$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: pib2Cl10SLjo56I1tCSysA/rk2cA5xswei9ESoUCcMs= Subject key identifier: F7:9D:33:14:B9:7F:31:2A:8F:47:85:CC:A1:68:82:DE:89:E0:21:C5 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0ADBDE955293CEFE3DE77B8A2D7A04452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1AA8 Signing time: Thu 17 Sep 2026 05:01:39 +0000 Manifest this update: Thu 17 Sep 2026 05:01:39 +0000 Manifest next update: Fri 18 Sep 2026 05:01:39 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: f+1B7lX9VCTh6/ZdffVuMvqcqIsh1mDtLf4NctS6Bug=) 6: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 7: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 8: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 9: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 10: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 11: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 12: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=) 13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=) 14: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 15: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 16: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ad:bd:e9:55:29:3c:ef:e3:de:77:b8:a2:d7:a0:44:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 17 05:01:39 2026 GMT Not After : Sep 18 05:01:39 2026 GMT Subject: CN=f79d3314b97f312a8f4785cca16882de89e021c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:cc:c2:a3:c2:1f:e4:63:bd:19:44:c6:83: 69:14:3a:43:56:24:39:f3:1d:79:44:0d:8e:90:7b: 4c:af:ba:0a:62:a1:fc:69:b9:a1:62:88:13:0f:64: 1d:24:8e:a8:f1:27:b7:9e:7b:48:8d:53:35:4a:cd: 5e:ab:d9:06:0b:b9:75:9b:1b:4f:00:64:54:70:73: ab:d2:9a:41:3b:3d:2b:06:7f:ba:fd:ac:19:2f:8b: 16:9d:7e:15:83:4f:ff:41:3e:9f:6e:de:05:09:d2: 97:3c:0c:a6:86:ec:a7:3c:b3:c1:5c:a8:ab:72:ee: 8f:bd:ec:0a:98:74:93:14:44:14:6c:1c:0a:25:a9: a7:ca:56:1b:09:21:bd:51:67:13:cd:38:17:d7:d5: 42:cc:1e:d4:44:2f:86:2a:a8:a0:30:28:c7:44:e3: f4:b5:0f:92:70:8c:bf:bc:f5:9b:a4:c4:cf:11:a3: a5:45:30:6e:55:94:6a:3b:e8:bb:07:35:26:ec:1f: 10:f5:98:68:a2:81:27:ad:a2:75:30:a1:97:30:86: e6:22:ce:cb:9c:db:ea:56:70:d0:a2:d6:8b:80:2a: 5d:ce:22:7e:da:66:02:84:be:1a:da:0f:c9:30:84: 29:89:b8:0a:d7:bb:20:87:30:4a:0f:30:06:ad:09: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9D:33:14:B9:7F:31:2A:8F:47:85:CC:A1:68:82:DE:89:E0:21:C5 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:92:f1:48:db:14:84:b8:56:77:df:06:8f:c3:71:eb:08:97: db:77:e6:cb:a0:09:7d:3c:58:46:3f:41:e9:1c:cc:96:08:f6: 2a:17:9c:55:a8:b3:30:9c:d1:f4:aa:a8:1d:4b:df:e9:91:9a: 19:55:43:a4:d3:22:e7:fa:69:49:ab:bf:a1:fa:0f:af:14:90: b3:71:38:00:6a:ec:8a:43:be:39:fd:a3:bc:dc:98:c5:2f:8d: 2b:3a:5c:ca:e5:89:ff:b0:a5:1c:c2:84:6d:ce:bb:20:45:fa: 87:3d:fa:e8:d7:7c:34:dc:82:3f:66:c0:27:f3:0a:63:ae:90: 77:59:14:df:cd:0e:9f:c2:46:7c:14:85:00:8e:0d:9f:8d:47: 55:3c:6e:38:94:d7:1b:57:83:5d:73:7a:aa:d3:49:c1:8b:e1: f8:d8:cb:bc:0f:19:eb:d8:00:b5:cf:72:c0:ed:50:1d:ce:5d: d9:72:b0:5f:65:39:fb:c4:2a:41:22:73:86:a4:36:ef:67:de: ac:90:61:d1:55:e5:d6:19:55:d1:7d:c8:7a:f5:9b:5c:8b:32: 3b:f6:3a:16:07:ac:78:86:03:63:21:cf:2e:f9:6f:77:6d:20: 51:3f:99:9b:bc:5f:71:43:08:b0:b6:b1:96:7b:3c:ef:a5:3f: 1f:3a:d8:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCtvelVKTzv4953uKLXoERSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTE3MDUwMTM5WhcNMjYwOTE4MDUwMTM5WjAzMTEwLwYDVQQD EyhmNzlkMzMxNGI5N2YzMTJhOGY0Nzg1Y2NhMTY4ODJkZTg5ZTAyMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe/MwqPCH+RjvRlExoNpFDpDViQ5 8x15RA2OkHtMr7oKYqH8abmhYogTD2QdJI6o8Se3nntIjVM1Ss1eq9kGC7l1mxtP AGRUcHOr0ppBOz0rBn+6/awZL4sWnX4Vg0//QT6fbt4FCdKXPAymhuynPLPBXKir cu6PvewKmHSTFEQUbBwKJamnylYbCSG9UWcTzTgX19VCzB7URC+GKqigMCjHROP0 tQ+ScIy/vPWbpMTPEaOlRTBuVZRqO+i7BzUm7B8Q9ZhoooEnraJ1MKGXMIbmIs7L nNvqVnDQotaLgCpdziJ+2mYChL4a2g/JMIQpibgK17sghzBKDzAGrQkYIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPedMxS5fzEqj0eFzKFogt6J4CHFMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5LxSNsU hLhWd98Gj8Nx6wiX23fmy6AJfTxYRj9B6RzMlgj2KhecVaizMJzR9KqoHUvf6ZGa GVVDpNMi5/ppSau/ofoPrxSQs3E4AGrsikO+Of2jvNyYxS+NKzpcyuWJ/7ClHMKE bc67IEX6hz366Nd8NNyCP2bAJ/MKY66Qd1kU380On8JGfBSFAI4Nn41HVTxuOJTX G1eDXXN6qtNJwYvh+NjLvA8Z69gAtc9ywO1QHc5d2XKwX2U5+8QqQSJzhqQ272fe rJBh0VXl1hlV0X3IevWbXIsyO/Y6FgeseIYDYyHPLvlvd20gUT+Zm7xfcUMIsLax lns876U/HzrYtA== -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:48 2026 by rpki-client