E:93:AD:51:6E:00 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1b:d2:87:4f:42:96:39:45:67:40:27:ec:a3:84:91:2b:bc: af:34:f8:20:f2:e1:27:4a:c3:92:53:6f:33:01:67:01:34:2b: d5:07:61:d6:d3:39:70:34:46:19:df:84:76:82:41:da:d4:4c: e9:91:e5:f7:37:6b:4f:06:06:0b:91:35:a4:ea:78:41:e3:b5: 42:1e:71:76:65:0c:17:98:bd:3a:ae:c7:55:09:02:b9:ec:a6: 04:78:84:a4:88:3a:c6:6d:82:50:9c:07:6f:8c:73:43:ee:c0: f6:ed:06:06:ed:34:3d:f4:a3:cb:b2:b5:e8:3c:9e:df:9b:45: d8:fe:0e:8c:3c:a7:7e:38:65:cd:67:90:13:ed:c2:c8:24:9b: 58:9e:c0:29:5d:cd:9e:b9:61:fb:c7:bb:95:43:16:6f:f7:ea: 58:b8:c2:61:00:b1:e0:39:b2:0e:9c:4b:a1:b2:1f:e3:5f:ac: 42:05:63:dc:d0:bb:c5:e2:18:90:52:98:ce:8b:4f:37:bd:9a: 2b:e3:c3:3c:32:94:a5:4b:2d:9f:5c:46:35:5b:17:a0:db:fa: 75:5e:9f:2c:ca:be:98:12:56:12:2a:89:78:a4:b8:21:0b:34: 94:02:ee:c0:e1:5a:39:a8:87:be:ce:08:ec:10:07:58:ea:23: c9:1a:c4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/V4MIKNfuHR+IVLSRWFvHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODA2MDcwMTQ0WhcNMjYwODA3MDcwMTQ0WjAzMTEwLwYDVQQD EyhmMzgzNDIwMWQ2YzY4Y2Q4ODE4ZjJlYTQ0ZmM3M2U5M2FkNTE2ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosUELnqW2PdotpX/KbcYzx/mu67v WAcu5RhSneX+Yn4fzXpJeVjpr5g6z8Onb/qdzUHeePbHzUg9w6sjRQ6IMiCcJj83 UO4Rn1mxSWUihd0crHkwb/9LkTPCtVCJszzeXVkpnYGI/cH/X4ocMAGLFQElA9Qh HpcTNbE7EWtMmE6EkMODxpmhY/7Es1hoeKdsb5rG48PfwnzVtZaG4nKyJwWIX1ld JPpWPybhYTPR8Myj/8eBdTGgrCBoZe92e5RSrGTRtVhZZMmnpFl+jeO/hcz2eTu3 fZ9TmxA1/mSZP0sAwcNt5LeMxWBAIAtek44Yzffm9YWKsztNu0HOP8gvOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPODQgHWxozYgY8upE/HPpOtUW4AMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxvSh09C ljlFZ0An7KOEkSu8rzT4IPLhJ0rDklNvMwFnATQr1Qdh1tM5cDRGGd+EdoJB2tRM 6ZHl9zdrTwYGC5E1pOp4QeO1Qh5xdmUMF5i9Oq7HVQkCueymBHiEpIg6xm2CUJwH b4xzQ+7A9u0GBu00PfSjy7K16Dye35tF2P4OjDynfjhlzWeQE+3CyCSbWJ7AKV3N nrlh+8e7lUMWb/fqWLjCYQCx4DmyDpxLobIf41+sQgVj3NC7xeIYkFKYzotPN72a K+PDPDKUpUstn1xGNVsXoNv6dV6fLMq+mBJWEiqJeKS4IQs0lALuwOFaOaiHvs4I 7BAHWOojyRrE+g== -----END CERTIFICATE-----Generated at Thu Aug 6 17:10:38 2026 by rpki-client