$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: YfCwCjru5Mt5fZ22Nj5hdimNLJW4fOr41i8clbSP8Ds= Subject key identifier: 3B:46:9F:AF:9B:AF:9B:4B:34:0F:5D:9E:17:2E:EE:73:AB:73:C2:5E Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FE176FB8389ED1B21C16786DDF0CE8C1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A38 Signing time: Sat 08 Aug 2026 13:01:38 +0000 Manifest this update: Sat 08 Aug 2026 13:01:38 +0000 Manifest next update: Sun 09 Aug 2026 13:01:38 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: UGA9CxzYIJ7eKq9exP2ukMQ7t3abSWc6z12DMA77j6U=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 09 Aug 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:e1:76:fb:83:89:ed:1b:21:c1:67:86:dd:f0:ce:8c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 8 13:01:38 2026 GMT Not After : Aug 9 13:01:38 2026 GMT Subject: CN=3b469faf9baf9b4b340f5d9e172eee73ab73c25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:b0:62:82:5d:f9:13:57:f4:c8:00:a1:a2: 0b:46:8d:87:17:e9:44:b0:cf:6d:4d:c7:b4:b7:f1: 0c:86:b8:48:b5:c2:d5:28:db:37:ee:e5:76:5b:25: 39:8f:51:18:42:22:ff:b8:25:89:fd:5f:54:67:a3: a9:6a:3a:ba:0b:6e:38:83:99:f5:12:87:b7:63:0a: 64:72:2a:03:90:f6:93:99:21:e5:7c:e8:87:02:11: 21:da:ba:94:31:63:83:e5:ff:62:5d:d1:f5:13:d8: d3:43:c4:63:3c:bf:4a:59:03:c3:a2:2d:c7:42:80: 6f:0c:07:5d:ad:91:6b:f0:bc:c6:74:0f:58:4b:b3: cc:0d:fd:a3:f8:d1:ca:00:8d:26:ae:fc:11:00:97: e2:90:c2:be:09:ef:ae:26:4b:2f:22:56:1a:37:a7: 3f:4b:ee:f7:df:2f:fd:6c:98:5e:e7:c6:96:ba:e9: 49:ac:c5:0a:4b:bc:55:df:d6:47:b9:b7:99:52:7d: 83:9b:1b:3e:ac:f3:67:c6:42:85:9b:61:69:5c:a4: 89:b6:a6:05:1c:0e:ef:2d:df:d4:43:16:f5:94:cc: f6:62:0e:a5:b1:94:ab:b4:25:67:cd:4d:13:b9:ab: 15:56:88:13:d9:72:2a:94:ae:6a:9b:10:92:b6:cf: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:46:9F:AF:9B:AF:9B:4B:34:0F:5D:9E:17:2E:EE:73:AB:73:C2:5E X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:54:06:75:fc:34:d4:f4:32:38:20:c9:33:91:3f:31:2e:35: 7f:8b:79:72:c0:d2:96:b7:78:0a:ac:01:4e:13:52:46:ce:c6: 64:92:3e:f8:b2:da:1d:f1:7b:7f:ef:34:b2:3d:2e:30:9f:04: 3f:4f:d2:a7:b5:d8:d8:ab:f7:27:50:48:b4:9d:5f:05:85:a7: ac:da:1d:25:e3:d2:05:be:56:06:b4:ca:c5:2a:9f:1a:51:de: 18:6f:16:28:4a:88:ce:11:20:c0:3d:80:c7:f8:ad:2e:67:d8: 57:70:ff:65:ec:fe:b0:3c:90:97:23:5b:5a:e5:1a:6e:18:88: a2:2e:d8:16:ee:72:8a:e0:ee:0d:93:34:4e:0c:a7:e5:26:2e: db:ae:db:17:fa:36:cd:ac:e5:c2:85:eb:bf:84:54:12:0f:8c: 7e:15:a9:3a:bc:5e:56:c8:a9:fd:76:f8:7b:f8:1c:25:c8:ca: b3:c8:63:1d:4a:47:79:51:84:74:d2:37:9c:2d:70:f0:c9:3b: 54:b4:46:e9:2a:0a:18:b1:75:fb:15:96:14:90:48:6b:b2:d3: cf:b4:dc:36:e6:f8:bf:ab:e8:c7:97:de:02:95:3b:53:05:9c: e4:7e:e3:a6:91:15:32:b6:e6:66:3e:86:f3:b2:06:f9:f2:6e: ed:8c:74:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/hdvuDie0bIcFnht3wzowbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODA4MTMwMTM4WhcNMjYwODA5MTMwMTM4WjAzMTEwLwYDVQQD EygzYjQ2OWZhZjliYWY5YjRiMzQwZjVkOWUxNzJlZWU3M2FiNzNjMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYKwYoJd+RNX9MgAoaILRo2HF+lE sM9tTce0t/EMhrhItcLVKNs37uV2WyU5j1EYQiL/uCWJ/V9UZ6Opajq6C244g5n1 Eoe3YwpkcioDkPaTmSHlfOiHAhEh2rqUMWOD5f9iXdH1E9jTQ8RjPL9KWQPDoi3H QoBvDAddrZFr8LzGdA9YS7PMDf2j+NHKAI0mrvwRAJfikMK+Ce+uJksvIlYaN6c/ S+733y/9bJhe58aWuulJrMUKS7xV39ZHubeZUn2Dmxs+rPNnxkKFm2FpXKSJtqYF HA7vLd/UQxb1lMz2Yg6lsZSrtCVnzU0TuasVVogT2XIqlK5qmxCSts96nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtGn6+br5tLNA9dnhcu7nOrc8JeMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1QGdfw0 1PQyOCDJM5E/MS41f4t5csDSlrd4CqwBThNSRs7GZJI++LLaHfF7f+80sj0uMJ8E P0/Sp7XY2Kv3J1BItJ1fBYWnrNodJePSBb5WBrTKxSqfGlHeGG8WKEqIzhEgwD2A x/itLmfYV3D/Zez+sDyQlyNbWuUabhiIoi7YFu5yiuDuDZM0Tgyn5SYu267bF/o2 zazlwoXrv4RUEg+MfhWpOrxeVsip/Xb4e/gcJcjKs8hjHUpHeVGEdNI3nC1w8Mk7 VLRG6SoKGLF1+xWWFJBIa7LTz7TcNub4v6vox5feApU7UwWc5H7jppEVMrbmZj6G 87IG+fJu7Yx05g== -----END CERTIFICATE-----Generated at Sat Aug 8 18:48:53 2026 by rpki-client