$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: FfxYeNUsd3zWStKroWiHRZzH7dX4VQhE9kyZgHOs5lo= Subject key identifier: 56:D7:D7:47:17:24:93:46:1D:22:16:F0:22:67:38:BE:79:2E:C9:85 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D3DF9019848E3CC34CEF41A7B4B7DA3FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18D9 Signing time: Mon 30 Mar 2026 09:00:21 +0000 Manifest this update: Mon 30 Mar 2026 09:00:21 +0000 Manifest next update: Tue 31 Mar 2026 09:00:21 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: CEUIfiHHIELRrwjySi+hr/Up72+x0jmMdmMDkyn55JE=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 31 Mar 2026 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3d:f9:01:98:48:e3:cc:34:ce:f4:1a:7b:4b:7d:a3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Mar 30 09:00:21 2026 GMT Not After : Mar 31 09:00:21 2026 GMT Subject: CN=56d7d747172493461d2216f0226738be792ec985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:51:81:d7:f9:5a:d7:c2:2a:00:3a:eb:3d: dd:6a:26:c9:62:f6:08:ff:a1:69:8c:19:f0:01:f0: 77:b6:48:76:77:99:66:64:b4:76:fd:e9:40:c2:59: b4:0d:a4:43:93:7c:66:46:3b:e1:d4:92:f3:34:d2: 21:f9:a1:b1:52:7b:60:c2:1c:0d:0c:df:61:9d:ad: 64:f7:d0:0b:68:d8:72:d0:87:b2:41:27:a0:f6:db: 34:06:a8:9a:3b:44:99:1b:45:58:95:35:95:30:07: b1:cd:be:8d:d9:ba:07:30:af:5e:18:f6:cd:cb:77: fb:23:68:04:19:d6:76:8c:81:08:82:18:80:85:ac: d3:0c:5d:d8:71:11:3a:ad:5a:f1:6e:bc:ed:a1:ef: b8:e1:3d:77:36:a6:dd:d2:e8:a7:10:ad:0a:db:a4: 60:1d:42:d7:5e:26:15:07:d0:0d:6c:10:8e:59:bd: 6d:01:32:e1:96:56:bd:02:8c:b0:21:4e:a6:ad:6e: 63:e6:a7:cf:c5:28:c9:3a:88:86:7f:f0:3f:8e:d0: cf:5e:ec:53:1e:b9:70:0a:95:38:31:68:20:ff:4c: e1:4e:33:08:87:58:d8:83:b5:07:f0:5b:bd:ec:35: 41:df:7a:45:49:4e:30:60:84:f2:9a:c9:4d:be:a0: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:D7:47:17:24:93:46:1D:22:16:F0:22:67:38:BE:79:2E:C9:85 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0e:84:61:39:3d:f7:58:6c:dc:1a:5b:92:30:0f:de:2f:1f: 40:76:6b:70:9f:f4:61:90:d1:a7:15:40:b9:41:a3:68:33:c6: f7:dc:40:59:eb:bd:a3:df:a6:2d:f4:af:91:21:d5:05:02:5a: 91:9c:66:88:c2:02:68:7e:fb:8c:83:b3:02:c0:3f:c4:9b:aa: 88:b0:32:b4:fb:aa:21:e6:27:34:a2:14:36:f2:b1:77:45:2d: 7d:69:d3:c8:15:d1:c4:81:6e:67:30:9c:ef:39:ba:10:6f:83: bd:d3:ca:ee:65:a2:94:65:2c:d9:5b:b2:2e:4e:0a:79:4d:27: 75:0f:ff:84:04:d5:71:0a:32:a1:d2:7b:48:3c:1e:34:19:82: 12:d2:11:fd:56:c1:4e:bb:60:20:de:33:f3:82:d7:56:ae:04: eb:c3:77:ad:aa:52:c9:3a:96:e3:28:ea:a0:48:c1:83:2c:42: 0e:7e:b2:54:4e:a4:b5:2c:6f:95:20:a6:a3:b0:dd:09:c8:32: 7f:a4:48:9d:d7:60:ca:a5:e4:ee:68:f2:07:08:45:2e:9f:cd: db:18:45:33:9a:59:aa:29:b8:17:ec:a3:80:a2:d3:cc:5f:b0: e2:81:58:4d:e0:c2:75:b3:af:73:51:3d:b8:fd:48:a8:c8:4b: 76:e4:d0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ09+QGYSOPMNM70GntLfaP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMzMwMDkwMDIxWhcNMjYwMzMxMDkwMDIxWjAzMTEwLwYDVQQD Eyg1NmQ3ZDc0NzE3MjQ5MzQ2MWQyMjE2ZjAyMjY3MzhiZTc5MmVjOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJJRgdf5WtfCKgA66z3daibJYvYI /6FpjBnwAfB3tkh2d5lmZLR2/elAwlm0DaRDk3xmRjvh1JLzNNIh+aGxUntgwhwN DN9hna1k99ALaNhy0IeyQSeg9ts0BqiaO0SZG0VYlTWVMAexzb6N2boHMK9eGPbN y3f7I2gEGdZ2jIEIghiAhazTDF3YcRE6rVrxbrztoe+44T13Nqbd0uinEK0K26Rg HULXXiYVB9ANbBCOWb1tATLhlla9AoywIU6mrW5j5qfPxSjJOoiGf/A/jtDPXuxT HrlwCpU4MWgg/0zhTjMIh1jYg7UH8Fu97DVB33pFSU4wYITymslNvqAkEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbX10cXJJNGHSIW8CJnOL55LsmFMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA6EYTk9 91hs3BpbkjAP3i8fQHZrcJ/0YZDRpxVAuUGjaDPG99xAWeu9o9+mLfSvkSHVBQJa kZxmiMICaH77jIOzAsA/xJuqiLAytPuqIeYnNKIUNvKxd0UtfWnTyBXRxIFuZzCc 7zm6EG+DvdPK7mWilGUs2VuyLk4KeU0ndQ//hATVcQoyodJ7SDweNBmCEtIR/VbB TrtgIN4z84LXVq4E68N3rapSyTqW4yjqoEjBgyxCDn6yVE6ktSxvlSCmo7DdCcgy f6RInddgyqXk7mjyBwhFLp/N2xhFM5pZqim4F+yjgKLTzF+w4oFYTeDCdbOvc1E9 uP1IqMhLduTQhQ== -----END CERTIFICATE-----Generated at Mon Mar 30 18:35:44 2026 by rpki-client