$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 8idp3QJhS0lC+0n4wSrRYQ24g2z4z2+4039uLiCWQDA= Subject key identifier: 3C:14:BD:8B:21:DA:D0:5F:C3:21:48:71:D3:36:26:A3:32:25:EE:FD Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019DCCE21CC651571CD49CFC8836505D3D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1923 Signing time: Mon 27 Apr 2026 03:01:03 +0000 Manifest this update: Mon 27 Apr 2026 03:01:03 +0000 Manifest next update: Tue 28 Apr 2026 03:01:03 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: XUdjm729f4yiDasZfw76Argpm1AIHtWv3yhRjKFip4A=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:e2:1c:c6:51:57:1c:d4:9c:fc:88:36:50:5d:3d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 27 03:01:03 2026 GMT Not After : Apr 28 03:01:03 2026 GMT Subject: CN=3c14bd8b21dad05fc3214871d33626a33225eefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:c1:82:ac:93:ad:b9:1c:2c:91:79:e4:eb: 5b:5c:49:34:e5:b9:4e:6b:dd:08:ec:30:bd:4c:fc: aa:89:a5:4d:84:c5:1f:14:6e:96:28:47:86:06:ca: 8e:82:e2:e6:72:22:ce:9f:18:44:48:ec:9c:76:3e: 87:64:74:6d:ef:f3:37:87:cf:a6:40:40:41:88:b9: 6a:23:c4:18:05:22:ea:5d:24:5a:2d:5f:4f:d0:27: 74:13:66:78:c7:cd:57:ed:dc:30:49:e2:78:25:33: 34:ee:c1:68:3f:76:05:c6:bf:68:d2:cd:84:f0:09: 31:95:56:5e:7e:8b:6f:a9:61:e6:1c:68:8e:1e:85: 96:b2:1e:c5:7b:6e:50:7f:07:e2:af:e6:91:07:9b: 4a:58:94:91:03:dc:7f:72:f3:35:74:61:9f:2d:d9: 01:f2:a6:86:50:60:c7:e5:a8:23:0c:df:2e:a3:ef: 33:33:19:ed:9e:60:21:4d:a9:76:3d:1c:1a:56:42: 27:43:67:de:6a:6e:ea:94:e2:d8:7e:0b:b3:56:42: e9:85:dc:09:3a:69:90:05:8b:e5:38:8b:cb:6e:42: 32:a8:db:16:19:97:7a:dd:80:09:75:d5:52:a9:81: 64:34:64:6b:6f:e0:ce:a6:94:af:05:1b:79:fe:c9: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:BD:8B:21:DA:D0:5F:C3:21:48:71:D3:36:26:A3:32:25:EE:FD X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e9:a3:ec:fe:e3:fc:64:64:b8:2e:7f:71:1c:87:8c:41:1b: b4:96:5c:b1:5a:3f:42:15:80:ab:cf:12:ae:f3:07:93:eb:4c: 69:6f:db:2e:26:cc:16:ec:64:28:e5:cc:e7:d4:45:c9:2f:fa: 50:3e:92:75:ac:b9:6d:c4:28:1b:25:4b:59:13:fe:52:a9:9a: 23:a5:ef:01:16:c9:82:1b:2c:f0:60:a2:82:51:87:58:e7:f0: 67:ba:b5:4e:f1:05:08:ce:65:35:24:e4:43:ad:1f:56:c4:08: 3a:2a:ac:8b:54:bf:46:58:81:16:cc:33:8e:34:4d:ef:ec:1f: b3:f3:87:18:73:74:e8:37:dd:3d:68:52:f7:e9:dc:e7:12:48: b5:2b:38:4d:43:69:91:0c:76:50:e0:f2:25:11:09:b4:fc:aa: 49:12:57:fa:39:b6:d4:ec:02:ce:4c:f9:b3:d7:20:d1:59:e5: 6b:2f:f8:1e:1f:da:fd:1e:08:2c:a1:de:f3:aa:aa:fd:62:43: 72:19:2b:8b:6b:07:ab:92:5f:61:db:d6:a6:df:e6:67:f8:4a: 71:f4:9a:54:f2:eb:86:5e:e8:96:76:3e:54:75:1d:7a:c6:f0: a3:56:cf:ca:28:71:20:21:8e:65:cb:e2:11:e3:51:fd:e9:2a: fa:b4:bc:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3M4hzGUVcc1Jz8iDZQXT1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDI3MDMwMTAzWhcNMjYwNDI4MDMwMTAzWjAzMTEwLwYDVQQD EygzYzE0YmQ4YjIxZGFkMDVmYzMyMTQ4NzFkMzM2MjZhMzMyMjVlZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBvBgqyTrbkcLJF55OtbXEk05blO a90I7DC9TPyqiaVNhMUfFG6WKEeGBsqOguLmciLOnxhESOycdj6HZHRt7/M3h8+m QEBBiLlqI8QYBSLqXSRaLV9P0Cd0E2Z4x81X7dwwSeJ4JTM07sFoP3YFxr9o0s2E 8AkxlVZefotvqWHmHGiOHoWWsh7Fe25Qfwfir+aRB5tKWJSRA9x/cvM1dGGfLdkB 8qaGUGDH5agjDN8uo+8zMxntnmAhTal2PRwaVkInQ2feam7qlOLYfguzVkLphdwJ OmmQBYvlOIvLbkIyqNsWGZd63YAJddVSqYFkNGRrb+DOppSvBRt5/skAxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwUvYsh2tBfwyFIcdM2JqMyJe79MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+mj7P7j /GRkuC5/cRyHjEEbtJZcsVo/QhWAq88SrvMHk+tMaW/bLibMFuxkKOXM59RFyS/6 UD6Sday5bcQoGyVLWRP+UqmaI6XvARbJghss8GCiglGHWOfwZ7q1TvEFCM5lNSTk Q60fVsQIOiqsi1S/RliBFswzjjRN7+wfs/OHGHN06DfdPWhS9+nc5xJItSs4TUNp kQx2UODyJREJtPyqSRJX+jm21OwCzkz5s9cg0Vnlay/4Hh/a/R4ILKHe86qq/WJD chkri2sHq5JfYdvWpt/mZ/hKcfSaVPLrhl7olnY+VHUdesbwo1bPyihxICGOZcvi EeNR/ekq+rS8yw== -----END CERTIFICATE-----Generated at Mon Apr 27 07:17:26 2026 by rpki-client