$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft File: YMb7RHrtcm0u-TGkKWRERWJip_o.mft (raw, json) Hash identifier: ZNNyiQiR56ERLsrhavd6Jsg+wJAAQUQ/DtuB2EL3Ipc= Subject key identifier: 4F:AD:9B:DB:00:1D:32:38:86:09:80:47:F1:50:25:EA:5D:11:28:33 Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa Certificate serial: 01A14BAB731D7B2D4A07AAC6A6A26A56987D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft Manifest number: 0125 Signing time: Sat 17 Oct 2026 21:01:29 +0000 Manifest this update: Sat 17 Oct 2026 21:01:29 +0000 Manifest next update: Sun 18 Oct 2026 21:01:29 +0000 Files and hashes: 1: 5jZisInp8TXN2yxl-UfU7WarY0M.roa (hash: 10WHkU96QF3J0hD6hFJYOgRaUbW4Qz52pcw2Yaz9eto=) 2: DgFm4HmChjoVVXbZG_s_bmWikhA.roa (hash: 4f2ipiD6Fix8CP8oeahNwfJlqbWpC48B9lElmTb3ddg=) 3: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (hash: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=) 4: LNy8kG7KVF3mkmXJHoBxTCBaoz8.roa (hash: uTCQoqu4tgLl+7hkuwUJH7G5TlRzJ3VCqIlTxihN7Dg=) 5: NMD8IPNFkO_yB9Wza-dDaSkgBgU.roa (hash: x0WGnzY9box2ZKgxlElBXgAV9eE1/18hEUdzs9PwalY=) 6: YMb7RHrtcm0u-TGkKWRERWJip_o.crl (hash: EyE08zuwYzCnn2jEK4Y0JrP1h7AN8dtcYDvrksjNWgs=) 7: cK5MLIirkupuUC--lCax3HKVTiA.roa (hash: RMFQARPnEaD9nD+3pnJxX9R8erur18BY5dnWYniqEqk=) 8: cr0yQUYRZ5XZTIn7LmU6mw3yMFo.roa (hash: W6nw3GNA3oR+cSF8a0fITc1nGlcxnI1/yWAqPf9xzks=) 9: cyswjofwxhiLYURwBc5pQOh-uII.roa (hash: ceigelWuJhlhAehkLt//nXxIwryDIZplSDT94RKb2SI=) 10: jwUITEDlQy87pZEq-SRjBl82u54.roa (hash: HqhHIiWDUiwTfQhbTW0inXFYsA2y/bXGUsSJqG90xro=) 11: knufnAOkhguuSqCyELAEY4TVYpQ.roa (hash: iydBfT3B2FD5xanrqmT5d19Wmngm0cSNjyRo7V3YULA=) 12: m-jsfAdYgsJAa3up1fmZhioWFPA.roa (hash: uM3NhIvRZarm71/Jt0wY702d6NR+jneUoXTmHQ4dPKU=) 13: mRc91Aky3UbvamSLkFdXObfQfbE.roa (hash: fgykKC9Ar9Wj0qpW1XO3tcUvZD2JrUF5e1a0yv+Dl3s=) 14: nhSqVyjNyvOMRtAwW9liT_id7vM.roa (hash: vzkOKT7JS1jke5S4AQx+MFi6AgRTbIyNGxlbHCHGXu0=) 15: oPRftB4EZtrsQBIZftaGLH2JImI.roa (hash: bS7NKvEIFKjKdH8JbKNy6+4FrYZVsFmLR+QRWSJr1d0=) 16: r6JXotIvt8BRtWBlfGRQvAlgC_8.roa (hash: +wGsrs7z85SqSNrKEaw6MjIU3cWbV5TKC4blCEdnvQ0=) 17: uPOU1KIswQbUBvI-71sNI7bH8ZM.roa (hash: 9G7wcV68qtvKtA1uCDdRHeyjoWlmWuoi4hmwzEGp6cI=) 18: ucR12nQaE6xem-rA3wM8WEC58lg.roa (hash: tlJsSb1+n3GHhim2lpZpyqmsxDkCNqWLEQRy+8oWP+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4b:ab:73:1d:7b:2d:4a:07:aa:c6:a6:a2:6a:56:98:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa Validity Not Before: Oct 17 21:01:29 2026 GMT Not After : Oct 18 21:01:29 2026 GMT Subject: CN=4fad9bdb001d323886098047f15025ea5d112833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:9a:57:9c:ab:50:ee:eb:91:91:72:16:1a: b9:72:28:24:64:37:68:26:f8:61:95:81:80:5f:7f: fc:6b:81:dd:83:52:e9:8a:31:81:5b:2b:d7:0e:74: 74:f6:b6:ea:00:fd:4b:d7:48:df:1a:53:2c:43:b6: 55:35:ef:64:61:1b:c1:49:85:a8:10:ae:7c:43:89: 35:dc:c4:64:db:43:c9:51:05:34:94:3d:35:54:37: 3c:6d:19:12:d7:8d:b0:bf:8b:cb:d9:80:3e:dd:fa: d8:db:b5:8c:fb:eb:ba:07:04:58:a7:7c:28:5e:85: 64:c5:1a:29:0b:0a:e6:d6:7d:42:fd:16:28:18:f3: b3:23:ea:13:e0:0e:f6:ec:f6:18:1d:a4:71:b0:66: bd:6f:4f:e3:b6:3f:f4:c2:dc:2a:76:c3:5c:1d:14: f6:cd:5c:b3:35:90:a9:b0:e6:8e:5c:14:94:35:d2: 17:66:aa:50:97:7f:b7:98:32:f8:2a:5b:d9:e0:92: 64:7d:b1:1b:be:3d:ee:ed:0c:c1:f8:49:34:e9:c7: d6:c9:b0:11:42:5a:4c:22:6a:78:83:01:d6:22:6f: 8e:9f:c7:5e:3c:69:9f:96:12:b2:a3:56:ed:4f:9b: 02:a0:ce:56:4f:4a:b1:e1:12:77:fa:14:fc:65:a3: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:9B:DB:00:1D:32:38:86:09:80:47:F1:50:25:EA:5D:11:28:33 X509v3 Authority Key Identifier: keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:dc:4c:63:3e:3b:29:b8:cb:f1:65:e8:ec:7f:49:57:c5: 4b:e8:0a:8a:89:f8:5e:75:1f:31:c6:35:ef:5c:4b:30:72:02: fc:a0:2c:cc:9e:46:2c:07:8e:c1:8b:c0:26:0e:63:69:21:a1: 06:87:fc:6e:0e:84:02:22:f5:37:d7:39:ea:19:67:46:52:4d: 84:9a:6d:b9:90:4d:9f:5d:37:ea:c7:43:17:e3:3b:f0:ff:e9: 8d:06:24:99:5b:eb:92:6a:25:b1:15:cf:e7:52:71:37:9b:93: 9e:32:ac:87:07:04:2b:03:7e:f8:96:cd:a6:21:75:22:26:66: c4:e4:6f:22:bc:20:2e:b1:d4:03:28:84:6b:64:8a:fc:94:88: 5d:62:fa:ba:08:cb:7f:7e:13:17:84:19:f2:20:af:11:1a:93: 83:5d:f2:c6:60:ea:93:a5:87:b3:eb:f1:6b:62:32:78:5a:d8: 87:4e:66:46:b3:14:77:b4:7e:2c:3a:0d:b6:d8:ad:4a:05:34: b3:b9:5c:6d:57:2b:df:fd:91:5a:01:a1:e1:62:a3:ab:8d:f9: 9c:5f:5e:af:75:b6:97:c8:11:6b:25:37:99:66:a5:01:2c:9c: f5:d7:f9:5d:9f:5c:01:d8:33:37:9d:b7:f9:71:bb:b1:b4:78: a8:28:a5:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFLq3Mdey1KB6rGpqJqVph9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzZmYjQ0N2FlZDcyNmQyZWY5MzFhNDI5NjQ0NDQ1NjI2 MmE3ZmEwHhcNMjYxMDE3MjEwMTI5WhcNMjYxMDE4MjEwMTI5WjAzMTEwLwYDVQQD Eyg0ZmFkOWJkYjAwMWQzMjM4ODYwOTgwNDdmMTUwMjVlYTVkMTEyODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1saaV5yrUO7rkZFyFhq5cigkZDdo JvhhlYGAX3/8a4Hdg1LpijGBWyvXDnR09rbqAP1L10jfGlMsQ7ZVNe9kYRvBSYWo EK58Q4k13MRk20PJUQU0lD01VDc8bRkS142wv4vL2YA+3frY27WM++u6BwRYp3wo XoVkxRopCwrm1n1C/RYoGPOzI+oT4A727PYYHaRxsGa9b0/jtj/0wtwqdsNcHRT2 zVyzNZCpsOaOXBSUNdIXZqpQl3+3mDL4KlvZ4JJkfbEbvj3u7QzB+Ek06cfWybAR QlpMImp4gwHWIm+On8dePGmflhKyo1btT5sCoM5WT0qx4RJ3+hT8ZaMiewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+tm9sAHTI4hgmAR/FQJepdESgzMB8GA1UdIwQY MBaAFGDG+0R67XJtLvkxpClkREViYqf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvWU1iN1JIcnRjbTB1LVRHa0tXUkVSV0ppcF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzTcTGM+ Oym4y/Fl6Ox/SVfFS+gKion4XnUfMcY171xLMHIC/KAszJ5GLAeOwYvAJg5jaSGh Bof8bg6EAiL1N9c56hlnRlJNhJptuZBNn1036sdDF+M78P/pjQYkmVvrkmolsRXP 51JxN5uTnjKshwcEKwN++JbNpiF1IiZmxORvIrwgLrHUAyiEa2SK/JSIXWL6ugjL f34TF4QZ8iCvERqTg13yxmDqk6WHs+vxa2IyeFrYh05mRrMUd7R+LDoNttitSgU0 s7lcbVcr3/2RWgGh4WKjq435nF9er3W2l8gRayU3mWalASyc9df5XZ9cAdgzN523 +XG7sbR4qCilKw== -----END CERTIFICATE-----Generated at Sun Oct 18 09:17:32 2026 by rpki-client