$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 8doSenRNJQcj3vMuIiXwED1Cs3vRZu9Sfo/yBvua1Yw= Subject key identifier: 8F:20:C1:CE:D2:75:7B:49:35:F4:16:61:0A:A1:ED:11:F7:6E:C5:1B Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019F2691426A99A2DB01A369A6161FBC8AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 19D6 Signing time: Fri 03 Jul 2026 06:01:21 +0000 Manifest this update: Fri 03 Jul 2026 06:01:21 +0000 Manifest next update: Sat 04 Jul 2026 06:01:21 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: YFJYwDeV4q4z2McV/Li1Q4uzOqJOW8epIl5bUryVOUA=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Jul 2026 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:26:91:42:6a:99:a2:db:01:a3:69:a6:16:1f:bc:8a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jul 3 06:01:21 2026 GMT Not After : Jul 4 06:01:21 2026 GMT Subject: CN=8f20c1ced2757b4935f416610aa1ed11f76ec51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:22:4e:75:38:ee:8a:97:9e:a4:d7:23:fd: a0:4e:ff:ec:e6:0d:e5:9c:27:e5:92:50:d3:f5:b3: 30:b9:5f:6d:18:4c:54:13:89:fe:33:2a:13:8b:bc: bb:a1:0a:95:48:07:1e:cf:40:9e:d9:69:81:b3:80: c6:d9:80:fd:f4:a5:2e:e4:cf:31:a2:c2:e2:a2:3a: bd:a9:85:8f:0a:68:c6:be:d5:c8:59:fa:08:c7:4e: a2:01:ce:a9:b7:2d:ab:47:42:63:ce:00:86:6e:0c: ea:8b:da:1b:4c:45:34:96:85:5c:10:01:22:e6:f4: 89:53:27:a7:a2:45:4c:85:d1:d9:70:16:68:a4:4e: 38:4d:b0:e3:96:5c:cf:46:d2:c8:63:f7:70:57:f9: f9:ef:f6:35:f0:83:60:a4:45:9e:80:be:bc:10:6d: 7f:ad:0b:76:30:fa:c5:09:76:0a:5a:f9:a7:44:ce: b9:86:d7:60:5b:43:cf:99:82:36:bf:f6:1b:28:02: 8a:7d:68:7e:df:49:c9:d3:84:6d:ab:09:9a:53:8a: e3:95:54:65:20:17:0f:8f:22:a0:b9:7d:7a:5f:33: d0:00:e8:44:e9:ea:af:b7:46:52:ee:09:d3:d4:bf: b0:7e:05:a4:b9:2e:1a:51:42:63:f4:80:06:58:fb: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:C1:CE:D2:75:7B:49:35:F4:16:61:0A:A1:ED:11:F7:6E:C5:1B X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:46:0d:5e:4e:02:ca:6f:bd:b4:6b:d0:b7:ae:f7:02:3f:99: 1a:08:e9:44:38:e8:2e:82:29:3b:4a:39:3c:2c:e3:e4:35:b2: f0:71:e3:62:21:a3:68:63:64:78:64:60:81:6d:28:db:e6:1e: 9b:be:a0:b1:2f:33:5d:01:69:8b:13:ba:af:c5:c5:ce:a9:b1: 9f:18:94:90:30:06:41:4d:3a:fb:64:c4:ce:13:bd:88:68:b7: 1b:fd:77:14:1c:13:ed:fb:19:b1:ad:de:91:e3:2b:c6:d8:6a: 7a:4a:95:49:24:15:20:a9:b3:8d:c1:f9:f8:e2:33:83:6e:be: f8:5c:e2:34:64:2d:3c:f2:42:77:c9:be:5d:75:94:a8:d8:21: 39:63:79:76:3b:60:69:b4:b3:8c:a3:fb:9f:2e:33:bd:90:ce: 06:77:9b:26:8f:5b:e3:c0:72:30:59:80:26:19:ba:63:c8:af: 3f:f3:38:ef:2f:03:86:c4:1d:72:5e:6a:a0:bb:67:e2:70:f8: b0:e0:a9:7a:b6:55:e9:15:b2:f5:47:17:34:00:e6:cc:df:35: 2e:ec:ab:57:0c:0d:86:a9:e2:09:9e:80:2c:bd:af:85:f0:dc: 8b:a3:f1:ab:77:96:3c:d9:9e:81:83:49:3d:6a:44:f5:9a:5b: 92:32:50:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8mkUJqmaLbAaNpphYfvIryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNzAzMDYwMTIxWhcNMjYwNzA0MDYwMTIxWjAzMTEwLwYDVQQD Eyg4ZjIwYzFjZWQyNzU3YjQ5MzVmNDE2NjEwYWExZWQxMWY3NmVjNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvEiTnU47oqXnqTXI/2gTv/s5g3l nCflklDT9bMwuV9tGExUE4n+MyoTi7y7oQqVSAcez0Ce2WmBs4DG2YD99KUu5M8x osLiojq9qYWPCmjGvtXIWfoIx06iAc6pty2rR0JjzgCGbgzqi9obTEU0loVcEAEi 5vSJUyenokVMhdHZcBZopE44TbDjllzPRtLIY/dwV/n57/Y18INgpEWegL68EG1/ rQt2MPrFCXYKWvmnRM65htdgW0PPmYI2v/YbKAKKfWh+30nJ04RtqwmaU4rjlVRl IBcPjyKguX16XzPQAOhE6eqvt0ZS7gnT1L+wfgWkuS4aUUJj9IAGWPs5PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8gwc7SdXtJNfQWYQqh7RH3bsUbMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikYNXk4C ym+9tGvQt673Aj+ZGgjpRDjoLoIpO0o5PCzj5DWy8HHjYiGjaGNkeGRggW0o2+Ye m76gsS8zXQFpixO6r8XFzqmxnxiUkDAGQU06+2TEzhO9iGi3G/13FBwT7fsZsa3e keMrxthqekqVSSQVIKmzjcH5+OIzg26++FziNGQtPPJCd8m+XXWUqNghOWN5djtg abSzjKP7ny4zvZDOBnebJo9b48ByMFmAJhm6Y8ivP/M47y8DhsQdcl5qoLtn4nD4 sOCperZV6RWy9UcXNADmzN81LuyrVwwNhqniCZ6ALL2vhfDci6Pxq3eWPNmegYNJ PWpE9ZpbkjJQOA== -----END CERTIFICATE-----Generated at Fri Jul 3 11:04:10 2026 by rpki-client