$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: LKQ8+CZhHqa1GXDNk+2bHZdNKdBYKr00gohfRPCTRJY= Subject key identifier: DF:CC:2C:C6:08:ED:BF:FE:80:5E:6E:35:A9:8A:C0:69:D9:01:0A:BC Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0CF254D36103BA33C69E70B703C786429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1ABC Signing time: Wed 23 Sep 2026 16:42:03 +0000 Manifest this update: Wed 23 Sep 2026 16:42:03 +0000 Manifest next update: Thu 24 Sep 2026 16:42:03 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=) 4: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=) 5: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=) 6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: hVyVIoEbDAgSPlcTltMWJNNZAUrxUBzsIOSJTOcc83s=) 7: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=) 8: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 9: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 10: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 11: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 12: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=) 14: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 15: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 16: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:25:4d:36:10:3b:a3:3c:69:e7:0b:70:3c:78:64:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 23 16:42:03 2026 GMT Not After : Sep 24 16:42:03 2026 GMT Subject: CN=dfcc2cc608edbffe805e6e35a98ac069d9010abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:3d:35:1e:15:15:68:ef:72:02:d0:86:59: be:80:49:f1:6a:d4:1c:12:e2:dc:6c:b9:36:33:82: 45:42:a6:45:ff:e7:41:4d:b8:ee:c2:cc:ad:11:4b: d7:cb:12:db:1d:df:83:c3:e3:f2:39:3f:79:48:fc: 95:00:05:de:32:35:64:52:19:a6:72:72:e1:d5:f8: 3a:99:70:8e:82:6c:d9:72:81:d2:a9:69:3f:66:58: 57:e9:db:93:f6:36:e6:f2:e1:0b:06:a7:31:48:c1: f6:22:1b:62:ae:59:8d:40:92:b7:be:39:0d:3d:ff: 65:88:a1:c4:f0:33:14:ae:16:b0:6f:ac:f8:4d:f0: 82:8e:bf:27:66:a0:57:25:2e:77:4b:64:e5:97:a3: ea:7a:b7:3f:75:bc:6b:ec:ac:aa:30:25:f9:e2:c9: 60:b4:f9:a0:c5:d5:ab:6d:a6:d6:c9:0c:64:8c:dd: 90:f3:68:e6:10:6d:8e:30:45:5b:42:0d:bc:8a:d3: f9:c6:a1:9e:bf:ae:86:30:67:eb:18:44:a5:6f:c4: 25:09:92:d6:43:6e:d9:1d:c6:3c:27:c5:fa:ef:a5: 50:50:ca:bb:d5:90:c4:f8:a8:36:24:dc:d9:c0:eb: fa:e9:a6:ab:5c:f3:bf:89:4e:54:3b:25:67:c3:46: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CC:2C:C6:08:ED:BF:FE:80:5E:6E:35:A9:8A:C0:69:D9:01:0A:BC X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d9:04:83:5e:93:8f:87:4a:37:32:e3:5c:38:f4:cf:5d:3b: ab:48:1c:1e:65:fb:4d:97:c6:58:bb:3b:52:1f:ad:d3:56:81: 8a:21:13:75:eb:6f:e5:e8:ed:69:ff:ad:a4:34:40:4d:8a:9d: d0:a9:9e:40:1d:f6:2b:fd:94:c6:21:ff:91:ae:50:64:11:ba: 30:72:fd:3d:d6:1b:d9:89:5a:21:8c:58:d7:08:54:c2:57:10: 7b:b2:95:a3:64:91:4c:71:de:1c:1b:3e:05:a0:bf:99:03:07: 27:fc:9b:2c:67:e8:48:b8:f2:58:7e:47:88:db:eb:a8:77:55: bf:90:8a:55:d7:b9:ef:0a:86:8c:94:81:19:c0:c4:de:6a:a1: df:fe:dc:c9:91:19:6d:e7:cf:af:35:3c:ae:1b:3b:b6:3e:d1: e7:a8:48:bc:32:e9:b7:5b:ac:01:61:8c:ac:10:dc:24:5d:7f: 61:ca:26:d0:54:9d:5e:64:f0:29:99:dc:e5:be:bb:c9:4d:1b: 23:60:75:9d:64:a8:f3:3b:5a:74:d5:fb:79:b1:0f:5b:3d:fb: d7:47:08:ce:09:d8:bc:27:af:4a:82:51:8a:e6:ca:7f:bd:92: 36:ba:72:b8:6b:30:f5:82:5e:e1:aa:ce:ad:b2:17:10:69:e9: cc:7b:af:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPJU02EDujPGnnC3A8eGQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTIzMTY0MjAzWhcNMjYwOTI0MTY0MjAzWjAzMTEwLwYDVQQD EyhkZmNjMmNjNjA4ZWRiZmZlODA1ZTZlMzVhOThhYzA2OWQ5MDEwYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqU9NR4VFWjvcgLQhlm+gEnxatQc EuLcbLk2M4JFQqZF/+dBTbjuwsytEUvXyxLbHd+Dw+PyOT95SPyVAAXeMjVkUhmm cnLh1fg6mXCOgmzZcoHSqWk/ZlhX6duT9jbm8uELBqcxSMH2IhtirlmNQJK3vjkN Pf9liKHE8DMUrhawb6z4TfCCjr8nZqBXJS53S2Tll6Pqerc/dbxr7KyqMCX54slg tPmgxdWrbabWyQxkjN2Q82jmEG2OMEVbQg28itP5xqGev66GMGfrGESlb8QlCZLW Q27ZHcY8J8X676VQUMq71ZDE+Kg2JNzZwOv66aarXPO/iU5UOyVnw0aKBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/MLMYI7b/+gF5uNamKwGnZAQq8MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9kEg16T j4dKNzLjXDj0z107q0gcHmX7TZfGWLs7Uh+t01aBiiETdetv5ejtaf+tpDRATYqd 0KmeQB32K/2UxiH/ka5QZBG6MHL9PdYb2YlaIYxY1whUwlcQe7KVo2SRTHHeHBs+ BaC/mQMHJ/ybLGfoSLjyWH5HiNvrqHdVv5CKVde57wqGjJSBGcDE3mqh3/7cyZEZ befPrzU8rhs7tj7R56hIvDLpt1usAWGMrBDcJF1/Ycom0FSdXmTwKZnc5b67yU0b I2B1nWSo8ztadNX7ebEPWz3710cIzgnYvCevSoJRiubKf72SNrpyuGsw9YJe4arO rbIXEGnpzHuvFA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:28:20 2026 by rpki-client