$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: fSNIKFzERRe/so1hSigTwfm5QTEmMEeOUIAiavt3afs= Subject key identifier: 79:9A:F9:B3:34:A5:8D:F8:CD:E9:99:B1:3E:EB:1E:14:C5:79:CC:AF Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FE742179841641E25146D81B6AAA544D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A3B Signing time: Sun 09 Aug 2026 16:01:35 +0000 Manifest this update: Sun 09 Aug 2026 16:01:35 +0000 Manifest next update: Mon 10 Aug 2026 16:01:35 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: B3uAEZrHPDD8RploXhLHajll93oxzlUqVglhQOSzZz8=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 10 Aug 2026 11:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:e7:42:17:98:41:64:1e:25:14:6d:81:b6:aa:a5:44:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 9 16:01:35 2026 GMT Not After : Aug 10 16:01:35 2026 GMT Subject: CN=799af9b334a58df8cde999b13eeb1e14c579ccaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:16:42:44:a6:5b:8c:26:62:90:d4:d5:c8: bf:b5:4e:ec:90:fb:01:13:66:56:8b:8d:40:91:93: 4d:42:05:61:0d:91:4b:5e:7b:50:cf:a1:48:5a:b1: e2:c0:e4:7e:ad:20:9c:d9:e5:5b:17:21:87:78:7c: e7:1e:61:4d:02:2d:e1:c1:07:af:ae:ef:7b:f9:5e: f8:b9:b9:ae:3a:b9:f5:c4:73:fa:e6:f8:69:ae:c0: f4:d5:2c:8d:95:87:f7:ff:ae:ba:98:07:ee:b7:25: 8c:1a:78:39:55:60:5f:62:3d:0a:8f:2e:37:d1:2c: 1e:7c:da:7a:fb:eb:e8:7b:5b:e8:9d:bc:a4:92:95: c7:1c:af:ca:82:15:5b:b0:f9:7f:af:f4:a6:c6:52: bb:0a:f1:02:d9:97:fe:a2:34:c8:48:0c:c5:e7:c1: 7a:e9:a4:74:af:7c:bc:6b:10:51:2c:e8:f4:a7:76: 52:6e:e9:62:cf:ec:87:b4:f1:c5:cc:dd:bd:f0:7f: 28:9a:96:b9:6a:6b:fc:8d:57:62:7c:68:65:2f:df: 38:94:84:23:90:ae:bd:9c:0d:94:53:9b:e5:d4:c0: b3:fa:0b:11:78:c6:f1:7f:b2:ae:55:dc:cc:2e:52: 25:f6:a7:2b:7d:e4:ad:0c:99:a3:d2:c7:2f:ee:c8: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:F9:B3:34:A5:8D:F8:CD:E9:99:B1:3E:EB:1E:14:C5:79:CC:AF X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:10:57:34:8e:3d:c7:f5:de:ae:92:0e:1e:fb:eb:43:df: 9a:50:e2:1c:47:01:df:b8:cd:16:93:65:2a:cb:33:d8:3e:90: fb:5e:aa:74:cf:8d:d4:39:e4:a4:fe:15:6d:9d:7f:20:4e:ca: 99:8f:44:cc:43:6f:24:b4:81:e0:af:1c:3d:31:32:29:35:b8: 48:88:5a:c0:1a:2b:de:10:ef:7f:77:1c:0b:52:98:12:06:41: 2f:1e:d8:b6:93:05:0f:06:c0:96:10:2f:73:fc:88:31:bd:47: 84:c2:3f:4e:7d:96:4f:10:f5:31:27:0e:63:2a:fb:93:46:2a: 4d:32:e4:8f:11:ea:79:51:a6:90:1e:49:c1:a7:ed:67:ce:8d: d2:5f:c9:3b:6c:7c:1d:1a:aa:1f:ca:6b:89:65:d4:bb:34:49: ae:88:1b:59:e1:33:dd:cc:5e:d1:c3:3c:9b:ca:cd:c2:87:5c: 96:6e:b2:f9:d6:af:56:3e:08:90:03:ad:85:ae:e8:86:6d:ba: 6e:43:ec:1c:d4:78:d2:d4:dc:27:d7:70:5e:79:d7:f3:b6:7b: a9:7b:58:20:69:b6:51:80:c3:3b:84:dd:dd:55:60:68:f4:d2: 95:95:e8:ab:42:20:a9:e7:c6:08:38:43:6a:21:3c:a7:4a:2c: b3:ba:38:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/nQheYQWQeJRRtgbaqpUTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODA5MTYwMTM1WhcNMjYwODEwMTYwMTM1WjAzMTEwLwYDVQQD Eyg3OTlhZjliMzM0YTU4ZGY4Y2RlOTk5YjEzZWViMWUxNGM1NzljY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tIWQkSmW4wmYpDU1ci/tU7skPsB E2ZWi41AkZNNQgVhDZFLXntQz6FIWrHiwOR+rSCc2eVbFyGHeHznHmFNAi3hwQev ru97+V74ubmuOrn1xHP65vhprsD01SyNlYf3/666mAfutyWMGng5VWBfYj0Kjy43 0SwefNp6++voe1vonbykkpXHHK/KghVbsPl/r/SmxlK7CvEC2Zf+ojTISAzF58F6 6aR0r3y8axBRLOj0p3ZSbuliz+yHtPHFzN298H8ompa5amv8jVdifGhlL984lIQj kK69nA2UU5vl1MCz+gsReMbxf7KuVdzMLlIl9qcrfeStDJmj0scv7sg4NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHma+bM0pY34zemZsT7rHhTFecyvMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiAQVzSO Pcf13q6SDh7760PfmlDiHEcB37jNFpNlKssz2D6Q+16qdM+N1DnkpP4VbZ1/IE7K mY9EzENvJLSB4K8cPTEyKTW4SIhawBor3hDvf3ccC1KYEgZBLx7YtpMFDwbAlhAv c/yIMb1HhMI/Tn2WTxD1MScOYyr7k0YqTTLkjxHqeVGmkB5JwaftZ86N0l/JO2x8 HRqqH8priWXUuzRJrogbWeEz3cxe0cM8m8rNwodclm6y+davVj4IkAOtha7ohm26 bkPsHNR40tTcJ9dwXnnX87Z7qXtYIGm2UYDDO4Td3VVgaPTSlZXoq0IgqefGCDhD aiE8p0oss7o4Dw== -----END CERTIFICATE-----Generated at Sun Aug 9 20:58:08 2026 by rpki-client