$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: nOhLvKhRYjTyxXAjMZd/ubL5K+K9GEmCaR4BrohGIoY= Subject key identifier: D3:E1:AF:FB:BE:84:50:80:AF:0F:2B:AA:53:97:3E:E4:4B:72:69:95 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0A0DDDF1667DEA8E88ED744AEF178FE5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1AA0 Signing time: Mon 14 Sep 2026 17:01:30 +0000 Manifest this update: Mon 14 Sep 2026 17:01:30 +0000 Manifest next update: Tue 15 Sep 2026 17:01:30 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dH98z9Fg/WzhFjtMvu80gKtfA6sICM43l54H11pK28c=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=) 12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Sep 2026 17:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:a0:dd:df:16:67:de:a8:e8:8e:d7:44:ae:f1:78:fe:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 14 17:01:30 2026 GMT Not After : Sep 15 17:01:30 2026 GMT Subject: CN=d3e1affbbe845080af0f2baa53973ee44b726995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:15:99:cb:b0:79:e4:da:de:8c:b3:91:cf: 4a:1e:7e:00:90:17:4d:ca:b7:23:6c:80:7e:0d:c9: 28:41:9a:8e:27:48:5d:a2:9e:03:f4:fc:77:9b:6a: 39:e8:58:7f:fa:e8:3c:fb:ae:ab:3f:c5:16:df:ba: a0:22:95:3a:43:12:ad:45:b9:58:a1:56:48:c3:40: ec:e7:bd:f7:3f:6d:3a:72:dd:1f:c3:fa:07:e6:bb: a1:71:ab:13:b5:fd:66:e8:06:c3:35:7a:e7:fb:cf: b1:ca:1a:66:b2:46:35:45:f8:45:8f:a1:0f:ca:e3: 6b:23:de:f3:24:b8:d3:09:e3:af:6a:4d:cb:05:4b: a4:05:bc:60:e5:a6:76:f6:50:6b:69:25:05:39:b2: 0b:a1:d1:2a:03:83:c4:31:03:e5:90:95:75:76:42: 3b:31:aa:eb:1f:c6:f4:73:f0:d2:42:93:53:b0:4d: 41:59:30:67:a9:a6:4f:aa:4a:6f:68:6a:54:6b:a6: 87:79:4f:f8:2a:ab:42:7f:18:6e:b2:d4:f2:3d:89: cd:c3:e1:a9:fe:f2:79:69:99:2f:e2:af:62:97:ff: 0a:b3:72:78:b1:a0:12:f1:82:8a:cc:fd:55:b5:26: 13:6d:3d:1e:93:91:98:4c:de:b2:e8:1b:96:f0:c8: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:AF:FB:BE:84:50:80:AF:0F:2B:AA:53:97:3E:E4:4B:72:69:95 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bf:56:c7:a8:70:95:75:79:b5:f4:ee:ed:98:24:4a:65:ac: f2:f1:b6:51:6e:ce:69:49:d8:21:a8:31:98:bc:41:dd:0e:b6: 22:bd:49:11:58:f0:b6:69:5b:26:71:54:9c:d3:47:fb:e0:5e: 3b:e2:4e:20:37:97:bb:83:52:97:f0:98:e8:ce:89:3c:7a:da: bc:bb:d3:eb:b9:d8:8e:a9:71:56:50:ff:f6:18:62:e4:e4:62: 71:17:e7:25:b3:16:41:9b:99:ae:b4:d5:df:7a:65:2c:b0:15: e4:f7:5f:33:9a:0e:ef:fa:4e:25:5e:2d:25:6b:bd:50:f5:87: f5:0b:eb:c9:54:ce:df:dc:60:fd:b0:da:00:9b:23:45:4c:60: 09:d4:72:7c:84:35:a8:33:5a:93:85:c1:71:b8:ee:8a:f1:32: 84:82:32:12:ae:71:d4:d2:4a:6a:d1:70:de:09:e0:41:78:bc: 2e:28:4a:58:fd:c3:6b:95:aa:38:e0:6d:8d:75:22:aa:8b:65: e2:b3:85:f7:15:8b:d6:2f:9a:4c:02:74:69:cd:23:37:ed:95: 5f:da:57:ee:4f:c1:ef:06:40:3e:3a:d3:ce:38:d1:4d:27:fa: d1:df:95:e8:6b:2d:8a:c9:d7:d0:f3:52:a1:b7:5b:e6:60:e4: b4:d9:f0:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCg3d8WZ96o6I7XRK7xeP5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTE0MTcwMTMwWhcNMjYwOTE1MTcwMTMwWjAzMTEwLwYDVQQD EyhkM2UxYWZmYmJlODQ1MDgwYWYwZjJiYWE1Mzk3M2VlNDRiNzI2OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzYVmcuweeTa3oyzkc9KHn4AkBdN yrcjbIB+DckoQZqOJ0hdop4D9Px3m2o56Fh/+ug8+66rP8UW37qgIpU6QxKtRblY oVZIw0Ds5733P206ct0fw/oH5ruhcasTtf1m6AbDNXrn+8+xyhpmskY1RfhFj6EP yuNrI97zJLjTCeOvak3LBUukBbxg5aZ29lBraSUFObILodEqA4PEMQPlkJV1dkI7 MarrH8b0c/DSQpNTsE1BWTBnqaZPqkpvaGpUa6aHeU/4KqtCfxhustTyPYnNw+Gp /vJ5aZkv4q9il/8Ks3J4saAS8YKKzP1VtSYTbT0ek5GYTN6y6BuW8MguUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPhr/u+hFCArw8rqlOXPuRLcmmVMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY79Wx6hw lXV5tfTu7ZgkSmWs8vG2UW7OaUnYIagxmLxB3Q62Ir1JEVjwtmlbJnFUnNNH++Be O+JOIDeXu4NSl/CY6M6JPHravLvT67nYjqlxVlD/9hhi5ORicRfnJbMWQZuZrrTV 33plLLAV5PdfM5oO7/pOJV4tJWu9UPWH9QvryVTO39xg/bDaAJsjRUxgCdRyfIQ1 qDNak4XBcbjuivEyhIIyEq5x1NJKatFw3gngQXi8LihKWP3Da5WqOOBtjXUiqotl 4rOF9xWL1i+aTAJ0ac0jN+2VX9pX7k/B7wZAPjrTzjjRTSf60d+V6GstisnX0PNS obdb5mDktNnw0g== -----END CERTIFICATE-----Generated at Tue Sep 15 03:18:07 2026 by rpki-client