$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: dDnbrjSomNGhB4Rdvf+PABWRY1YHr0D9d4BnsxpdANg= Subject key identifier: 3F:A2:FA:71:0A:03:E5:4F:7C:2D:74:BB:3B:47:9A:D3:98:9E:D6:18 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D1B36E90A8765ECA8DAD5283769024B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 18C7 Signing time: Mon 23 Mar 2026 15:01:16 +0000 Manifest this update: Mon 23 Mar 2026 15:01:16 +0000 Manifest next update: Tue 24 Mar 2026 15:01:16 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 7RJuF4RUaXYPAco5gP4MqGTToaI8QP9a40tO1H3P7GA=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Mar 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:1b:36:e9:0a:87:65:ec:a8:da:d5:28:37:69:02:4b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Mar 23 15:01:16 2026 GMT Not After : Mar 24 15:01:16 2026 GMT Subject: CN=3fa2fa710a03e54f7c2d74bb3b479ad3989ed618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:3d:7e:76:66:8f:2f:01:c7:b0:d8:62:76: b5:73:4a:2b:57:14:5f:a2:81:85:43:1c:84:ee:eb: f1:cf:2a:01:72:05:36:9f:2f:e8:f9:35:cc:ea:a2: ef:ef:8d:7d:0b:ed:bf:aa:45:d4:36:d0:f1:8d:71: 1a:33:79:55:b5:02:09:c4:a7:d6:6b:a8:17:15:a6: c7:f8:a9:8a:3f:20:72:a3:eb:f3:bb:dd:cf:f2:80: 19:4d:a2:7a:71:e3:cf:09:69:3d:c8:78:4c:3d:44: 1b:1d:6c:ba:aa:7a:c6:ca:eb:7c:bd:d9:33:8f:9a: c3:69:57:2b:cd:de:9c:00:8d:f1:fa:9f:41:19:8a: 80:54:d8:81:af:fd:43:49:2f:fc:cf:6e:13:e6:90: 21:29:8a:21:d0:70:ae:8e:55:e5:a3:1c:51:d6:95: 46:df:79:1a:61:bf:71:09:41:3b:de:d2:ed:b2:21: 26:31:4f:55:82:e5:39:9b:bd:d2:23:99:b0:02:8c: 4b:ba:70:ae:a4:80:a5:35:9d:9a:7d:a8:7b:06:60: 18:b4:28:6b:82:a1:f2:9c:ad:23:a3:5f:01:d7:4c: 56:43:f6:01:47:27:f5:ce:69:ee:84:09:5c:6b:c8: 75:ba:da:e6:7d:40:3f:6e:5f:a2:7b:31:7c:58:76: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A2:FA:71:0A:03:E5:4F:7C:2D:74:BB:3B:47:9A:D3:98:9E:D6:18 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:88:0c:be:1f:85:bf:d6:12:c7:52:e8:12:9d:e7:73:d4:93: 60:45:ef:77:25:74:df:f1:f8:00:fc:fa:66:90:40:91:83:38: 1d:5b:8d:28:66:21:15:c1:9a:55:76:23:fd:6c:85:16:55:3d: df:2b:c7:33:ea:ba:31:30:50:97:f9:e3:21:19:f2:95:79:b0: 4f:1e:2f:d5:6e:ec:9d:85:bf:ff:3a:98:c1:27:b1:1d:22:33: 6d:1a:82:9c:91:42:4a:89:b3:db:09:e5:fa:cc:f1:e7:20:1f: a2:1d:60:08:0f:67:87:a9:5d:29:f6:5c:a0:d7:bd:74:9f:93: ba:5e:1e:e4:31:33:23:af:51:31:dd:6c:92:64:29:ad:e8:39: cf:99:3e:60:ee:75:27:b8:0e:e6:7f:85:eb:75:3f:b3:2d:ee: ce:b3:00:c5:34:c5:16:a7:81:aa:fe:df:98:eb:d3:75:6c:9b: c7:98:c0:c2:db:ab:fc:91:c1:58:8e:0d:1b:5a:8e:37:cc:53: b9:0f:e3:0e:83:81:2a:99:36:e7:0d:5a:f7:f5:98:64:ae:59: 5a:5a:e1:ce:a6:be:32:d5:68:83:f4:64:df:f1:dd:f3:d5:fa: 19:df:cf:38:66:2c:3e:9c:f7:41:29:62:1c:04:be:e6:6f:bd: 8c:b7:e1:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0bNukKh2XsqNrVKDdpAktZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMzIzMTUwMTE2WhcNMjYwMzI0MTUwMTE2WjAzMTEwLwYDVQQD EygzZmEyZmE3MTBhMDNlNTRmN2MyZDc0YmIzYjQ3OWFkMzk4OWVkNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjc9fnZmjy8Bx7DYYna1c0orVxRf ooGFQxyE7uvxzyoBcgU2ny/o+TXM6qLv7419C+2/qkXUNtDxjXEaM3lVtQIJxKfW a6gXFabH+KmKPyByo+vzu93P8oAZTaJ6cePPCWk9yHhMPUQbHWy6qnrGyut8vdkz j5rDaVcrzd6cAI3x+p9BGYqAVNiBr/1DSS/8z24T5pAhKYoh0HCujlXloxxR1pVG 33kaYb9xCUE73tLtsiEmMU9VguU5m73SI5mwAoxLunCupIClNZ2afah7BmAYtChr gqHynK0jo18B10xWQ/YBRyf1zmnuhAlca8h1utrmfUA/bl+iezF8WHalRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+i+nEKA+VPfC10uztHmtOYntYYMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPogMvh+F v9YSx1LoEp3nc9STYEXvdyV03/H4APz6ZpBAkYM4HVuNKGYhFcGaVXYj/WyFFlU9 3yvHM+q6MTBQl/njIRnylXmwTx4v1W7snYW//zqYwSexHSIzbRqCnJFCSomz2wnl +szx5yAfoh1gCA9nh6ldKfZcoNe9dJ+Tul4e5DEzI69RMd1skmQpreg5z5k+YO51 J7gO5n+F63U/sy3uzrMAxTTFFqeBqv7fmOvTdWybx5jAwtur/JHBWI4NG1qON8xT uQ/jDoOBKpk25w1a9/WYZK5ZWlrhzqa+MtVog/Rk3/Hd89X6Gd/POGYsPpz3QSli HAS+5m+9jLfhCA== -----END CERTIFICATE-----Generated at Mon Mar 23 23:18:18 2026 by rpki-client