$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 7IjpQfbXiuIaVURfV7dliMsJIUY7GfvbPdS6m6FGs1g= Subject key identifier: EB:47:6E:F9:0F:27:5B:1E:80:EA:32:E6:22:32:5E:08:E1:13:10:69 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0BBE65C0E40000AAC5C6F892A3C0A0CB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1AB1 Signing time: Sat 19 Sep 2026 23:00:31 +0000 Manifest this update: Sat 19 Sep 2026 23:00:31 +0000 Manifest next update: Sun 20 Sep 2026 23:00:31 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=) 4: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: moPcqwoVqzz4WK5n/OY8NePnZIpm8lBJZbCvDiyjJJ4=) 6: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=) 7: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 8: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 9: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 10: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 11: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 12: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=) 14: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 15: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 16: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bb:e6:5c:0e:40:00:0a:ac:5c:6f:89:2a:3c:0a:0c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 19 23:00:31 2026 GMT Not After : Sep 20 23:00:31 2026 GMT Subject: CN=eb476ef90f275b1e80ea32e622325e08e1131069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6b:64:ec:85:ba:75:90:c6:f6:f3:7c:b2:05: f0:b9:9c:89:78:79:a5:54:b3:67:3c:fe:15:a3:5e: 15:5c:fc:02:d8:c2:b7:1a:0b:7f:82:98:e0:89:b4: 97:77:bf:8a:78:b9:12:99:9e:b0:4f:c8:60:a2:df: 80:e4:93:08:de:52:fe:7b:2c:34:cd:79:17:86:bf: c7:8c:24:47:ba:fd:cf:0b:a7:96:77:13:37:c8:f1: d2:ed:23:ad:0f:ee:0e:8a:0c:67:be:18:c7:ef:c7: fa:25:cb:8d:cf:e8:f8:d4:c2:b5:20:79:44:91:4e: 6a:34:53:2f:10:8d:1d:1a:0c:cb:83:ca:2b:f0:37: 2f:12:ec:4a:46:9e:af:e4:85:03:f7:d6:43:46:fa: 05:e0:97:84:05:ed:b0:e7:e0:4c:85:37:c0:18:f8: 8e:a3:9a:a5:ec:ee:ea:a4:5b:f1:0a:b0:56:63:c0: 19:8c:5c:a2:b0:db:22:7f:ed:d0:6f:69:3e:af:1d: 1c:13:af:bb:db:ce:7f:d5:89:f2:55:59:3c:60:0c: f3:30:f7:d2:fd:6a:0c:e6:56:7a:3e:de:ff:00:5d: 8b:73:8c:e4:72:a5:32:05:9d:b6:d5:c3:6e:47:ce: 5d:cd:3d:41:05:14:c4:46:f8:cc:28:15:71:08:04: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:6E:F9:0F:27:5B:1E:80:EA:32:E6:22:32:5E:08:E1:13:10:69 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ae:e4:49:b3:3b:c6:fe:15:cb:08:a9:60:62:da:72:6d:d6: 33:71:cc:3e:97:c4:9e:5b:47:b5:10:47:a0:87:31:52:de:87: d3:70:ec:e2:6b:13:0d:09:7c:19:0a:d4:a9:39:3b:ef:f6:d4: c7:35:04:ff:47:81:2b:8b:40:7d:e2:43:35:68:38:3b:5c:98: c5:57:ad:80:6f:ee:8f:e1:a7:e8:76:4e:b9:95:f1:0b:cb:f4: c1:6d:e7:18:f3:b3:9d:f9:ae:09:0b:2d:10:d5:d0:8f:75:f5: 7d:05:59:24:a2:1d:41:73:d7:27:0b:7b:c0:eb:a1:85:90:a9: 43:db:64:00:8c:56:51:0d:bd:4f:c4:5c:ef:a8:dd:e2:b5:78: cd:27:f8:d3:78:60:8c:60:80:59:aa:a8:f7:2b:78:df:2d:62: 85:19:9b:26:c8:10:9c:6a:7d:47:7f:6f:10:7f:24:c1:6e:2d: 88:b8:ae:9d:d9:a9:76:0b:08:4b:90:51:9f:28:11:bd:be:c6: 37:c5:ba:ba:23:34:d3:a5:10:db:db:1d:61:35:cb:d0:8a:a4: 46:3c:39:2a:53:39:bb:45:32:1e:07:13:99:45:f5:c4:33:c4: dc:7b:97:e0:92:f1:65:b7:48:4b:93:d0:83:4a:21:7d:dd:d3: 87:70:de:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC75lwOQAAKrFxviSo8Cgy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTE5MjMwMDMxWhcNMjYwOTIwMjMwMDMxWjAzMTEwLwYDVQQD EyhlYjQ3NmVmOTBmMjc1YjFlODBlYTMyZTYyMjMyNWUwOGUxMTMxMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gtk7IW6dZDG9vN8sgXwuZyJeHml VLNnPP4Vo14VXPwC2MK3Ggt/gpjgibSXd7+KeLkSmZ6wT8hgot+A5JMI3lL+eyw0 zXkXhr/HjCRHuv3PC6eWdxM3yPHS7SOtD+4OigxnvhjH78f6JcuNz+j41MK1IHlE kU5qNFMvEI0dGgzLg8or8DcvEuxKRp6v5IUD99ZDRvoF4JeEBe2w5+BMhTfAGPiO o5ql7O7qpFvxCrBWY8AZjFyisNsif+3Qb2k+rx0cE6+7285/1YnyVVk8YAzzMPfS /WoM5lZ6Pt7/AF2Lc4zkcqUyBZ221cNuR85dzT1BBRTERvjMKBVxCAQIiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtHbvkPJ1segOoy5iIyXgjhExBpMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASq7kSbM7 xv4VywipYGLacm3WM3HMPpfEnltHtRBHoIcxUt6H03Ds4msTDQl8GQrUqTk77/bU xzUE/0eBK4tAfeJDNWg4O1yYxVetgG/uj+Gn6HZOuZXxC8v0wW3nGPOznfmuCQst ENXQj3X1fQVZJKIdQXPXJwt7wOuhhZCpQ9tkAIxWUQ29T8Rc76jd4rV4zSf403hg jGCAWaqo9yt43y1ihRmbJsgQnGp9R39vEH8kwW4tiLiundmpdgsIS5BRnygRvb7G N8W6uiM006UQ29sdYTXL0IqkRjw5KlM5u0UyHgcTmUX1xDPE3HuX4JLxZbdIS5PQ g0ohfd3Th3DetQ== -----END CERTIFICATE-----Generated at Sun Sep 20 09:05:07 2026 by rpki-client