$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 9DoSOCRQXM35pt5TFkuta65MWFoKDkhdYdU2se6Cm+4= Subject key identifier: 03:71:B4:F1:20:49:F1:8D:12:E9:51:80:34:3D:04:B7:8E:32:3F:C7 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019E4A68E88898DDB8DC6EE090FA3EBE58BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1964 Signing time: Thu 21 May 2026 12:00:49 +0000 Manifest this update: Thu 21 May 2026 12:00:49 +0000 Manifest next update: Fri 22 May 2026 12:00:49 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: SqMoixXW1SY1R92jY+Gox7+T5dy8jGeCjIQ9YdOab8o=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 May 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:4a:68:e8:88:98:dd:b8:dc:6e:e0:90:fa:3e:be:58:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: May 21 12:00:49 2026 GMT Not After : May 22 12:00:49 2026 GMT Subject: CN=0371b4f12049f18d12e95180343d04b78e323fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:0e:31:d1:4b:f8:6e:c5:60:cf:fd:31:aa: b4:cd:69:fa:63:02:2c:5d:e8:ec:a9:59:51:df:c2: 17:9f:b9:63:ae:c5:62:4c:31:36:81:b6:e5:3b:9b: d8:8b:bb:49:25:ef:78:5d:52:b9:b9:56:40:9e:67: 27:80:8c:6c:86:d7:69:c3:0a:e9:51:dc:f8:7e:c1: 4e:1f:08:14:7c:15:8a:92:11:73:67:d2:f3:54:b0: ef:cd:ea:7d:c7:a0:a2:62:f0:12:93:f4:e4:c0:5e: 16:69:11:bf:6e:50:00:af:8c:bb:fe:e8:60:a9:d4: 73:75:ad:22:93:fa:2e:03:90:1b:30:f1:4c:d7:e6: 4a:b0:dc:1c:49:7e:a6:66:38:67:8a:55:20:56:bf: 7a:3d:a9:14:4e:80:36:e3:72:07:9e:30:57:d5:55: 52:6a:70:bf:68:9a:cf:4d:d6:fa:ae:c8:a2:d5:d3: fb:5c:47:31:94:fc:96:dd:6d:b7:af:a0:60:1a:83: 14:ef:02:cd:4b:af:69:29:4d:99:38:97:7d:9d:53: ad:4a:8b:81:a9:b9:46:bc:89:ee:af:fb:03:77:a0: 30:36:27:63:e2:2a:92:7d:f0:6b:53:b0:96:ef:5a: 57:51:28:66:42:88:08:0a:78:0b:67:2d:27:ca:8f: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:71:B4:F1:20:49:F1:8D:12:E9:51:80:34:3D:04:B7:8E:32:3F:C7 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a4:62:eb:ed:a1:71:79:51:1d:f7:63:a4:1e:4d:81:27:c0: d5:c7:96:3c:c8:d2:0c:a0:a5:2b:36:a9:10:6f:63:14:c4:49: 2e:29:85:f9:b3:d7:a7:d8:5a:8e:f6:a5:4b:d8:cd:7a:05:80: 57:0e:3c:b4:fe:2e:96:56:a3:16:fb:cb:8d:40:aa:97:c3:4b: 8c:5d:1a:64:88:70:02:8f:99:db:94:6c:c0:9f:62:aa:4a:b0: d5:35:08:05:e4:d8:ae:2e:37:65:c2:41:81:56:b4:1f:4d:68: d1:c9:e9:6f:d4:8c:1d:19:99:e9:e3:8d:23:fd:e7:f4:70:83: 15:1c:84:01:5f:34:3b:03:fe:ca:4c:20:b0:f7:78:6c:66:6b: ab:44:0a:9c:b7:7a:be:72:a5:7f:40:7c:4f:b5:b8:43:1d:c2: 21:61:a3:f2:86:14:c3:09:a4:91:42:e3:bd:e0:d3:a6:35:b5: 2c:8c:43:7c:d4:d4:8d:33:4d:e4:f0:76:b4:ae:13:15:15:c1: 6f:da:3d:bd:47:23:fa:80:6f:af:b4:e3:49:5f:0a:05:0c:1f: fd:94:fe:e7:8b:8f:25:68:b4:5a:04:be:18:ee:9d:44:28:ea: a2:bd:ce:31:ee:e3:28:71:09:71:64:32:f1:13:99:1a:e3:f2: 75:8f:56:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5KaOiImN243G7gkPo+vli6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNTIxMTIwMDQ5WhcNMjYwNTIyMTIwMDQ5WjAzMTEwLwYDVQQD EygwMzcxYjRmMTIwNDlmMThkMTJlOTUxODAzNDNkMDRiNzhlMzIzZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseEOMdFL+G7FYM/9Maq0zWn6YwIs XejsqVlR38IXn7ljrsViTDE2gbblO5vYi7tJJe94XVK5uVZAnmcngIxshtdpwwrp Udz4fsFOHwgUfBWKkhFzZ9LzVLDvzep9x6CiYvASk/TkwF4WaRG/blAAr4y7/uhg qdRzda0ik/ouA5AbMPFM1+ZKsNwcSX6mZjhnilUgVr96PakUToA243IHnjBX1VVS anC/aJrPTdb6rsii1dP7XEcxlPyW3W23r6BgGoMU7wLNS69pKU2ZOJd9nVOtSouB qblGvInur/sDd6AwNidj4iqSffBrU7CW71pXUShmQogICngLZy0nyo+MkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANxtPEgSfGNEulRgDQ9BLeOMj/HMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6Ri6+2h cXlRHfdjpB5NgSfA1ceWPMjSDKClKzapEG9jFMRJLimF+bPXp9hajvalS9jNegWA Vw48tP4ullajFvvLjUCql8NLjF0aZIhwAo+Z25RswJ9iqkqw1TUIBeTYri43ZcJB gVa0H01o0cnpb9SMHRmZ6eONI/3n9HCDFRyEAV80OwP+ykwgsPd4bGZrq0QKnLd6 vnKlf0B8T7W4Qx3CIWGj8oYUwwmkkULjveDTpjW1LIxDfNTUjTNN5PB2tK4TFRXB b9o9vUcj+oBvr7TjSV8KBQwf/ZT+54uPJWi0WgS+GO6dRCjqor3OMe7jKHEJcWQy 8ROZGuPydY9WHQ== -----END CERTIFICATE-----Generated at Thu May 21 18:42:48 2026 by rpki-client