$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: HyATgAVp6Llfwcr2SRiP6enArh0u7Ri6D1cOoxbHbLo= Subject key identifier: 6A:98:96:1D:94:C9:E6:CB:E6:CD:FE:D6:3D:FB:C0:50:A1:16:AC:58 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019E04E3BA762AE10425F0278D894DF19EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1940 Signing time: Fri 08 May 2026 00:01:33 +0000 Manifest this update: Fri 08 May 2026 00:01:33 +0000 Manifest next update: Sat 09 May 2026 00:01:33 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: EOEFBR81NgZhFMcv8W4YHsMjUN3gSqJnHUocHZhLurc=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 May 2026 21:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:04:e3:ba:76:2a:e1:04:25:f0:27:8d:89:4d:f1:9e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: May 8 00:01:33 2026 GMT Not After : May 9 00:01:33 2026 GMT Subject: CN=6a98961d94c9e6cbe6cdfed63dfbc050a116ac58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:13:e0:07:ec:0f:32:06:2d:4a:b8:44:41: cb:8b:b7:09:5f:f1:4f:21:73:68:fd:81:ee:79:79: 9b:63:87:bb:14:79:e3:b2:a6:fa:c2:13:4a:c0:44: b5:8e:41:72:8d:2c:ac:8c:18:ad:e8:b8:35:a0:a6: 15:c1:5b:21:3a:3a:12:da:ca:2d:a6:9f:d4:dc:a3: fc:98:f4:90:68:72:d4:36:cf:d3:34:05:ca:e3:45: 13:1b:4f:0c:15:cd:1a:31:bd:af:2d:94:c3:5e:6a: 9b:c5:d8:c6:d7:1f:88:59:89:4d:be:b1:e8:33:d7: 42:6b:d0:5d:4d:e0:a4:ae:44:87:8b:5f:5b:39:a3: 5b:38:d3:35:b6:ed:a9:f1:df:93:af:04:3a:6e:88: 12:98:a2:e7:a5:56:0e:c4:cb:2e:55:36:de:d3:91: 81:4c:e8:62:f3:be:09:fc:3d:26:b6:cc:7e:b9:8b: 38:d0:13:f5:ef:27:89:e5:66:2b:80:1c:c1:1c:37: 7c:7b:cc:39:40:d3:ce:e3:d3:38:20:00:0e:63:08: b6:fb:c7:e5:c9:be:35:41:3b:35:15:61:80:45:6c: f9:3b:e4:d2:8f:78:47:10:8b:57:1e:10:cb:c1:65: 97:4f:d8:10:ae:01:13:30:4c:6a:02:fb:63:98:c4: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:98:96:1D:94:C9:E6:CB:E6:CD:FE:D6:3D:FB:C0:50:A1:16:AC:58 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2e:45:95:d6:72:65:b6:a6:15:f1:cd:04:ca:e3:52:c7:66: 63:13:d4:d8:67:1f:d0:af:da:80:13:fc:c8:05:d1:fc:59:55: a8:fb:93:6e:d5:84:80:e6:e7:f6:15:a5:21:6b:0f:d1:ef:c3: ba:d0:c3:f7:bb:4e:16:c5:72:45:d7:81:09:99:76:bf:14:c0: 39:0e:72:de:a1:03:cc:d3:1c:21:46:bb:ce:d2:8b:e5:db:ea: 13:f7:71:d2:cc:92:a6:67:b3:d4:a0:49:5f:3c:62:f1:43:2d: 40:a6:f3:58:80:87:41:a7:d4:9f:55:39:26:be:b8:a3:a6:1e: 9a:d4:0a:66:c3:5e:2f:91:8c:90:dc:5d:80:91:ac:eb:9f:3b: 84:df:80:9d:75:11:0d:90:eb:94:19:d9:d7:e9:31:a9:47:2b: 0e:cd:0f:d1:44:38:2e:96:3b:14:7e:57:8f:2c:13:21:e5:b1: 6b:34:a4:43:28:86:f8:c5:29:9c:99:6c:b2:a0:9d:a7:34:8a: 6d:32:7f:21:e9:e3:45:15:c8:eb:dc:cd:d5:39:b6:22:7f:5a: 33:72:fc:d7:5e:6b:bc:55:52:1e:2d:20:9e:05:44:fc:db:be: 00:5b:c2:f3:f1:63:18:c8:98:6b:5e:69:6f:8b:3d:32:fd:ae: 9f:0b:99:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4E47p2KuEEJfAnjYlN8Z6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNTA4MDAwMTMzWhcNMjYwNTA5MDAwMTMzWjAzMTEwLwYDVQQD Eyg2YTk4OTYxZDk0YzllNmNiZTZjZGZlZDYzZGZiYzA1MGExMTZhYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKgT4AfsDzIGLUq4REHLi7cJX/FP IXNo/YHueXmbY4e7FHnjsqb6whNKwES1jkFyjSysjBit6Lg1oKYVwVshOjoS2sot pp/U3KP8mPSQaHLUNs/TNAXK40UTG08MFc0aMb2vLZTDXmqbxdjG1x+IWYlNvrHo M9dCa9BdTeCkrkSHi19bOaNbONM1tu2p8d+TrwQ6bogSmKLnpVYOxMsuVTbe05GB TOhi874J/D0mtsx+uYs40BP17yeJ5WYrgBzBHDd8e8w5QNPO49M4IAAOYwi2+8fl yb41QTs1FWGARWz5O+TSj3hHEItXHhDLwWWXT9gQrgETMExqAvtjmMRR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqYlh2UyebL5s3+1j37wFChFqxYMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS5FldZy ZbamFfHNBMrjUsdmYxPU2Gcf0K/agBP8yAXR/FlVqPuTbtWEgObn9hWlIWsP0e/D utDD97tOFsVyRdeBCZl2vxTAOQ5y3qEDzNMcIUa7ztKL5dvqE/dx0sySpmez1KBJ Xzxi8UMtQKbzWICHQafUn1U5Jr64o6YemtQKZsNeL5GMkNxdgJGs6587hN+AnXUR DZDrlBnZ1+kxqUcrDs0P0UQ4LpY7FH5XjywTIeWxazSkQyiG+MUpnJlssqCdpzSK bTJ/IenjRRXI69zN1Tm2In9aM3L8115rvFVSHi0gngVE/Nu+AFvC8/FjGMiYa15p b4s9Mv2unwuZEw== -----END CERTIFICATE-----Generated at Fri May 8 07:22:12 2026 by rpki-client