$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: yB0a3dM66/4PXw6C7Ac7YxNCqCOKgTwCNwZVMgeSpwU= Subject key identifier: FE:AB:D0:90:4C:55:D0:9B:85:7F:6A:9A:B3:A4:47:65:79:D9:AE:07 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019DAC0D735526E9FB48BBEAFF35E456B224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1912 Signing time: Mon 20 Apr 2026 18:00:55 +0000 Manifest this update: Mon 20 Apr 2026 18:00:55 +0000 Manifest next update: Tue 21 Apr 2026 18:00:55 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: PAWs3C2l989tjTHtYt3hT8rL2uxMRCvzkgD400kl1DU=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ac:0d:73:55:26:e9:fb:48:bb:ea:ff:35:e4:56:b2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 20 18:00:55 2026 GMT Not After : Apr 21 18:00:55 2026 GMT Subject: CN=feabd0904c55d09b857f6a9ab3a4476579d9ae07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:31:ac:99:eb:ba:c7:d1:1c:97:7c:b3:d1: 5a:8c:82:f4:75:25:f1:49:50:ad:cd:29:79:11:bb: 75:bb:cd:21:53:17:c9:c2:02:93:26:6d:a3:05:9d: 44:7c:e9:06:15:7b:5c:f8:49:5d:ae:2d:7c:72:d1: 37:d7:d7:80:7e:66:13:63:5e:93:ba:6e:19:35:ca: 94:00:b8:b7:e1:6f:cc:81:f8:3d:63:92:74:ec:b0: ba:2c:55:94:49:48:12:04:95:8f:5b:bc:3f:2b:22: 1f:8d:60:18:cc:55:ee:0d:9f:f3:ba:ef:2e:00:5a: 85:53:cd:5d:95:a9:c7:34:88:42:86:02:83:fe:66: 59:5d:57:c2:a5:d9:75:31:1d:c5:f3:41:29:eb:03: be:3a:b7:dd:e0:e9:ee:03:5a:e9:0b:be:f5:21:35: e2:e5:5a:e5:c8:ee:96:b3:3d:4c:39:87:93:81:f1: 23:64:c0:98:c0:b9:b1:f2:f8:f9:9c:35:bc:e9:2e: 77:8b:2b:e3:be:c3:67:c7:79:5e:c0:91:bd:b4:7c: 32:7c:f6:95:e9:b4:2e:5f:77:af:bd:bc:89:b1:1a: 23:b3:46:bf:a2:80:e5:8d:5c:e7:1b:ef:9d:38:57: f2:82:ae:0b:01:01:d4:ba:c2:18:11:ed:31:c0:ec: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:D0:90:4C:55:D0:9B:85:7F:6A:9A:B3:A4:47:65:79:D9:AE:07 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9b:d8:78:fb:d3:61:a1:a0:e1:ea:64:f7:53:07:fd:43:a2: 77:75:45:36:c6:69:00:59:6b:8a:e9:95:d9:de:1d:89:f2:6a: 51:b5:e4:e0:41:72:96:8e:2b:2c:af:17:58:60:83:e1:44:71: 01:e7:a0:c2:d5:14:f6:46:20:d5:d8:0a:d8:c6:8f:b2:95:5d: 37:16:5f:1a:be:d5:bd:98:29:f5:15:34:41:54:8b:8b:de:cf: 1d:51:19:6b:0c:bc:0a:0d:fa:ae:3b:33:d8:80:6b:1e:32:0b: 86:d4:08:1d:ba:35:9c:ca:42:8e:d4:8f:d6:39:64:74:7d:61: 24:a6:16:c8:c8:8b:03:30:38:9b:85:d3:de:30:e6:6b:d6:0f: 1b:57:32:aa:d8:9e:94:1a:44:31:cf:f5:03:a7:e5:e9:3f:63: f7:fb:5c:a9:45:95:60:e9:9a:03:5f:80:ff:10:76:8a:4c:8b: 59:2f:bd:b6:f0:56:7d:b7:0f:4c:b3:d6:8b:b1:26:33:60:f8: dd:82:2b:60:dd:d4:ac:27:53:2f:52:92:c5:24:e7:66:06:d3: d2:fc:c1:d0:7a:fa:49:8a:37:20:1e:a2:13:e1:35:74:27:f2: b3:58:b9:ca:cb:69:b9:24:9e:3e:58:ab:1b:c9:3b:9e:c0:77: e1:12:70:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2sDXNVJun7SLvq/zXkVrIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDIwMTgwMDU1WhcNMjYwNDIxMTgwMDU1WjAzMTEwLwYDVQQD EyhmZWFiZDA5MDRjNTVkMDliODU3ZjZhOWFiM2E0NDc2NTc5ZDlhZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrsxrJnrusfRHJd8s9FajIL0dSXx SVCtzSl5Ebt1u80hUxfJwgKTJm2jBZ1EfOkGFXtc+Eldri18ctE319eAfmYTY16T um4ZNcqUALi34W/Mgfg9Y5J07LC6LFWUSUgSBJWPW7w/KyIfjWAYzFXuDZ/zuu8u AFqFU81dlanHNIhChgKD/mZZXVfCpdl1MR3F80Ep6wO+Orfd4OnuA1rpC771ITXi 5VrlyO6Wsz1MOYeTgfEjZMCYwLmx8vj5nDW86S53iyvjvsNnx3lewJG9tHwyfPaV 6bQuX3evvbyJsRojs0a/ooDljVznG++dOFfygq4LAQHUusIYEe0xwOxBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6r0JBMVdCbhX9qmrOkR2V52a4HMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5vYePvT YaGg4epk91MH/UOid3VFNsZpAFlriumV2d4difJqUbXk4EFylo4rLK8XWGCD4URx AeegwtUU9kYg1dgK2MaPspVdNxZfGr7VvZgp9RU0QVSLi97PHVEZawy8Cg36rjsz 2IBrHjILhtQIHbo1nMpCjtSP1jlkdH1hJKYWyMiLAzA4m4XT3jDma9YPG1cyqtie lBpEMc/1A6fl6T9j9/tcqUWVYOmaA1+A/xB2ikyLWS+9tvBWfbcPTLPWi7EmM2D4 3YIrYN3UrCdTL1KSxSTnZgbT0vzB0Hr6SYo3IB6iE+E1dCfys1i5ystpuSSePlir G8k7nsB34RJw3A== -----END CERTIFICATE-----Generated at Tue Apr 21 00:44:13 2026 by rpki-client