$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: uapuK7YCeZPrFxJP29/mYlvLXtWC0ttHxPjEEn5EnKw= Subject key identifier: CA:A4:25:97:CB:B9:6B:D5:7E:D4:EE:4A:B5:EB:7A:1A:4F:C8:7E:7B Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019CCA1A90A705C793EF6AC4F26E4F18F2E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 189D Signing time: Sat 07 Mar 2026 21:01:04 +0000 Manifest this update: Sat 07 Mar 2026 21:01:04 +0000 Manifest next update: Sun 08 Mar 2026 21:01:04 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: OM4EjpWUOEgBF4ImsqwTLewZo8IbCDnNbFjqnXyeg4U=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 20:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ca:1a:90:a7:05:c7:93:ef:6a:c4:f2:6e:4f:18:f2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Mar 7 21:01:04 2026 GMT Not After : Mar 8 21:01:04 2026 GMT Subject: CN=caa42597cbb96bd57ed4ee4ab5eb7a1a4fc87e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:c5:a6:d1:5e:e5:20:a6:e3:83:70:ae:7f: 95:34:f6:e2:19:29:32:96:51:0a:f9:55:c7:7f:77: 4a:13:24:03:67:ad:e5:79:18:40:32:0d:cd:42:85: b0:59:df:68:d3:2a:9f:e2:56:d9:f4:46:69:e7:57: 46:bc:bf:26:4d:d5:18:2d:14:0a:d8:96:42:b4:51: 72:2c:62:f4:5e:b7:63:a4:f4:da:8d:03:0f:23:55: 2b:4a:78:18:6b:fc:26:3f:bd:82:dc:19:45:dc:b9: 96:88:00:52:b8:5d:d9:a2:82:9d:09:08:93:04:20: 55:fd:be:38:e5:5a:50:64:07:3e:15:c0:bd:4d:d4: 3e:4b:02:b4:4e:d5:93:79:36:e9:f6:80:a0:e2:26: 67:b7:5b:b6:c0:3b:78:c3:8b:95:2b:58:6e:e7:ca: 34:10:b8:29:94:9c:5a:41:8e:01:a7:06:9f:ab:7d: 90:3c:63:a4:71:06:21:43:0d:b4:cf:bc:50:96:84: ef:2a:10:ac:57:c5:27:0e:c0:66:cc:21:d4:94:7c: ae:bb:d8:17:47:a5:f4:bb:0a:b0:ae:b0:81:d0:2e: d1:d8:34:1b:af:cc:29:0e:41:fb:ce:d2:3f:2a:4f: e9:94:45:b8:88:d2:1b:3d:cb:cf:64:2d:72:e6:1e: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:25:97:CB:B9:6B:D5:7E:D4:EE:4A:B5:EB:7A:1A:4F:C8:7E:7B X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6a:ff:3a:8f:a5:35:37:7d:79:b2:c9:f0:d1:e4:b1:13:0e: 77:94:0f:a6:4a:5b:7a:f1:98:9c:55:69:e7:6e:68:c0:0d:5f: 1f:1b:b5:f6:1a:71:44:70:e1:8b:1a:1d:b0:b6:29:3a:66:7d: 80:0d:d0:6d:d0:d8:a8:2e:c9:34:97:65:a3:95:0c:c8:9c:45: db:5f:d4:39:f7:0e:b2:fc:60:88:50:74:8e:0c:18:65:d3:1e: 60:8d:13:f3:63:83:fd:82:ad:c5:99:54:e1:d2:69:1a:99:30: 7e:9a:ec:3f:ef:45:fa:bc:a8:46:32:76:9c:f6:46:66:4f:85: ec:5c:0c:28:ee:35:89:c8:4f:3e:68:e4:70:e7:4f:9f:2b:ae: 9d:5e:47:2d:df:3a:b7:81:36:44:da:d9:7b:8e:90:cc:30:01: 5e:d2:e9:01:59:aa:44:87:e3:97:59:7c:db:ff:84:1a:ae:9c: ce:f6:07:c2:5b:32:00:34:98:d1:bd:86:fa:84:27:71:de:76: aa:2a:43:16:28:77:eb:65:ee:65:cb:a1:f0:df:02:b6:88:1c: fc:36:88:ce:89:e6:46:74:28:b0:f7:c6:ea:ba:d8:1d:d7:78: db:5a:d4:01:d3:0a:52:30:ab:aa:78:0b:be:cb:af:d3:86:fa: 13:a5:52:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzKGpCnBceT72rE8m5PGPLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMzA3MjEwMTA0WhcNMjYwMzA4MjEwMTA0WjAzMTEwLwYDVQQD EyhjYWE0MjU5N2NiYjk2YmQ1N2VkNGVlNGFiNWViN2ExYTRmYzg3ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqPFptFe5SCm44Nwrn+VNPbiGSky llEK+VXHf3dKEyQDZ63leRhAMg3NQoWwWd9o0yqf4lbZ9EZp51dGvL8mTdUYLRQK 2JZCtFFyLGL0XrdjpPTajQMPI1UrSngYa/wmP72C3BlF3LmWiABSuF3ZooKdCQiT BCBV/b445VpQZAc+FcC9TdQ+SwK0TtWTeTbp9oCg4iZnt1u2wDt4w4uVK1hu58o0 ELgplJxaQY4Bpwafq32QPGOkcQYhQw20z7xQloTvKhCsV8UnDsBmzCHUlHyuu9gX R6X0uwqwrrCB0C7R2DQbr8wpDkH7ztI/Kk/plEW4iNIbPcvPZC1y5h4SMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqkJZfLuWvVftTuSrXrehpPyH57MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2r/Oo+l NTd9ebLJ8NHksRMOd5QPpkpbevGYnFVp525owA1fHxu19hpxRHDhixodsLYpOmZ9 gA3QbdDYqC7JNJdlo5UMyJxF21/UOfcOsvxgiFB0jgwYZdMeYI0T82OD/YKtxZlU 4dJpGpkwfprsP+9F+ryoRjJ2nPZGZk+F7FwMKO41ichPPmjkcOdPnyuunV5HLd86 t4E2RNrZe46QzDABXtLpAVmqRIfjl1l82/+EGq6czvYHwlsyADSY0b2G+oQncd52 qipDFih362XuZcuh8N8Ctogc/DaIzonmRnQosPfG6rrYHdd421rUAdMKUjCrqngL vsuv04b6E6VSNQ== -----END CERTIFICATE-----Generated at Sun Mar 8 02:38:34 2026 by rpki-client