$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 8d0iCpzsJBW6KpBlDHaXeoOlstlRnleCMcAv8LeOQx0= Subject key identifier: 58:E8:89:12:9D:81:9C:D9:DA:24:80:8E:3B:42:7C:11:B6:55:70:FC Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D002CD3A4BA7C6FBDE6E153496F73031B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18B9 Signing time: Wed 18 Mar 2026 09:00:30 +0000 Manifest this update: Wed 18 Mar 2026 09:00:30 +0000 Manifest next update: Thu 19 Mar 2026 09:00:30 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: hYZxhXFly94GFW9OPP5GKRFDdXLkDj3xCn6A3Kt01wY=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Mar 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:00:2c:d3:a4:ba:7c:6f:bd:e6:e1:53:49:6f:73:03:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Mar 18 09:00:30 2026 GMT Not After : Mar 19 09:00:30 2026 GMT Subject: CN=58e889129d819cd9da24808e3b427c11b65570fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:a5:ec:ef:43:48:8f:9d:f0:a7:43:e9:1f: a6:67:69:4d:c7:fb:11:f1:5e:91:be:c8:38:51:0b: b7:07:48:0b:79:c7:91:98:16:54:f1:de:46:6c:1b: 72:34:be:f0:d6:35:5e:72:ee:02:f4:93:6a:21:a0: 9f:08:80:15:21:a4:68:6e:de:d2:66:fe:1c:c5:b3: 6e:55:99:c8:16:e6:e7:a8:22:76:5e:36:97:b0:14: 9e:47:60:50:8c:a8:34:1c:c5:82:75:a4:9e:65:98: 78:66:e5:96:d8:4a:e4:7c:6b:04:54:f9:4b:cb:81: 84:f3:5d:21:5a:2a:89:59:81:2a:e4:9e:5e:70:b1: ce:29:60:ce:f4:23:d5:c8:a6:8e:d1:ed:29:51:c2: e0:8d:af:82:ec:73:4b:3e:59:49:92:eb:1e:16:bc: bf:2a:5a:7a:5c:de:69:b6:a9:02:8d:73:3a:cd:e4: 6b:ce:48:4f:b7:29:cc:a1:37:e9:50:50:2d:2f:e5: b6:f3:4f:c0:b6:5c:9d:11:49:17:d0:88:a3:9f:00: 0e:46:81:03:72:dc:78:47:e5:d5:df:19:c4:71:37: f2:80:41:18:d5:89:09:07:26:2a:9d:a8:db:fd:e2: 07:cc:47:cd:1a:c8:35:a0:96:31:1a:42:19:47:74: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E8:89:12:9D:81:9C:D9:DA:24:80:8E:3B:42:7C:11:B6:55:70:FC X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1c:6f:aa:00:06:a6:78:40:54:a0:c6:50:5e:97:f9:37:b9: aa:7c:e6:3b:83:fb:3f:67:27:38:b3:9f:bd:4d:53:18:82:b7: d9:be:1c:c2:92:55:45:ea:38:f2:de:00:61:0b:06:35:b4:bb: 6a:df:f7:11:02:49:3f:45:16:69:8a:46:fa:bc:80:b5:18:58: 11:9f:fd:35:89:a1:6d:70:ce:b2:6a:e1:ad:50:1f:c5:05:f2: 89:e6:ab:fd:d8:e6:a7:fb:b3:cf:de:2c:15:b4:3b:2f:07:89: 4e:9c:3b:6e:68:88:5f:e6:db:cc:d1:98:aa:bc:ce:21:da:bc: d8:1f:52:56:96:f6:82:21:cf:7b:68:b7:c2:b9:58:99:fa:6f: 7a:05:ad:25:97:20:cd:d6:11:6c:a2:93:5e:8b:4a:4d:da:20: 79:63:ca:68:aa:d5:60:58:3a:0f:71:65:d4:e9:cc:7e:0a:21: b0:6f:25:d6:98:5c:b8:85:d3:7c:05:8d:f0:96:c6:23:39:d0: 8f:8b:3f:2d:c5:00:cc:5d:f6:cc:c9:84:46:36:5c:a5:8f:d6: 14:35:31:15:dc:ec:15:cf:dd:a1:e8:79:ad:c1:20:8d:90:4c: b2:5a:59:be:6f:81:1b:c2:1c:0f:19:fe:3c:be:e1:48:23:64: b3:a3:51:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ALNOkunxvvebhU0lvcwMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMzE4MDkwMDMwWhcNMjYwMzE5MDkwMDMwWjAzMTEwLwYDVQQD Eyg1OGU4ODkxMjlkODE5Y2Q5ZGEyNDgwOGUzYjQyN2MxMWI2NTU3MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLCl7O9DSI+d8KdD6R+mZ2lNx/sR 8V6Rvsg4UQu3B0gLeceRmBZU8d5GbBtyNL7w1jVecu4C9JNqIaCfCIAVIaRobt7S Zv4cxbNuVZnIFubnqCJ2XjaXsBSeR2BQjKg0HMWCdaSeZZh4ZuWW2ErkfGsEVPlL y4GE810hWiqJWYEq5J5ecLHOKWDO9CPVyKaO0e0pUcLgja+C7HNLPllJkuseFry/ Klp6XN5ptqkCjXM6zeRrzkhPtynMoTfpUFAtL+W280/AtlydEUkX0IijnwAORoED ctx4R+XV3xnEcTfygEEY1YkJByYqnajb/eIHzEfNGsg1oJYxGkIZR3S1IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjoiRKdgZzZ2iSAjjtCfBG2VXD8MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihxvqgAG pnhAVKDGUF6X+Te5qnzmO4P7P2cnOLOfvU1TGIK32b4cwpJVReo48t4AYQsGNbS7 at/3EQJJP0UWaYpG+ryAtRhYEZ/9NYmhbXDOsmrhrVAfxQXyiear/djmp/uzz94s FbQ7LweJTpw7bmiIX+bbzNGYqrzOIdq82B9SVpb2giHPe2i3wrlYmfpvegWtJZcg zdYRbKKTXotKTdogeWPKaKrVYFg6D3Fl1OnMfgohsG8l1phcuIXTfAWN8JbGIznQ j4s/LcUAzF32zMmERjZcpY/WFDUxFdzsFc/doeh5rcEgjZBMslpZvm+BG8IcDxn+ PL7hSCNks6NReA== -----END CERTIFICATE-----Generated at Wed Mar 18 15:20:09 2026 by rpki-client