$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: hJBVLgD+AptZPRbuYZNXjHx6Y3bi2lxCDFmQH/qZlaA= Subject key identifier: D8:BE:E0:6E:03:11:0C:6B:C1:21:5B:74:66:D6:69:AA:BE:F5:CE:1C Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FED0D43D8540822E2FBB7B94B2F7AC7BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A3E Signing time: Mon 10 Aug 2026 19:01:37 +0000 Manifest this update: Mon 10 Aug 2026 19:01:37 +0000 Manifest next update: Tue 11 Aug 2026 19:01:37 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: hAZaIxFsmEqv2tk7RBQ/oFL2X8C+mkRFCQ+j8LYsxiE=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Aug 2026 14:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ed:0d:43:d8:54:08:22:e2:fb:b7:b9:4b:2f:7a:c7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 10 19:01:37 2026 GMT Not After : Aug 11 19:01:37 2026 GMT Subject: CN=d8bee06e03110c6bc1215b7466d669aabef5ce1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:01:55:60:7d:37:58:1f:ce:3d:6c:17:da: 14:b4:a4:45:a0:60:6c:57:fe:6c:84:1b:92:6f:a4: 36:63:66:1e:8d:f9:b4:c4:42:3f:73:8a:f0:e3:cf: 02:2d:0e:56:ff:49:cc:20:ed:55:d6:1e:76:23:2f: 74:d9:24:22:fc:92:0b:5e:c2:a6:6d:91:74:a9:07: e0:9a:a0:1b:20:c8:97:70:19:8f:cb:3f:a7:93:12: d9:95:14:c8:be:80:97:6b:fb:c0:b1:67:4d:1a:e5: d2:c0:15:2a:20:0c:40:02:11:64:67:74:a4:63:c9: 46:09:63:f5:8e:d6:9d:f7:e2:60:5a:61:ee:68:c6: 2b:4d:63:eb:56:14:1c:4b:10:62:fd:55:63:08:27: b7:37:3e:98:5a:19:de:73:47:11:37:7c:c5:32:e7: af:df:aa:5f:78:17:7b:c0:ce:23:30:52:29:7f:de: ab:11:26:b9:b5:6f:30:64:b0:63:d6:a0:f1:d5:e5: a8:da:f5:f2:db:85:73:65:7c:3b:43:07:b6:2f:d7: 21:1b:24:9d:4c:28:6f:b3:16:ed:0a:41:8f:c4:b6: cc:d3:ad:17:83:6e:bb:c5:e9:66:e1:76:e7:3d:93: 8f:5d:12:41:9e:0d:1a:66:b8:81:76:b3:2f:d4:03: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:E0:6E:03:11:0C:6B:C1:21:5B:74:66:D6:69:AA:BE:F5:CE:1C X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:10:ef:0e:5c:27:d6:5b:37:59:80:4e:8f:65:39:63:b5:cd: 35:86:2e:0d:fc:63:d4:a2:55:64:a1:bf:1c:20:e7:2d:ee:a5: 82:ed:58:54:11:38:35:88:0b:a1:fe:d9:36:20:cd:87:6a:32: f8:0f:1f:65:90:f6:b3:1c:f7:a2:91:5f:00:b9:28:70:6f:73: fb:4e:9a:ac:ea:9d:89:5a:c2:86:ca:4d:05:eb:9a:46:8c:a2: 38:3f:47:fd:c1:ee:eb:10:75:08:2d:10:ab:cb:ca:4b:74:5d: e2:ca:77:d2:02:a1:2d:ae:f7:09:eb:78:d5:20:7d:fb:8e:87: 3f:da:7a:6e:60:7a:c1:9b:0b:a4:13:0f:d1:e4:0e:9a:53:24: c6:8b:ee:c9:de:e3:53:d5:0b:54:f9:20:99:22:1b:f6:7e:a3: d6:a1:19:46:a5:f8:36:61:88:6c:8e:d7:a0:4f:35:a6:b6:ed: cc:da:7b:53:46:f0:b5:15:58:b7:25:f4:82:9e:6c:2b:ba:7d: 37:07:f7:36:03:ec:44:07:4b:69:35:96:2f:70:75:53:ce:56: 68:6d:d4:de:5f:ba:74:8e:18:db:9e:6c:2c:d1:40:21:7a:4d: 99:50:1f:c9:5b:41:ce:90:df:b4:22:15:e4:67:1a:6d:39:e4: 6d:48:7f:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/tDUPYVAgi4vu3uUsvese9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODEwMTkwMTM3WhcNMjYwODExMTkwMTM3WjAzMTEwLwYDVQQD EyhkOGJlZTA2ZTAzMTEwYzZiYzEyMTViNzQ2NmQ2NjlhYWJlZjVjZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOMBVWB9N1gfzj1sF9oUtKRFoGBs V/5shBuSb6Q2Y2Yejfm0xEI/c4rw488CLQ5W/0nMIO1V1h52Iy902SQi/JILXsKm bZF0qQfgmqAbIMiXcBmPyz+nkxLZlRTIvoCXa/vAsWdNGuXSwBUqIAxAAhFkZ3Sk Y8lGCWP1jtad9+JgWmHuaMYrTWPrVhQcSxBi/VVjCCe3Nz6YWhnec0cRN3zFMuev 36pfeBd7wM4jMFIpf96rESa5tW8wZLBj1qDx1eWo2vXy24VzZXw7Qwe2L9chGySd TChvsxbtCkGPxLbM060Xg267xelm4XbnPZOPXRJBng0aZriBdrMv1ANeFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi+4G4DEQxrwSFbdGbWaaq+9c4cMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxDvDlwn 1ls3WYBOj2U5Y7XNNYYuDfxj1KJVZKG/HCDnLe6lgu1YVBE4NYgLof7ZNiDNh2oy +A8fZZD2sxz3opFfALkocG9z+06arOqdiVrChspNBeuaRoyiOD9H/cHu6xB1CC0Q q8vKS3Rd4sp30gKhLa73Cet41SB9+46HP9p6bmB6wZsLpBMP0eQOmlMkxovuyd7j U9ULVPkgmSIb9n6j1qEZRqX4NmGIbI7XoE81prbtzNp7U0bwtRVYtyX0gp5sK7p9 Nwf3NgPsRAdLaTWWL3B1U85WaG3U3l+6dI4Y255sLNFAIXpNmVAfyVtBzpDftCIV 5GcabTnkbUh/AA== -----END CERTIFICATE-----Generated at Mon Aug 10 23:06:42 2026 by rpki-client