$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: HW5npOskXrYZskJmv3uLKR6TndUpK4rWqla2KLggvio= Subject key identifier: CD:E8:97:2C:83:8A:C5:3D:02:58:44:38:57:4C:F1:8F:D2:3F:66:85 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019DD49C3507440A06A4F872D08721ABFE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1927 Signing time: Tue 28 Apr 2026 15:01:40 +0000 Manifest this update: Tue 28 Apr 2026 15:01:40 +0000 Manifest next update: Wed 29 Apr 2026 15:01:40 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dcGfCfVFpHLQAeFuginuqSbp/2wS5WB3oyUrx3OcBHU=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d4:9c:35:07:44:0a:06:a4:f8:72:d0:87:21:ab:fe:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 28 15:01:40 2026 GMT Not After : Apr 29 15:01:40 2026 GMT Subject: CN=cde8972c838ac53d02584438574cf18fd23f6685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:26:22:65:83:d7:9b:e4:f5:f4:bb:eb:26:c0: 13:df:b8:8f:6f:da:7a:ff:67:7c:8b:44:18:62:7c: b1:42:19:98:77:74:d7:95:44:54:c1:a2:e4:90:09: e2:fb:55:86:b1:f6:c0:0f:66:63:6e:58:a3:35:a3: 69:47:a3:1d:2d:a8:f0:33:92:5b:7c:21:1e:f0:a4: ed:bc:bd:4a:c8:6e:fb:e6:14:8d:67:0d:7c:9b:0a: ac:ec:2f:e1:69:e3:f3:83:c9:7d:98:1c:55:41:73: 83:a0:85:6f:87:7f:fe:4b:41:a4:60:b7:aa:68:9d: 08:d5:74:b5:94:88:45:83:54:24:5b:0a:91:ed:49: 6a:5f:ea:3b:c0:5c:50:e9:0b:db:de:79:e0:60:13: 8e:3e:35:85:09:c8:3c:c2:32:81:e8:4c:ba:df:52: 79:54:55:34:5d:78:c6:40:fe:70:94:50:48:3b:8b: c6:d3:66:72:44:4e:35:03:3a:f6:e9:ba:94:c8:80: 32:f0:a9:83:f5:bd:f6:fa:39:71:06:f1:92:79:3a: 28:b7:2f:a5:21:f5:6d:ac:91:e7:d2:0b:5e:36:45: f9:de:ba:8a:24:6d:06:54:f5:21:8c:fa:ed:f7:af: 6d:d2:d8:de:cb:f1:22:63:7e:cb:29:20:32:b2:f0: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E8:97:2C:83:8A:C5:3D:02:58:44:38:57:4C:F1:8F:D2:3F:66:85 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:29:4e:16:8a:5e:e0:51:fa:c2:ea:9a:c6:b0:ad:4d:43:71: be:7a:06:30:fd:1d:21:86:bd:1b:35:e0:7a:d0:91:ff:a1:13: ba:36:2e:bc:0e:c4:d5:8e:f1:c3:17:e9:97:7d:8a:bd:0a:6b: ca:81:6d:46:c9:59:29:17:28:20:21:8f:7f:9e:30:37:57:98: 9d:f3:5d:c3:b8:45:ec:9d:05:15:92:67:d5:10:9d:36:fc:40: e2:c3:74:5b:c4:a2:81:9e:c3:22:48:1a:71:5b:da:18:20:52: 75:20:e6:cc:9f:9d:b4:fb:69:b2:c8:f5:bf:5c:e9:81:5e:09: c1:01:a3:ad:62:3a:71:f6:8a:23:73:6b:66:6b:80:ea:62:6e: 62:3f:c1:8e:a4:c3:b3:0e:ab:08:65:86:e4:52:f2:12:ba:c8: 46:5b:99:fc:22:29:93:bd:4a:53:8c:54:bb:23:a0:6c:13:de: 12:bd:06:41:53:a3:11:b6:5b:d1:46:27:f3:b7:f4:ce:c3:29: 9d:8c:c3:b5:32:13:57:d4:37:62:db:7c:6f:34:44:28:c3:c5: 06:9f:8f:c9:82:fc:42:63:c3:16:61:88:09:b2:2b:12:cd:ed: f7:1e:1c:df:79:97:f4:3e:9c:8f:dd:7d:31:43:f2:45:b7:1a: ba:93:78:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3UnDUHRAoGpPhy0Ichq/4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDI4MTUwMTQwWhcNMjYwNDI5MTUwMTQwWjAzMTEwLwYDVQQD EyhjZGU4OTcyYzgzOGFjNTNkMDI1ODQ0Mzg1NzRjZjE4ZmQyM2Y2Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSYiZYPXm+T19LvrJsAT37iPb9p6 /2d8i0QYYnyxQhmYd3TXlURUwaLkkAni+1WGsfbAD2ZjblijNaNpR6MdLajwM5Jb fCEe8KTtvL1KyG775hSNZw18mwqs7C/haePzg8l9mBxVQXODoIVvh3/+S0GkYLeq aJ0I1XS1lIhFg1QkWwqR7UlqX+o7wFxQ6Qvb3nngYBOOPjWFCcg8wjKB6Ey631J5 VFU0XXjGQP5wlFBIO4vG02ZyRE41Azr26bqUyIAy8KmD9b32+jlxBvGSeTooty+l IfVtrJHn0gteNkX53rqKJG0GVPUhjPrt969t0tjey/EiY37LKSAysvCJ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3olyyDisU9AlhEOFdM8Y/SP2aFMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACylOFope 4FH6wuqaxrCtTUNxvnoGMP0dIYa9GzXgetCR/6ETujYuvA7E1Y7xwxfpl32KvQpr yoFtRslZKRcoICGPf54wN1eYnfNdw7hF7J0FFZJn1RCdNvxA4sN0W8SigZ7DIkga cVvaGCBSdSDmzJ+dtPtpssj1v1zpgV4JwQGjrWI6cfaKI3NrZmuA6mJuYj/BjqTD sw6rCGWG5FLyErrIRluZ/CIpk71KU4xUuyOgbBPeEr0GQVOjEbZb0UYn87f0zsMp nYzDtTITV9Q3Ytt8bzREKMPFBp+PyYL8QmPDFmGICbIrEs3t9x4c33mX9D6cj919 MUPyRbcaupN4sg== -----END CERTIFICATE-----Generated at Tue Apr 28 21:16:55 2026 by rpki-client