$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: GUgypKQQVhUi6Cew421/f0bbcfQot5o1VgfOE1Cc6gY= Subject key identifier: 4F:A0:92:BC:F1:E9:57:9B:67:50:5F:A0:1D:9D:53:E2:61:B2:D3:03 Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 019F6EAB351396FD4AF486C11EB99ADA5B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: 2E Signing time: Fri 17 Jul 2026 06:02:21 +0000 Manifest this update: Fri 17 Jul 2026 06:02:21 +0000 Manifest next update: Sat 18 Jul 2026 06:02:21 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: 6ZxmMmk3J9acjaGmq1oHt+Rq2/3JvPnELZtQve63VrI=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 06:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:6e:ab:35:13:96:fd:4a:f4:86:c1:1e:b9:9a:da:5b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Jul 17 06:02:21 2026 GMT Not After : Jul 18 06:02:21 2026 GMT Subject: CN=4fa092bcf1e9579b67505fa01d9d53e261b2d303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:79:b6:5b:f1:9f:29:bd:46:a4:52:a6:8e: 91:f0:76:e6:c9:a4:3d:eb:82:11:28:77:01:fe:8a: cc:0b:79:b8:ca:3f:d9:c8:28:52:f8:91:ed:1b:5f: 7f:18:16:c2:da:d0:43:f0:4c:62:be:51:92:a9:94: 52:91:54:53:62:2f:97:f9:69:8a:04:dc:0e:eb:6a: 0e:a1:b1:f2:05:16:95:f5:b4:df:ed:ae:1e:65:77: 73:6a:dc:de:14:8b:02:ff:4e:5d:b5:cd:82:3e:dd: 13:0d:4b:63:e9:fa:f2:e9:fa:6c:f2:6a:b2:fd:22: d0:01:97:3b:a7:b7:6f:84:45:e7:73:a4:e4:24:41: 1c:b6:80:93:50:d1:1d:5e:3d:fb:81:b1:1e:9c:58: 83:5f:36:9c:02:bd:fd:c5:3b:69:1d:1a:74:f1:eb: 56:b9:9a:42:92:8a:9c:dc:3a:7f:fd:8f:d5:86:29: 3c:56:07:ff:92:61:e6:1b:e4:7d:bc:c7:32:8f:8b: 3e:2a:3c:64:01:be:58:0d:b9:46:a3:ae:84:f8:d9: fc:dc:cc:50:35:cd:4b:3f:cb:96:fe:af:f6:e8:49: 2d:25:c6:b8:1d:d8:63:1f:c8:2d:87:68:4c:94:15: c4:e5:43:36:3a:3b:05:ac:ae:5e:15:82:ae:8b:f6: 48:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:92:BC:F1:E9:57:9B:67:50:5F:A0:1D:9D:53:E2:61:B2:D3:03 X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f5:eb:4c:f1:4d:fa:9f:23:5a:b7:13:9a:97:10:75:91:d6: 50:8c:55:8c:99:7d:84:c7:e3:d7:27:df:fc:aa:09:bf:54:06: 1f:3d:59:e3:4a:e9:33:4a:88:f0:6b:58:34:68:64:05:fe:3e: 0f:de:76:ff:ab:8f:7f:c2:5d:79:12:01:20:41:da:bf:60:ed: 27:04:0a:f9:1e:03:ec:94:6c:cd:eb:10:da:fd:4a:1c:0e:ea: a2:d9:af:33:7f:95:b0:b7:fb:5c:58:8b:9c:97:f6:2a:10:23: 87:04:03:9b:39:62:3e:c6:80:5c:41:89:4b:d0:71:f6:ef:7f: a8:fd:62:b2:27:62:25:da:07:63:c2:98:fb:f4:d1:72:a5:61: e6:2d:d8:fe:78:a7:42:c6:5d:bd:43:f4:29:41:08:f5:fe:97: 3a:27:47:3f:59:98:8e:de:13:fe:0f:c1:0b:95:5d:e3:6c:cf: 3d:64:ed:36:6d:24:e3:76:76:cb:bf:28:9b:20:3d:4d:34:86: 3a:ce:d6:1e:a6:b0:f3:b5:92:03:0c:0f:99:aa:71:63:29:1e: 0e:45:ec:b9:cd:48:01:89:be:9a:d3:c8:9e:cf:db:28:66:71: 03:1c:cc:63:a2:18:18:62:b3:b9:31:98:4b:60:b6:df:24:c8: 8b:42:0e:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9uqzUTlv1K9IbBHrma2lt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYwNzE3MDYwMjIxWhcNMjYwNzE4MDYwMjIxWjAzMTEwLwYDVQQD Eyg0ZmEwOTJiY2YxZTk1NzliNjc1MDVmYTAxZDlkNTNlMjYxYjJkMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdB5tlvxnym9RqRSpo6R8HbmyaQ9 64IRKHcB/orMC3m4yj/ZyChS+JHtG19/GBbC2tBD8ExivlGSqZRSkVRTYi+X+WmK BNwO62oOobHyBRaV9bTf7a4eZXdzatzeFIsC/05dtc2CPt0TDUtj6fry6fps8mqy /SLQAZc7p7dvhEXnc6TkJEEctoCTUNEdXj37gbEenFiDXzacAr39xTtpHRp08etW uZpCkoqc3Dp//Y/Vhik8Vgf/kmHmG+R9vMcyj4s+KjxkAb5YDblGo66E+Nn83MxQ Nc1LP8uW/q/26EktJca4HdhjH8gth2hMlBXE5UM2OjsFrK5eFYKui/ZISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+gkrzx6VebZ1BfoB2dU+JhstMDMB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvXrTPFN +p8jWrcTmpcQdZHWUIxVjJl9hMfj1yff/KoJv1QGHz1Z40rpM0qI8GtYNGhkBf4+ D952/6uPf8JdeRIBIEHav2DtJwQK+R4D7JRszesQ2v1KHA7qotmvM3+VsLf7XFiL nJf2KhAjhwQDmzliPsaAXEGJS9Bx9u9/qP1isidiJdoHY8KY+/TRcqVh5i3Y/nin QsZdvUP0KUEI9f6XOidHP1mYjt4T/g/BC5Vd42zPPWTtNm0k43Z2y78omyA9TTSG Os7WHqaw87WSAwwPmapxYykeDkXsuc1IAYm+mtPIns/bKGZxAxzMY6IYGGKzuTGY S2C23yTIi0IO/Q== -----END CERTIFICATE-----Generated at Fri Jul 17 09:48:24 2026 by rpki-client