$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: oKNaTWIa//oVAUIyxgqPzUpgY16ovOEnsic/+EEyRYw= Subject key identifier: DF:70:EE:0D:46:F9:C2:E1:BC:E7:64:75:61:E4:CD:78:A1:29:6B:BC Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D533782CC2F8A0930880EE906DE8B866E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18E4 Signing time: Fri 03 Apr 2026 12:00:39 +0000 Manifest this update: Fri 03 Apr 2026 12:00:39 +0000 Manifest next update: Sat 04 Apr 2026 12:00:39 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: OhrK7EDQYsXMJK6Hil788c2FHbsloAmk1FfRUWbiILY=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Apr 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:53:37:82:cc:2f:8a:09:30:88:0e:e9:06:de:8b:86:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 3 12:00:39 2026 GMT Not After : Apr 4 12:00:39 2026 GMT Subject: CN=df70ee0d46f9c2e1bce7647561e4cd78a1296bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:85:db:81:dd:ad:ec:0a:8f:96:2d:09:01: 88:83:ca:e6:91:07:2c:4f:90:16:bc:03:7e:95:9e: 11:08:40:86:06:23:d2:50:5f:ce:21:fe:b5:fa:b6: b2:b7:1e:d7:3a:4f:02:c9:3e:62:b1:fc:f3:7f:62: 92:23:a5:05:44:88:0e:fc:7d:aa:66:a6:94:84:18: de:ab:37:d3:00:05:27:de:f9:34:96:d4:35:a4:ea: 03:61:81:25:ec:f2:0b:d8:a2:e9:a5:54:81:be:dd: 9c:a0:52:f4:7d:bf:8a:60:b3:0c:cf:25:0d:f9:12: e8:6b:5a:55:5e:5a:84:9d:8e:5a:01:30:c3:bd:4f: 86:a4:31:5e:f1:56:d3:60:d6:57:b8:44:00:a2:f4: 70:6c:ad:6c:ed:89:70:d0:7d:d1:bc:89:47:d4:39: c6:1b:58:69:a7:75:98:3f:7a:4b:33:f9:2f:74:69: 24:2e:08:89:c9:72:f1:59:08:bd:43:8f:ad:05:4e: 45:c1:77:cb:6f:7f:09:33:b4:26:58:82:70:ad:55: 75:0a:bd:c7:57:01:a5:96:78:4d:93:63:3f:28:73: b1:f5:88:b8:9a:de:84:85:46:73:6a:99:8a:a1:43: fb:af:cd:76:b6:4f:41:ca:92:4e:17:15:1f:48:be: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:EE:0D:46:F9:C2:E1:BC:E7:64:75:61:E4:CD:78:A1:29:6B:BC X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7f:dd:48:c9:d9:5f:24:05:74:c3:df:a2:c9:53:4e:01:19: 10:90:ba:46:f7:46:e0:bc:1f:56:22:3d:5b:82:7a:90:bd:f9: bc:44:97:af:42:6a:ec:4e:9c:8a:1c:2f:5b:39:27:11:31:c0: 3c:59:da:d7:62:1c:b0:5b:f8:2d:f9:e5:bf:b9:74:5f:4b:24: 0f:8c:9c:c0:00:28:e7:fa:a8:72:96:89:71:af:95:95:b0:97: 3f:9d:c7:72:44:b5:a2:0c:a8:67:79:e2:a5:44:30:c3:77:40: 4b:e5:96:be:f1:bb:76:ef:73:aa:06:ec:28:86:bc:0c:4f:fa: 29:2c:e8:6b:6b:65:ad:14:4b:f1:7a:ea:22:46:30:3c:e4:71: 72:0b:f3:d2:39:3a:31:ee:de:6c:ea:77:b9:46:de:b4:ce:f6: 39:50:0a:ac:89:d3:34:3c:16:42:a6:1e:c0:da:47:70:18:ef: 3c:69:d7:6e:87:27:19:4d:3a:e4:26:0d:6a:7f:59:45:4b:c6: 46:6b:a9:74:12:36:cb:4e:ed:99:58:2f:f8:ed:47:35:95:15: ea:d4:55:34:40:35:f3:55:79:2d:46:ca:af:8e:9f:bb:38:a1: 4b:91:83:4e:7e:d4:af:5c:68:8b:5f:ad:93:49:d1:b0:64:4b: f6:a8:6d:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1TN4LML4oJMIgO6Qbei4ZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDAzMTIwMDM5WhcNMjYwNDA0MTIwMDM5WjAzMTEwLwYDVQQD EyhkZjcwZWUwZDQ2ZjljMmUxYmNlNzY0NzU2MWU0Y2Q3OGExMjk2YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41uF24HdrewKj5YtCQGIg8rmkQcs T5AWvAN+lZ4RCECGBiPSUF/OIf61+raytx7XOk8CyT5isfzzf2KSI6UFRIgO/H2q ZqaUhBjeqzfTAAUn3vk0ltQ1pOoDYYEl7PIL2KLppVSBvt2coFL0fb+KYLMMzyUN +RLoa1pVXlqEnY5aATDDvU+GpDFe8VbTYNZXuEQAovRwbK1s7Ylw0H3RvIlH1DnG G1hpp3WYP3pLM/kvdGkkLgiJyXLxWQi9Q4+tBU5FwXfLb38JM7QmWIJwrVV1Cr3H VwGllnhNk2M/KHOx9Yi4mt6EhUZzapmKoUP7r812tk9BypJOFxUfSL5g/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9w7g1G+cLhvOdkdWHkzXihKWu8MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYn/dSMnZ XyQFdMPfoslTTgEZEJC6RvdG4LwfViI9W4J6kL35vESXr0Jq7E6cihwvWzknETHA PFna12IcsFv4Lfnlv7l0X0skD4ycwAAo5/qocpaJca+VlbCXP53HckS1ogyoZ3ni pUQww3dAS+WWvvG7du9zqgbsKIa8DE/6KSzoa2tlrRRL8XrqIkYwPORxcgvz0jk6 Me7ebOp3uUbetM72OVAKrInTNDwWQqYewNpHcBjvPGnXbocnGU065CYNan9ZRUvG RmupdBI2y07tmVgv+O1HNZUV6tRVNEA181V5LUbKr46fuzihS5GDTn7Ur1xoi1+t k0nRsGRL9qhtAQ== -----END CERTIFICATE-----Generated at Fri Apr 3 19:56:42 2026 by rpki-client