$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: KDHA6qnK/hFPWNoLfgnLh+VO4kBOsmVMF58dWKh2gCA= Subject key identifier: 79:22:6A:1F:B2:BA:34:AC:8E:67:36:A1:F2:BD:43:90:6E:CD:EA:1D Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A03C3A114AC7488D4AC56C1AD582A69FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A69 Signing time: Wed 26 Aug 2026 04:00:33 +0000 Manifest this update: Wed 26 Aug 2026 04:00:33 +0000 Manifest next update: Thu 27 Aug 2026 04:00:33 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: KEN_6778skmDEY7gNu3YCezz4t4.roa (hash: BiBuCJMi4yMgx4Ww2BvIGPWYoCad7r7CF2uQBSh9UqA=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 2pIzt8RSEW8ScEhWmjhdT7ZqeJNgb9+r/jZqqgWXDYs=) 6: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3c:3a:11:4a:c7:48:8d:4a:c5:6c:1a:d5:82:a6:9f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 26 04:00:33 2026 GMT Not After : Aug 27 04:00:33 2026 GMT Subject: CN=79226a1fb2ba34ac8e6736a1f2bd43906ecdea1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:b7:9b:2c:3e:ac:2e:a2:d5:3a:4e:46:a8: 31:d0:17:3e:8d:f2:19:92:50:04:87:ae:f6:f3:c1: 2c:5e:95:2c:d2:2c:72:72:92:36:63:42:87:8f:73: d2:24:29:eb:88:f7:a0:70:8e:fe:fc:dc:85:d4:a8: 8c:35:ea:98:5a:af:3e:66:57:11:6b:51:3b:90:6d: e5:a5:e3:a5:03:2f:0b:e1:c6:45:f1:2a:f6:6b:d1: 19:ce:01:ec:95:2d:74:dd:03:56:88:66:df:23:90: 6b:9a:0e:cd:2d:01:8b:05:ba:ca:c6:e2:54:3e:7e: 6f:e1:9d:88:68:2e:e4:4f:5e:ba:13:f2:e8:88:68: 5b:8b:c2:7b:4b:32:3e:e2:cd:08:5f:0c:4a:1a:c7: 7e:10:ae:0e:e5:85:76:78:fd:e1:53:c2:fa:7c:0f: 54:0e:95:30:6c:c8:6d:e5:f6:53:66:a9:09:5e:93: c2:48:23:17:ab:c7:49:5b:4d:be:30:0a:a5:a7:d2: a1:34:34:1e:50:33:0a:d3:9e:ef:d3:a0:45:cb:7e: d0:5e:57:7e:da:89:18:12:f5:ed:40:c4:5b:a6:96: aa:fc:06:b0:e2:e8:61:8d:e3:5b:36:1a:f2:c8:41: d2:a5:83:94:03:8b:4a:7c:da:42:f0:73:05:72:97: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:6A:1F:B2:BA:34:AC:8E:67:36:A1:F2:BD:43:90:6E:CD:EA:1D X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5c:0c:bb:8c:30:72:86:d7:ea:f7:ba:c9:15:bf:23:00:0f: 27:70:44:68:6f:85:9d:bb:e5:78:62:2e:57:67:61:80:32:88: 05:ff:6b:e7:64:5a:3b:a4:5d:e8:19:db:de:1e:17:89:dd:26: 16:e8:64:ea:ac:a2:27:93:64:04:8c:aa:b7:3a:a2:b8:03:df: de:35:fa:d3:e9:96:aa:16:2f:35:8f:c0:8a:cf:03:9c:95:ac: 62:f6:bf:93:dc:f7:8c:da:10:5d:9f:c1:6e:45:24:00:e3:76: 05:5f:08:c7:d8:68:f0:00:bc:5f:6e:5f:16:49:8f:94:64:e7: 52:d3:6e:4d:c4:19:2e:6a:86:03:48:39:ce:70:80:b1:34:e1: 53:a1:a1:76:3a:99:d5:ab:2b:8e:96:3c:d0:22:50:67:16:2a: 26:5e:92:4b:fe:1a:29:af:b3:54:34:59:8f:ac:a8:c3:35:23: 24:68:b7:e0:91:7d:4f:f0:ad:da:fa:4c:b6:70:0b:dc:6c:43: 12:39:0c:dc:93:62:67:e1:b1:59:ef:1f:db:53:2b:96:87:88: a6:2a:10:13:bc:d9:ae:45:a0:8d:4a:37:b2:14:73:b2:13:1d: 1c:7b:00:64:1c:4c:0a:b4:eb:7b:4e:71:34:25:b6:71:37:0e: f0:98:24:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA8OhFKx0iNSsVsGtWCpp/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODI2MDQwMDMzWhcNMjYwODI3MDQwMDMzWjAzMTEwLwYDVQQD Eyg3OTIyNmExZmIyYmEzNGFjOGU2NzM2YTFmMmJkNDM5MDZlY2RlYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHq3myw+rC6i1TpORqgx0Bc+jfIZ klAEh67288EsXpUs0ixycpI2Y0KHj3PSJCnriPegcI7+/NyF1KiMNeqYWq8+ZlcR a1E7kG3lpeOlAy8L4cZF8Sr2a9EZzgHslS103QNWiGbfI5Brmg7NLQGLBbrKxuJU Pn5v4Z2IaC7kT166E/LoiGhbi8J7SzI+4s0IXwxKGsd+EK4O5YV2eP3hU8L6fA9U DpUwbMht5fZTZqkJXpPCSCMXq8dJW02+MAqlp9KhNDQeUDMK057v06BFy37QXld+ 2okYEvXtQMRbppaq/Aaw4uhhjeNbNhryyEHSpYOUA4tKfNpC8HMFcpeBvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkiah+yujSsjmc2ofK9Q5BuzeodMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFwMu4ww cobX6ve6yRW/IwAPJ3BEaG+FnbvleGIuV2dhgDKIBf9r52RaO6Rd6Bnb3h4Xid0m Fuhk6qyiJ5NkBIyqtzqiuAPf3jX60+mWqhYvNY/Ais8DnJWsYva/k9z3jNoQXZ/B bkUkAON2BV8Ix9ho8AC8X25fFkmPlGTnUtNuTcQZLmqGA0g5znCAsTThU6GhdjqZ 1asrjpY80CJQZxYqJl6SS/4aKa+zVDRZj6yowzUjJGi34JF9T/Ct2vpMtnAL3GxD EjkM3JNiZ+GxWe8f21MrloeIpioQE7zZrkWgjUo3shRzshMdHHsAZBxMCrTre05x NCW2cTcO8JgkMw== -----END CERTIFICATE-----Generated at Wed Aug 26 12:17:56 2026 by rpki-client