$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 52jP11qZsdwI4klLpIc8RxUxkhBT2BT1SQ+pg4Zvt1c= Subject key identifier: A7:A7:35:C2:0E:90:1D:09:76:80:FD:DD:DE:5F:C7:69:D2:17:25:63 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FA229195BB05F80A6D753AC2BC09AF1C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A17 Signing time: Mon 27 Jul 2026 06:00:30 +0000 Manifest this update: Mon 27 Jul 2026 06:00:30 +0000 Manifest next update: Tue 28 Jul 2026 06:00:30 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: jCzIMNSOKfBiKJl3y3kqgyohTd5igatUIz+84lBlXfw=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: nNtYIyRVRsd0YYq-VLPspS7aE30.roa (hash: 8uI9ZAgt0JCZk53bpXU8bMyK7tEppIodMv0Pm2q2UE4=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a2:29:19:5b:b0:5f:80:a6:d7:53:ac:2b:c0:9a:f1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jul 27 06:00:30 2026 GMT Not After : Jul 28 06:00:30 2026 GMT Subject: CN=a7a735c20e901d097680fdddde5fc769d2172563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:e9:8a:16:7b:e0:bb:ae:a7:90:27:6a:05: 66:38:3c:16:42:12:53:4a:1b:8f:9c:2c:30:e1:cb: a8:78:4c:9e:84:66:70:f6:e1:cf:43:e5:92:86:b3: 40:25:40:f3:84:16:45:6c:c5:fb:4e:c3:5b:37:64: 92:b0:9d:ca:6d:18:0e:5e:d0:7e:e5:22:50:5d:e2: de:cb:82:c4:27:e5:6d:b9:d2:52:8e:f8:df:47:05: ce:6a:fb:9e:f0:65:f8:e0:8f:27:25:c2:d3:fc:f9: 17:4f:4f:3e:79:f0:0b:f1:87:4c:ea:18:b1:16:d1: a2:df:42:10:4b:50:ab:26:1b:f7:0a:97:e7:89:fd: 8e:08:2c:5c:71:26:88:04:9f:6d:69:06:b4:d0:5a: da:88:c9:7f:53:0d:f8:64:5f:96:82:0c:39:92:d2: e4:b3:c6:3d:32:2d:f3:24:7b:76:c4:1a:24:05:58: aa:18:a9:bb:1c:ff:59:20:31:d1:b8:7c:12:be:1a: 83:cd:f0:72:6e:dd:bd:a3:fd:ee:e6:97:c7:22:ab: ae:03:68:2d:f2:6b:a2:1e:54:e9:49:e3:7d:95:42: 45:90:85:78:9b:d9:4c:cf:27:c2:04:7e:ac:e2:c3: fe:89:df:27:25:ee:33:a2:83:fe:51:b1:a9:96:22: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:35:C2:0E:90:1D:09:76:80:FD:DD:DE:5F:C7:69:D2:17:25:63 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:85:34:23:36:90:92:8e:7c:24:b7:06:6f:71:98:ea:b9: 49:cb:9b:a2:71:b4:c7:59:e5:e8:b8:26:77:ab:ac:8d:51:81: 9e:14:0c:84:8f:d0:fa:ec:d8:56:06:99:d8:18:32:0b:b4:ec: c0:d1:83:1e:50:bb:3c:7d:07:4f:40:28:43:83:b5:e7:e4:79: 1d:b5:1d:2d:90:9c:90:9a:84:bd:d0:9d:c1:a9:2e:f2:5a:8e: cf:49:85:28:1e:ef:6f:a5:81:c2:81:3a:5c:fd:63:cc:07:14: 9f:53:2f:f8:67:b1:1d:28:bd:73:a1:de:08:14:09:7b:dd:5c: 7a:ac:66:97:18:3b:ca:8a:11:ec:b3:b6:85:29:b6:a5:3a:74: f6:e7:d0:6d:3b:84:1b:a7:63:71:2f:68:d4:52:cf:3e:13:09: c8:13:fc:26:e6:ad:7b:7a:52:f1:57:eb:c8:da:5e:56:5d:f3: 23:98:0c:6f:2e:68:5c:b2:29:89:7a:96:3f:81:09:62:79:5c: 53:6b:9f:67:ee:52:a3:ec:e9:ed:6d:04:6f:3e:91:67:5d:11: b0:71:18:6f:83:cc:82:67:75:c2:1d:53:ac:9e:8c:86:74:ad: 4e:81:79:06:91:36:41:69:dd:3e:da:4f:dc:a8:39:b8:e1:f7: aa:00:4e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+iKRlbsF+AptdTrCvAmvHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNzI3MDYwMDMwWhcNMjYwNzI4MDYwMDMwWjAzMTEwLwYDVQQD EyhhN2E3MzVjMjBlOTAxZDA5NzY4MGZkZGRkZTVmYzc2OWQyMTcyNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OzpihZ74Luup5AnagVmODwWQhJT ShuPnCww4cuoeEyehGZw9uHPQ+WShrNAJUDzhBZFbMX7TsNbN2SSsJ3KbRgOXtB+ 5SJQXeLey4LEJ+VtudJSjvjfRwXOavue8GX44I8nJcLT/PkXT08+efAL8YdM6hix FtGi30IQS1CrJhv3Cpfnif2OCCxccSaIBJ9taQa00FraiMl/Uw34ZF+Wggw5ktLk s8Y9Mi3zJHt2xBokBViqGKm7HP9ZIDHRuHwSvhqDzfBybt29o/3u5pfHIquuA2gt 8muiHlTpSeN9lUJFkIV4m9lMzyfCBH6s4sP+id8nJe4zooP+UbGpliJfGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKenNcIOkB0JdoD93d5fx2nSFyVjMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrGFNCM2 kJKOfCS3Bm9xmOq5ScubonG0x1nl6Lgmd6usjVGBnhQMhI/Q+uzYVgaZ2BgyC7Ts wNGDHlC7PH0HT0AoQ4O15+R5HbUdLZCckJqEvdCdwaku8lqOz0mFKB7vb6WBwoE6 XP1jzAcUn1Mv+GexHSi9c6HeCBQJe91ceqxmlxg7yooR7LO2hSm2pTp09ufQbTuE G6djcS9o1FLPPhMJyBP8Juate3pS8VfryNpeVl3zI5gMby5oXLIpiXqWP4EJYnlc U2ufZ+5So+zp7W0Ebz6RZ10RsHEYb4PMgmd1wh1TrJ6MhnStToF5BpE2QWndPtpP 3Kg5uOH3qgBOSQ== -----END CERTIFICATE-----Generated at Mon Jul 27 12:08:20 2026 by rpki-client