$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: TKYthIbbWDoSWP1H5T5S4bWwqqmOqHYDI3i9edoyPio= Subject key identifier: 69:5E:8D:29:60:C8:E3:24:3E:F4:6A:31:7A:A7:DA:68:4E:54:B9:11 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0D2DE8CF6D91BCDF371381E118FB3D262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1ABE Signing time: Thu 24 Sep 2026 10:03:15 +0000 Manifest this update: Thu 24 Sep 2026 10:03:15 +0000 Manifest next update: Fri 25 Sep 2026 10:03:15 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=) 4: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=) 5: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=) 6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 01NnTgzSvSd8Al0irPbBqyOCXpKTUlKc8qU6+2E2mrc=) 7: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=) 8: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 9: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 10: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 11: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 12: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=) 14: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 15: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 16: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 10:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:de:8c:f6:d9:1b:cd:f3:71:38:1e:11:8f:b3:d2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 24 10:03:15 2026 GMT Not After : Sep 25 10:03:15 2026 GMT Subject: CN=695e8d2960c8e3243ef46a317aa7da684e54b911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:8e:57:56:24:35:51:85:ef:e2:77:b6:ef: 99:51:dc:9f:a1:bb:18:10:23:19:52:45:c1:4a:8e: 4b:bf:95:74:08:db:82:72:d4:ff:af:5f:f4:ec:04: fc:77:c8:89:bc:d8:8a:d9:7f:49:29:18:21:20:f1: e5:4c:c3:88:15:f0:b4:06:47:c9:b5:b9:7d:55:09: f3:76:d9:2e:86:58:34:e4:98:c4:f6:15:fd:e3:1d: 6b:73:45:d9:b9:11:83:c7:85:17:ea:2d:72:dd:c0: 1c:8a:34:88:f0:de:60:26:77:df:74:81:cb:53:eb: 0b:92:9b:49:f3:fc:9b:f8:30:fa:62:bc:d3:05:7f: 5b:6b:ef:c9:c7:c7:51:e1:74:f1:13:d4:96:e4:da: af:a9:df:10:3f:4a:12:0d:6d:f6:8c:86:bd:13:d3: 44:e3:03:61:55:d7:5c:82:ae:00:65:23:53:dd:ec: 0b:c9:84:9c:99:9f:89:74:93:f2:74:7d:78:37:b8: 51:0e:ee:f7:49:7f:c4:79:11:30:dc:01:69:d4:2a: 06:50:e8:7b:39:ab:24:44:ce:90:da:73:2c:cc:6c: 85:aa:98:d9:26:04:b4:3d:d1:ea:db:2f:b3:48:aa: 7f:72:25:6e:5d:74:53:41:c9:9d:5b:5a:9d:f0:fc: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5E:8D:29:60:C8:E3:24:3E:F4:6A:31:7A:A7:DA:68:4E:54:B9:11 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:84:61:46:00:67:21:5b:85:42:7f:9d:4c:7a:6c:a6:dd: fc:5d:4a:f2:9b:9d:1f:bc:c4:66:f2:ea:2f:69:bd:10:fa:dd: 19:43:f6:3c:3d:ec:3b:24:2c:1b:21:ff:73:cb:75:d1:de:61: c6:71:25:5c:e8:e1:eb:c6:60:03:81:6f:25:56:74:d6:3d:ac: 6f:d0:e7:a2:4f:4c:95:e7:d8:da:73:29:c8:db:1b:33:f0:20: 47:45:30:0f:aa:b4:b1:ab:4b:5c:a7:05:5c:e6:cd:ff:37:55: c3:11:ab:95:cd:8d:f9:68:cf:67:44:39:fa:c2:b6:81:0a:86: 7c:e4:66:52:bd:50:8e:83:63:df:a8:2f:57:ee:89:b3:ef:fd: 12:1b:32:4c:ad:40:72:c6:3e:7b:20:ba:96:4e:a7:40:c2:4a: b3:47:65:a4:6b:37:dc:6d:13:f7:bf:41:36:64:bc:79:c6:f8: c6:9c:41:3e:04:e0:fa:fc:e8:29:f6:50:f6:07:67:b2:f7:4a: 3a:2c:73:ee:a2:2d:77:0e:02:ce:77:ac:b8:27:9b:34:45:5a: 80:92:94:ba:4d:69:ce:f5:0f:d7:28:0a:2a:d0:bb:69:69:4f: 04:d6:13:18:b4:44:83:f4:25:1a:3f:b5:0a:6b:67:be:98:bf: 2d:c0:99:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDS3oz22RvN83E4HhGPs9JiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTI0MTAwMzE1WhcNMjYwOTI1MTAwMzE1WjAzMTEwLwYDVQQD Eyg2OTVlOGQyOTYwYzhlMzI0M2VmNDZhMzE3YWE3ZGE2ODRlNTRiOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyWOV1YkNVGF7+J3tu+ZUdyfobsY ECMZUkXBSo5Lv5V0CNuCctT/r1/07AT8d8iJvNiK2X9JKRghIPHlTMOIFfC0BkfJ tbl9VQnzdtkuhlg05JjE9hX94x1rc0XZuRGDx4UX6i1y3cAcijSI8N5gJnffdIHL U+sLkptJ8/yb+DD6YrzTBX9ba+/Jx8dR4XTxE9SW5Nqvqd8QP0oSDW32jIa9E9NE 4wNhVddcgq4AZSNT3ewLyYScmZ+JdJPydH14N7hRDu73SX/EeREw3AFp1CoGUOh7 OaskRM6Q2nMszGyFqpjZJgS0PdHq2y+zSKp/ciVuXXRTQcmdW1qd8PwLswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlejSlgyOMkPvRqMXqn2mhOVLkRMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgWEYUYA ZyFbhUJ/nUx6bKbd/F1K8pudH7zEZvLqL2m9EPrdGUP2PD3sOyQsGyH/c8t10d5h xnElXOjh68ZgA4FvJVZ01j2sb9Dnok9MlefY2nMpyNsbM/AgR0UwD6q0satLXKcF XObN/zdVwxGrlc2N+WjPZ0Q5+sK2gQqGfORmUr1QjoNj36gvV+6Js+/9EhsyTK1A csY+eyC6lk6nQMJKs0dlpGs33G0T979BNmS8ecb4xpxBPgTg+vzoKfZQ9gdnsvdK Oixz7qItdw4CznesuCebNEVagJKUuk1pzvUP1ygKKtC7aWlPBNYTGLREg/QlGj+1 Cmtnvpi/LcCZfA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:38:09 2026 by rpki-client