$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 4p89AdP8ZPju8X7xdUQuIIofJjvyUcmwd0n9TiN4HDo= Subject key identifier: 24:BA:5B:CD:63:5D:64:74:2A:08:B1:5F:D0:90:5E:AA:17:30:70:D6 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019D98BD532CC4B76F498F24A0C995562919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1908 Signing time: Fri 17 Apr 2026 00:00:37 +0000 Manifest this update: Fri 17 Apr 2026 00:00:37 +0000 Manifest next update: Sat 18 Apr 2026 00:00:37 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: bHtus/msCnv3/f1wTnavQqkFNLzb0cRNGDhx/FF0PeI=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:53:2c:c4:b7:6f:49:8f:24:a0:c9:95:56:29:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Apr 17 00:00:37 2026 GMT Not After : Apr 18 00:00:37 2026 GMT Subject: CN=24ba5bcd635d64742a08b15fd0905eaa173070d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:5c:99:1f:ba:95:fd:32:65:a8:30:2a:29: 70:c3:89:7a:7b:95:3a:44:bd:15:16:cd:46:42:e3: d6:d3:03:43:3c:31:c1:8b:09:5d:f5:51:49:cd:c0: 86:68:5e:9f:33:b9:26:1f:b6:08:8f:2c:4e:69:04: 0a:df:26:24:d1:35:cd:65:5c:18:cb:98:98:b0:9c: 28:ec:27:77:cd:0b:2a:8e:d7:a4:db:e0:90:b4:e5: 4a:15:bb:0f:d6:ac:10:d5:58:16:19:27:b5:26:9c: ef:75:86:7a:05:4b:2a:5e:27:55:a2:e7:d7:0c:73: ff:25:d7:22:87:04:20:1c:33:ab:b3:70:51:0c:a0: 8d:85:21:06:76:5f:0e:12:09:01:d7:c2:2f:d0:96: e4:5e:e7:66:2a:53:83:b4:32:8c:1e:38:6a:b4:6b: c7:17:41:b1:6c:1a:21:98:fc:51:63:99:67:d1:fc: 2c:e9:c6:f2:5b:16:6a:24:1e:8b:ae:76:15:bb:bb: 26:1f:65:80:72:cf:98:88:26:15:e5:37:cf:bb:f6: b8:67:e8:8a:b7:e1:2a:05:64:88:2b:e8:58:39:b8: ea:c2:62:b9:87:9e:32:b6:4c:9f:f0:04:ec:c8:a8: 31:43:c9:c5:88:45:d0:3a:dd:44:26:1e:c4:0e:91: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:5B:CD:63:5D:64:74:2A:08:B1:5F:D0:90:5E:AA:17:30:70:D6 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:36:5b:50:be:02:8b:be:2d:42:b5:b8:76:ee:95:8d:e4:54: ef:f7:ee:5b:17:4c:bf:1e:66:70:49:1c:bf:6d:b8:17:e9:7d: bf:02:6c:02:f1:c8:af:c0:b8:f2:cd:9e:80:9f:3d:01:d2:7d: a7:b8:20:2b:83:44:e5:c0:5f:44:96:bc:d7:a7:9c:03:46:82: 3a:47:09:fd:c3:44:23:2a:0b:a5:9f:63:4c:85:62:75:63:f4: 29:f5:50:3b:ce:f1:32:d3:68:b3:ef:20:49:ba:ff:b1:8f:ec: 99:1e:6f:54:a9:4d:49:d7:20:d4:22:65:6d:55:79:bc:b6:28: 2d:0e:2b:b3:2c:60:f8:75:28:de:13:c4:86:6c:3a:20:5a:bf: 8d:a9:9f:70:5d:c9:30:86:cc:c5:9f:5d:fa:74:63:ad:78:34: 9f:c2:38:0b:70:1f:b3:e9:db:98:14:74:4b:bd:f7:82:ad:30: 22:76:22:5d:7b:d4:72:e8:92:62:4c:d7:6e:97:e4:ed:23:4b: e7:8e:02:59:45:b0:1a:ff:e5:7e:d7:c2:1c:82:1e:81:6b:80: 2d:48:69:f8:e1:46:e4:82:6a:16:e2:6d:a2:bc:93:82:37:ef: 2e:59:5d:e4:0f:47:fc:54:3c:68:7c:4a:2e:b5:9e:12:2f:32: ee:bb:75:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YvVMsxLdvSY8koMmVVikZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNDE3MDAwMDM3WhcNMjYwNDE4MDAwMDM3WjAzMTEwLwYDVQQD EygyNGJhNWJjZDYzNWQ2NDc0MmEwOGIxNWZkMDkwNWVhYTE3MzA3MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3lcmR+6lf0yZagwKilww4l6e5U6 RL0VFs1GQuPW0wNDPDHBiwld9VFJzcCGaF6fM7kmH7YIjyxOaQQK3yYk0TXNZVwY y5iYsJwo7Cd3zQsqjtek2+CQtOVKFbsP1qwQ1VgWGSe1JpzvdYZ6BUsqXidVoufX DHP/JdcihwQgHDOrs3BRDKCNhSEGdl8OEgkB18Iv0JbkXudmKlODtDKMHjhqtGvH F0GxbBohmPxRY5ln0fws6cbyWxZqJB6LrnYVu7smH2WAcs+YiCYV5TfPu/a4Z+iK t+EqBWSIK+hYObjqwmK5h54ytkyf8ATsyKgxQ8nFiEXQOt1EJh7EDpHhFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS6W81jXWR0KgixX9CQXqoXMHDWMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjZbUL4C i74tQrW4du6VjeRU7/fuWxdMvx5mcEkcv224F+l9vwJsAvHIr8C48s2egJ89AdJ9 p7ggK4NE5cBfRJa816ecA0aCOkcJ/cNEIyoLpZ9jTIVidWP0KfVQO87xMtNos+8g Sbr/sY/smR5vVKlNSdcg1CJlbVV5vLYoLQ4rsyxg+HUo3hPEhmw6IFq/jamfcF3J MIbMxZ9d+nRjrXg0n8I4C3Afs+nbmBR0S733gq0wInYiXXvUcuiSYkzXbpfk7SNL 544CWUWwGv/lftfCHIIegWuALUhp+OFG5IJqFuJtoryTgjfvLlld5A9H/FQ8aHxK LrWeEi8y7rt1wg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:38:22 2026 by rpki-client