$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 9kytNYUzGuJkuIGpzJE8KSD1RRvLCeAjdUkzubfaUXE= Subject key identifier: CD:44:F5:17:88:3A:1E:3B:32:77:DB:6B:E4:A3:DE:76:87:A8:06:2B Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D45B340DF5224D0F74D20A307F812BDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18DD Signing time: Tue 31 Mar 2026 21:01:08 +0000 Manifest this update: Tue 31 Mar 2026 21:01:08 +0000 Manifest next update: Wed 01 Apr 2026 21:01:08 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: jkhRlEv5nDbRAAbApbbtxperJPwd9kKMFcU9ZstlOWY=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Apr 2026 14:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:45:b3:40:df:52:24:d0:f7:4d:20:a3:07:f8:12:bd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Mar 31 21:01:08 2026 GMT Not After : Apr 1 21:01:08 2026 GMT Subject: CN=cd44f517883a1e3b3277db6be4a3de7687a8062b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:94:a0:73:88:5e:38:17:45:ed:72:62:3e: 2a:e7:32:68:d4:79:12:95:54:88:60:6c:2f:c5:88: 70:16:c8:9d:09:9a:15:ae:eb:89:e5:71:be:46:7e: 6b:54:58:bb:6d:86:29:5e:ad:d8:e0:33:51:f4:5e: a2:9b:60:b4:c7:a8:83:54:c5:70:cf:8c:f6:c4:05: e6:47:48:6a:88:ff:a3:06:f4:dd:62:7d:c5:2d:a0: 76:26:d7:61:9f:b5:9d:eb:89:65:a6:eb:05:f5:1c: a1:0f:57:e9:e1:bf:c6:e9:2c:ed:0c:9f:41:3c:22: e7:87:4d:71:6c:f0:96:dd:97:c1:11:ba:09:10:69: dd:38:69:f1:7b:22:4a:4d:b2:8b:7c:e4:26:30:b2: 40:ee:6e:04:6e:20:ee:da:fd:9c:7d:fc:03:b5:aa: e9:75:14:45:73:c4:29:fa:b1:da:82:9d:a8:c2:29: 43:de:02:1e:a3:71:28:5d:04:45:92:d7:0f:57:5b: 19:4e:5a:34:17:1c:5b:66:21:05:6e:7f:ef:0d:aa: 1f:fd:46:73:49:f8:fd:76:87:9a:57:f9:f5:0c:ff: d0:db:d1:a4:58:ee:3e:15:f1:c9:d7:27:66:2a:a4: d9:b5:1a:53:04:fa:cb:64:54:c3:c2:72:cb:c7:ab: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:44:F5:17:88:3A:1E:3B:32:77:DB:6B:E4:A3:DE:76:87:A8:06:2B X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:6a:1c:81:34:2b:8e:7b:27:d1:61:8d:ef:c4:ab:ee:a4: 44:df:29:60:34:ef:54:f1:6a:8d:57:2c:80:9a:b4:5f:0c:89: 8b:16:ed:65:5f:b1:57:c9:ec:66:e7:0c:7c:43:5f:f5:3a:bc: 64:5a:a3:38:10:1f:5f:13:a2:27:42:f4:db:c8:77:3d:05:92: b5:e3:97:29:aa:81:56:02:72:50:d8:43:a1:44:5b:5b:41:cb: 4b:e8:29:ee:35:52:65:2a:5b:f4:92:13:f4:c2:53:05:53:c9: aa:78:07:5e:51:e9:f3:09:24:ac:0c:2c:fa:97:0c:46:af:41: fc:41:85:fa:6d:8b:ab:0d:b3:44:7b:be:fb:5f:f8:7e:3a:b6: c3:5a:8c:b7:09:3b:1a:96:97:13:9b:37:9e:99:0d:28:df:ce: 79:25:15:d2:bc:59:15:1e:9a:2a:76:5d:8e:85:5f:b9:2b:0a: bd:cf:57:d5:34:ec:cc:55:5f:8d:45:39:f4:a2:e0:3a:49:13: 63:a7:1c:4e:22:fb:9f:9c:ad:17:26:d5:72:68:17:a4:fd:00: 55:7b:7e:d2:5e:37:a8:4c:04:3f:47:42:f3:5d:ac:02:65:43: 0c:8f:f5:79:eb:fb:d3:67:49:be:38:94:62:e1:64:af:56:63: 8a:1e:32:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1Fs0DfUiTQ900gowf4Er2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMzMxMjEwMTA4WhcNMjYwNDAxMjEwMTA4WjAzMTEwLwYDVQQD EyhjZDQ0ZjUxNzg4M2ExZTNiMzI3N2RiNmJlNGEzZGU3Njg3YTgwNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw72UoHOIXjgXRe1yYj4q5zJo1HkS lVSIYGwvxYhwFsidCZoVruuJ5XG+Rn5rVFi7bYYpXq3Y4DNR9F6im2C0x6iDVMVw z4z2xAXmR0hqiP+jBvTdYn3FLaB2Jtdhn7Wd64llpusF9RyhD1fp4b/G6SztDJ9B PCLnh01xbPCW3ZfBEboJEGndOGnxeyJKTbKLfOQmMLJA7m4EbiDu2v2cffwDtarp dRRFc8Qp+rHagp2owilD3gIeo3EoXQRFktcPV1sZTlo0FxxbZiEFbn/vDaof/UZz Sfj9doeaV/n1DP/Q29GkWO4+FfHJ1ydmKqTZtRpTBPrLZFTDwnLLx6vlOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1E9ReIOh47Mnfba+Sj3naHqAYrMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAdqHIE0 K457J9Fhje/Eq+6kRN8pYDTvVPFqjVcsgJq0XwyJixbtZV+xV8nsZucMfENf9Tq8 ZFqjOBAfXxOiJ0L028h3PQWSteOXKaqBVgJyUNhDoURbW0HLS+gp7jVSZSpb9JIT 9MJTBVPJqngHXlHp8wkkrAws+pcMRq9B/EGF+m2Lqw2zRHu++1/4fjq2w1qMtwk7 GpaXE5s3npkNKN/OeSUV0rxZFR6aKnZdjoVfuSsKvc9X1TTszFVfjUU59KLgOkkT Y6ccTiL7n5ytFybVcmgXpP0AVXt+0l43qEwEP0dC812sAmVDDI/1eev702dJvjiU YuFkr1Zjih4yeA== -----END CERTIFICATE-----Generated at Wed Apr 1 00:27:07 2026 by rpki-client